Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100934)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100934 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100911)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100911 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101157 advisory. Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100114)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100114 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO offloads ipip6tunnelxmit caches the inner IPv6 head...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100186 advisory. In the Linux kernel, the following vulnerability has been resolved: net: phy: leds: fix memory leak A network restart test on a router led to an out-of-memory...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100506)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100506 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALECOOKIE cause length before reading staleness When an ERROR chunk with a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100908)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100908 advisory. Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100939 advisory. Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101288)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101288 advisory. Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099958 advisory. In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribute parsing in mrppduparsevecattr In mrppduparsevecattr, vector...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099778)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099778 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftfib: fix stale stack leak via the OIFNAME register For NFTFIBRESULTOIFNAME the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100921)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100921 advisory. Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: compat-libtiff3 (UTSA-2026-101079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101079 advisory. A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs wh...

Unity Linux 20.1070e Security Update: python-filelock (UTSA-2026-099470)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099470 advisory. filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition allows local attackers to...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101283 advisory. Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mozjs78 (UTSA-2024-003181)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003181 advisory. Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc header...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099980 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: bound SRPRSP sense copy by the received length srpprocessrsp copies sense data from...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099902)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099902 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: add missing syscalls to read class The at variant of getxattr and listxattr are missing fr...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100935 advisory. Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101280 advisory. Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12. Tenable has extracted the preceding...