Unity Linux 20.1070a Security Update: osbuild-composer (UTSA-2026-101351)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101351 advisory. gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 :pat...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101105)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101105 advisory. Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From header...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101332 advisory. Thunderbird's handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the file:/// context. By crafting a nested email...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101374)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101374 advisory. Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenab...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100773)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100773 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: reject fusenotify pagecache ops on directories The operations FUSENOTIFYSTORE and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100735 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: caif: fix use-after-free in caifserial ldiscclose There is a use-after-free bug in...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099457 advisory. An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. ASGI requests with a missing or understated Content-Length header can bypass the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100179)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100179 advisory. In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is supposed to...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100166 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos: exynos7drmdecon: add vblank check in IRQ handling If there's support for another...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101367 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101281 advisory. A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100351)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100351 advisory. In the Linux kernel, the following vulnerability has been resolved: net: rfkill: prevent unlimited numbers of rfkill events from being created Userspace can create a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100362)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100362 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix incorrect freeirq variable The handler for the IRQ part of this driver is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100709 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4extshiftextents In ext4extshiftextents, if the extent is NULL in the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101093 advisory. Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100754)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100754 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: goldfish: Fix use-after-free in powersupplychanged Using the devm variant for...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101107 advisory. Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099964)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099964 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue befor...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099715 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double free in prussclkmuxsetup In the prussclkmuxsetup, the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101339 advisory. Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume...