Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010848)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010848 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: api - Use work queue in cryptodestroyinstance The function cryptodropspawn expects to be...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010737)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010737 advisory. A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939sessiondestroy of the file net/can/j1939/transport.c. The...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011256)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011256 advisory. In the Linux kernel, the following vulnerability has been resolved: dm thin: Fix UAF in runtimersoftirq When dmresume and dmdestroy are concurrent, it will lead to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011032 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 apparmor: share profile nam...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010787)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010787 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy target device if coalesced MMIO unregistration fails Destroy and free the target...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013026)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013026 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: api - Use work queue in cryptodestroyinstance The function cryptodropspawn expects to be...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011129 advisory. In the Linux kernel, the following vulnerability has been resolved: dm clone: Fix UAF in clonedtr Dmclone also has the same UAF problem when dmresume and dmdestroy a...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010885)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010885 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: add idatasem protection in ext4destroyinlinedatanolock Fix a race between inline data...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010939 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: Fix several use-after-free bugs Several types of UAFs can occur when physically...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011198)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011198 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache: Fix UAF in destroy Dmcache also has the same UAF problem when dmresume and dmdestroy ar...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007598)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007598 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache: free background tracker's queued work in btrackerdestroy Otherwise the kernel can BUG...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007418)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007418 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: nullify cq-dbg pointer in mlx5debugcqremove Prior to this patch in case...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007314)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007314 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting...

ImageMagick has a Stack Overflow in DestroyXMLTree()

Magick frees the memory of the XML tree via the DestroyXMLTree function; however, this process is executed recursively with no depth limit imposed. When magick processes an XML file with deeply nested structures, it will exhaust the stack memory, resulting in a Denial of Service DoS attack...

Uncontrolled Recursion

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

Uncontrolled Recursion

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Uncontrolled Recursion

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the DestroyXMLTree function. An attacker can cause the application to exhaust stack memory and terminate unexpectedly by submitting an XML file with deeply nested structures. Remediation A fix was pushed into t...

CVE-2026-33908 ImageMagick is vulnerable to Stack Overflow in DestroyXMLTree()

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, Magick frees the memory of the XML tree via the DestroyXMLTree function; however, this process is executed recursively with no depth limit imposed. When...

ImageMagick 安全漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-19 and 6.9.13-44 contained security vulnerabilities. These vulnerabilities stemmed from the...