USN-8587-1: HTML-Parser vulnerability
It was discovered that HTML-Parser incorrectly handled entity references when the input string was identical to an entity
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Linux Advisories
USN-8584-1: GStreamer Good Plugins vulnerabilities
It was discovered that GStreamer Good Plugins incorrectly handled certain Matroska files. An attacker could possibly use this
USN-8585-1: Kerberos vulnerabilities
It was discovered that Kerberos had an integer underflow vulnerability in the berval2tl_data() function. An attacker could possibly
USN-8583-1: GIFLIB vulnerabilities
It was discovered that GIFLIB incorrectly handled certain GIF image files. If a user or automated system were
RHSA-2026:43575: Moderate: gnutls security update
An update for gnutls is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat
RHSA-2026:43513: Moderate: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
RHSA-2026:43401: Important: Red Hat JBoss Web Server 6.2.4 release and security update
Red Hat JBoss Web Server 6.2.4 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise
USN-8582-1: jbig2dec vulnerabilities
Zeng Yunxiang and Song Jiaxuan discovered that jbig2dec had an out-of-bounds read vulnerability in its command-line tool. An
2 sources
USN-8580-1: AccountsService vulnerabilities
It was discovered that the Ubuntu-specific SetLanguage patch to AccountsService incorrectly handled dropping privileges. A local attacker could
Connected reporting, one intelligence threadubuntu.com
5 sources
USN-8579-1: snapd vulnerabilities
James Henstridge discovered that snapd’s default apparmor template did not restrict access to systemd-userdbd varlink interface. A local
Connected reporting, one intelligence threadubuntu.com · cybersecuritynews.com · thehackernews.com · 2 more sources
DSA-6393-1 linux – security update
https://security-tracker.debian.org/tracker/DSA-6393-1
USN-8578-1: CUPS control character injection vulnerability
It was discovered that CUPS did not properly filter control characters in IPP string attributes and PPD keywords.