USN-8326-1: Foomuuri vulnerabilities
Matthias Gerstner discovered that Foomuuri’s D-Bus service did not properly enforce authorization. An unprivileged local attacker could possibly
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Linux Advisories
RHSA-2026:21394: Important: cockpit security update
An update for cockpit is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
USN-8325-1: tgt vulnerability
It was discovered that tgt incorrectly tried to achieve entropy by calling rand without srand. An attacker could
USN-8323-1: Postorius vulnerability
It was discovered that Postorius did not properly escape HTML in message subjects when rendering the Held messages
USN-8324-1: Apache Tika vulnerabilities
It was discovered that Apache Tika incorrectly handled XML external entities when parsing XFA content in PDF files.
USN-8322-1: Apache Commons BeanUtils vulnerability
It was discovered that Apache Commons BeanUtils incorrectly allowed access to the declaredClass property of Java enum objects
RHSA-2026:21390: Important: cockpit security update
An update for cockpit is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat
RHSA-2026:21382: Important: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
RHSA-2026:21381: Important: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has
USN-8321-1: Papers vulnerability
It was discovered that Papers incorrectly handled PDF /GoToR actions. If a user were tricked into opening a
USN-8320-1: Memcached vulnerabilities
It was discovered that Memcached’s SASL password database authentication had a timing side channel when handling username and
USN-8319-1: Libgcrypt vulnerabilities
It was discovered that Libgcrypt incorrectly handled crafted ECDH ciphertext. An attacker could possibly use this issue to