USN-8520-1: Expat vulnerability
It was discovered that Expat used insufficient entropy when generating hash salt values for its internal hash table.
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Linux Advisories
USN-8519-1: Go Cryptography vulnerabilities
Jakub Ciolek and Nicola Murino discovered that Go Cryptography incorrectly handled SSH agent responses. An attacker could use
RHSA-2026:34757: Moderate: OpenShift Container Platform 4.19.37 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.37 is now available with updates to packages and images that fix
RHSA-2026:37249: Moderate: libreoffice security update
An update for libreoffice is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
RHSA-2026:37251: Moderate: libreoffice security update
An update for libreoffice is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
RHSA-2026:37250: Moderate: libreoffice security update
An update for libreoffice is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
RHSA-2026:37129: Important: gstreamer1-plugins-good security update
An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has
RHSA-2026:37130: Important: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
RHSA-2026:37070: Moderate: perl:5.32 security update
An update for the perl:5.32 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical
DSA-6385-1 pgextwlist – security update
https://security-tracker.debian.org/tracker/DSA-6385-1
USN-8518-1: mailcap vulnerability
Aaron Rainbolt discovered that the cautious-launcher utility in the mailcap package did not properly restrict the execution of
DSA-6384-1 chromium – security update
https://security-tracker.debian.org/tracker/DSA-6384-1