Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100584)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100584 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When hugepmdunshare is called to unshare a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100767 advisory. In the Linux kernel, the following vulnerability has been resolved: ppp: require CAPNETADMIN in target netns for unattached ioctls /dev/ppp open is currently...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099512)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099512 advisory. Improper neutralization of newlines in pgdump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100705)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100705 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue befor...

Unity Linux 20.1070e Security Update: rubygem-excon (UTSA-2026-099493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099493 advisory. Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following...

Unity Linux 20.1070a Security Update: osbuild-composer (UTSA-2026-101351)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101351 advisory. gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 :pat...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101093 advisory. Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101119 advisory. Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101348 advisory. Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. Tenable ha...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101169)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101169 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.2.1 through...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100124 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: fix use-after-free in timeout object destroy nftcttimeoutobjdestroy frees the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101168)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101168 advisory. Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100314)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100314 advisory. In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigdsend Reproducer available at 1. The AT...

Unity Linux 20.1070a Security Update: libpq (UTSA-2026-099548)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099548 advisory. Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101323 advisory. Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100165 advisory. In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wledconfigure devmkasprintf returns NULL when memory...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100932)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100932 advisory. Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101162)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101162 advisory. Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenabl...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101084 advisory. Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.1...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100895)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100895 advisory. A privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. Copying a URL from W...