Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101339 advisory. Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100558)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100558 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference urb after calling...

Unity Linux 20.1050e / 20.1070-8ae / 20.1070e Security Update: openjpeg2 (UTSA-2024-003847)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003847 advisory. A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099710)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099710 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Release the VGA arbiter client on registerdevice failure The re-order in the Fixes comm...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100135 advisory. In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101333)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101333 advisory. Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101170)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101170 advisory. Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100924 advisory. Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable has...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100372 advisory. In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is supposed to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100319 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91gpioprobe doesn't check that given OF alia...

Unity Linux 20.1070e Security Update: gzip (UTSA-2026-099524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099524 advisory. GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompressi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100346 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: validate MPLS set/setmasked payload length validateset accepted OVSKEYATTRMPLS as...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100953 advisory. Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101281 advisory. A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100898)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100898 advisory. Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099457 advisory. An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. ASGI requests with a missing or understated Content-Length header can bypass the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100318 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double free in prussclkmuxsetup In the prussclkmuxsetup, the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100941 advisory. Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101148)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101148 advisory. A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macO...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100920)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100920 advisory. A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability was...