Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101152 advisory. Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100300)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100300 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue UAF There is a teardown order issue in the driver. T...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101097)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101097 advisory. Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101139 advisory. Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101165 advisory. Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6. Tenable ha...

Unity Linux 20.1070a Security Update: libreoffice (UTSA-2026-099544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099544 advisory. LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening tokens...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2026-100777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100777 advisory. Unity Link Advisory UTSA-2026-100777 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101277 advisory. Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenabl...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101156 advisory. Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099893)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099893 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in error path In the errputbuffers cleanup path of...

Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099511 advisory. Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JS...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101125)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101125 advisory. Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100538 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderthreadrelease When a thread exits, binderthreadrelease walks its...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099474 advisory. ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100974 advisory. A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100736 advisory. In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistentramsaveold persistentramsaveold can be called multip...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100104 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix potential NULL pointer dereference Klocwork tool reported 'curdsd' may be...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100343 advisory. In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100928)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100928 advisory. Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that wit...

Unity Linux 20.1070e Security Update: gvfs (UTSA-2026-099541)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099541 advisory. A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing...