Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100942)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100942 advisory. Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099985)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099985 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099761)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099761 advisory. In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a single...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101369)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101369 advisory. Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100928)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100928 advisory. Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that wit...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100877 advisory. When a file download is specified via the Content-Disposition header, that directive would be ignored if the file was included via a or tag, potentially making a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100964)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100964 advisory. Use-after-free in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101359)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101359 advisory. Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101164 advisory. JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100707)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100707 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100904)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100904 advisory. Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101481 advisory. Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101287)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101287 advisory. Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101093 advisory. Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and...

Unity Linux 20.1070e Security Update: rubygem-excon (UTSA-2026-099493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099493 advisory. Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101353 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable has extract...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101324 advisory. This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101327 advisory. Use-after-free in MediaTrackGraphImpl::GetInstance. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100896 advisory. A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100932)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100932 advisory. Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12...