Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100899 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101279 advisory. Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this coul...

Unity Linux 20.1050e / 20.1070e Security Update: lua (UTSA-2025-000295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-000295 advisory. ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31. Tenable has extracted the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101322 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable h...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100769 advisory. In the Linux kernel, the following vulnerability has been resolved: fat: avoid parent link count underflow in rmdir Corrupted FAT images can leave a directory inode...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101488 advisory. Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100767 advisory. In the Linux kernel, the following vulnerability has been resolved: ppp: require CAPNETADMIN in target netns for unattached ioctls /dev/ppp open is currently...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100969 advisory. Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100137)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100137 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When hugepmdunshare is called to unshare a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100301 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset The kfdeventpageset function writes...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100149 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypiclkregister devmkasprintf returns NULL when memory...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100093 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packetrelease via NETDEVUP race packetrelease has a race window where...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100744 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssauth kref leak in gssallocmsg error path Commit 5940d1cf9f42 SUNRPC: Rebalance a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100566)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100566 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix race between sctpwaitforconnect and peeloff sctpwaitforconnect drops and re-acquires th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100572)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100572 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100329 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: delete attr leaf freemap entries when empty Back in commit 2a2b5932db6758 xfs: fix attr leaf...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: sssd (UTSA-2026-100784)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100784 advisory. A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101131 advisory. Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100770 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: au1200fb: Fix a memory leak in au1200fbdrvprobe In au1200fbdrvprobe, when platformgetirq...

Unity Linux 20.1070a Security Update: osbuild-composer (UTSA-2026-101300)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101300 advisory. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption...