Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100301 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset The kfdeventpageset function writes...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix race condition during PASID entry replacement CVE-2026-45945 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked...

MINI-RX2W-CPGP-5VM4

Bulletin has no description...

MINI-726J-MJC6-W9M8

Bulletin has no description...

MINI-9P3P-M3QV-J7V3

Bulletin has no description...

MINI-H7G3-497M-QGHQ

Bulletin has no description...

MINI-XRR9-FVG9-7Q3C

Bulletin has no description...

MINI-75JM-X7H5-R3VM

Bulletin has no description...

MINI-H8JM-9R6M-X44M

Bulletin has no description...

MINI-HG23-RPX9-FV4W

Bulletin has no description...

MINI-RFV3-CXR5-6G82

Bulletin has no description...

MINI-97HQ-JQCX-5WPP

Bulletin has no description...

MINI-R7CV-JR9Q-PWCW

Bulletin has no description...

MINI-8R67-FP44-C6FM

Bulletin has no description...

MINI-XGGC-G73W-42C5

Bulletin has no description...

CVE-2026-74789

Scriban before 7.0.0 affected = 6.6.0 applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operators and functions. As a result, a single expression such as 1..1000000 | array.size — or a memory-amplification expression such as '...

CVE-2026-74786

Scriban before 7.0.0 affected versions = 6.6.0 contains a denial-of-service vulnerability in which the LimitToString safety limit default 1MB can be bypassed because ObjectToString resets the per-call length counter currentToStringLength on every top-level call and StringBuilderOutput enforces no...

CVE-2026-74788

Scriban before 7.0.0 affected versions = 6.6.0 contains an uncontrolled memory allocation vulnerability in the string.padleft and string.padright template functions, which perform no validation on the width parameter before delegating to .NET's String.PadLeft/PadRight. When an application exposes...

CVE-2026-73057

stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by memory exhaustion. Attackers can host malicious SVGs with extremely large width and height values and trigger concurrent requests to exhaust available memory...

CVE-2026-73062

Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operator that allocates memory without enforcing LoopLimit or overflow-safe arithmetic checks. Attackers can supply a large integer multiplier in a template to force multi-gigabyte memory...