Unity Linux 20.1070e Security Update: texlive-base (UTSA-2026-104941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104941 advisory. The SyncTeX parser synctexparser.c shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-002304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002304 advisory. In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nlaneststart nlaneststart may fail and return NULL. Insert a check and set...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001433 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of ST...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-104993)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104993 advisory. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII- only label. For example, ToUnicodexn--example-.com incorrectl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001508)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001508 advisory. In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The rule activity upda...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002887)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002887 advisory. In the Linux kernel, the following vulnerability has been resolved: block/rnbd-srv: Check for unlikely string overflow Since devsearchpath can technically be as lar...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001461 advisory. In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6routempathnotify syzbot found another use-after-free in...

Unity Linux 20.1070e Security Update: gawk (UTSA-2026-104943)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104943 advisory. Integer overflow vulnerability has been found in builtin.c program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could b...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001499 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsiccgupdatesetnewcamcmd The cmd variable can be...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002835)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002835 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: ep93xx: Add terminator to gpiodlookuptable Without the terminator, if a conid is passed to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001404 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up for an...

Unity Linux 20.1070e Security Update: gawk (UTSA-2026-104951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104951 advisory. Use After Free vulnerability has been found in io.c program file of gawk dogetlineredir routine. This issue may lead to a crash. It affectsgawk in versions 5.4.0 and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001420)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001420 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment at card init The commit 81033c6b584b ALSA: core:...

CVE-2026-55857

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysqlclearpassword plugin is gated behin...

CVE-2026-55854

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js can disclose an account password when PAM dialog authentication is negotiated over an insecure transport. In...

CVE-2026-55856

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects with sslMode=verify-full or sslMode=verify-ca, supplies a password, and does not configure serverSslCert or trustStore,...

GHSA-QXVW-FVWX-5CP7 org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

Summary When PAM dialog authentication is used, the connector can be coerced into sending the account password in cleartext over an insecure connection. A hostile or man-in-the-middle server can trigger this with the default configuration, disclosing the user's password. Details The...

org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

Summary When PAM dialog authentication is used, the connector can be coerced into sending the account password in cleartext over an insecure connection. A hostile or man-in-the-middle server can trigger this with the default configuration, disclosing the user's password. Details The...

EUVD-2026-68020

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysqlclearpassword plugin is gated behin...

CVE-2026-55857 MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysqlclearpassword plugin is gated behin...