Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100170)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100170 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpiregister error paths Commit 01af542392b5 usb: ulpi: fix double...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100384)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100384 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Use usbbulkmsgkillable with user-specified timeouts The usbtmc driver accepts timeou...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101106 advisory. This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26....

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101112)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101112 advisory. Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101299 advisory. Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 14...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100323 advisory. In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099457 advisory. An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. ASGI requests with a missing or understated Content-Length header can bypass the...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: mozjs78 (UTSA-2024-003380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003380 advisory. xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100577)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100577 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099936)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099936 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfsvalidatebblk Reject ADFS disc records with a zero zone count duri...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101078 advisory. Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099947)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099947 advisory. In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't dump the entire memory region The current logic at cperprintfwerr doesn't check i...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101327 advisory. Use-after-free in MediaTrackGraphImpl::GetInstance. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101356 advisory. Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100544 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099517)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099517 advisory. Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocati...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099458 advisory. libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101370)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101370 advisory. Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. Tenable has extract...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101147)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101147 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5,...

Unity Linux 20.1070e Security Update: libxml2 (UTSA-2026-099459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099459 advisory. libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function processes user input...