Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099894 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: flowlabel: defer exclusive option free until RCU teardown ip6flseqshow walks the globa...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099907)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099907 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix use-after-free on inexact bin in xfrmpolicybyselctx Fix the race by pruning the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100953 advisory. Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100346 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: validate MPLS set/setmasked payload length validateset accepted OVSKEYATTRMPLS as...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099911)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099911 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Limit the length of unkillable synchronous timeouts The usbcontrolmsg, usbbulkmsg, and...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099737)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099737 advisory. In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100547)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100547 advisory. In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic 1 2. When an IPv6 nextho...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099924 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a...

Unity Linux 20.1070e Security Update: gzip (UTSA-2026-099524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099524 advisory. GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompressi...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099771)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099771 advisory. In the Linux kernel, the following vulnerability has been resolved: net: wan/fslucchdlc: Fix dmafreecoherent in uhdlcmemclean The priv-rxbuffer and priv-txbuffer are...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100383)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100383 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: replace riofreenet with kfree in rioscanallocnet When idtab allocation fails, net is not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100955)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100955 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100184 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: check that raw node were preallocated before writing summary Syzkaller detected a kernel b...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100963)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100963 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable h...

Unity Linux 20.1070e Security Update: elfutils (UTSA-2026-099529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099529 advisory. A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelfgetsymshndx of the file strip.c of th...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100924 advisory. Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable has...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100564 advisory. In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput called from fusereleaseend can Oops if the super block...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099985)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099985 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100504 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in bpfmsgpushdata When the scatterlist ring is full o...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101314)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101314 advisory. Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enou...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100560)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100560 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6tnl.net in vti6changelink. ip netns add ns1 ip netns add ns2 ip -n ns1 link add...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100942)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100942 advisory. Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099534 advisory. Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099692)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099692 advisory. In the Linux kernel, the following vulnerability has been resolved: mfd: crosec: Delay devsetdrvdata until probe success If ecdeviceprobe fails, crosecclassrelease...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100756)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100756 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqesize before using it in ibuverbspostsend ibuverbspostsend uses cmd.wqesi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101298 advisory. Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enou...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099712)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099712 advisory. In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock FD links procpidgetlink and procpidreadlink...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100958 advisory. Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100302 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qptype to join multicast only As for multicast: - The SIDR is the only mode th...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101316 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. Tenable ha...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100915 advisory. Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101166 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100747 advisory. In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorrect sizeof in phys array reallocation The krealloc call for...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101336)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101336 advisory. Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally. When an email is opened, Thunderbird accesse...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099906)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099906 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpackreceivebuf sixpackreceivebuf does not properly...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100135 advisory. In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099710)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099710 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Release the VGA arbiter client on registerdevice failure The re-order in the Fixes comm...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2026-100783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100783 advisory. Unity Link Advisory UTSA-2026-100783 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101159)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101159 advisory. Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100760 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Reco...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100691)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100691 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101145 advisory. Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100182)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100182 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: validate extension header length before copying to cmsg ip6datagramrecvspecificctl builds...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100125)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100125 advisory. In the Linux kernel, the following vulnerability has been resolved: net: rds: clear isends on setup unwind The RDS IB connection teardown path is written so it can r...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100310 advisory. In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100919 advisory. A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099747 advisory. In the Linux kernel, the following vulnerability has been resolved: sched/rt: Skip currently executing CPU in rtonextcpu CPU0 becomes overloaded when hosting a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100304 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xttcpmss: check remaining length before reading optlen Quoting reporter: In...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099482)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099482 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not match Cache-Control respon...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099513)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099513 advisory. Symlink following in PostgreSQL pgbasebackup plain format and in pgrewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that...