RHSA-2026:34156: Moderate: rrdtool security update
An update for rrdtool is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Linux Advisories
USN-8487-1: curl vulnerabilities
Andrew Nesbitt discovered that curl could reuse an existing live connection during STARTTLS-based connection upgrades even when the
DSA-6374-1 nginx – security update
https://security-tracker.debian.org/tracker/DSA-6374-1
RHSA-2026:33632: Low: libxml2 security update
An update for libxml2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
RHSA-2026:33635: Low: libxml2 security update
An update for libxml2 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat
RHSA-2026:33633: Low: libxml2 security update
An update for libxml2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
RHSA-2026:33634: Low: libxml2 security update
An update for libxml2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
2 sources
USN-8486-1: libssh2 vulnerabilities
It was discovered that libssh2 incorrectly handled the sftp_symlink() function. A malicious SSH server or machine-in-the-middle attacker could
Connected reporting, one intelligence threadubuntu.com · thehackernews.com
USN-8485-1: libyang vulnerability
It was discovered that libyang incorrectly handled certain metadata list pointers. An attacker could use this issue to
2 sources
USN-8483-1: HPLIP vulnerabilities
It was discovered that HPLIP incorrectly handled certain print data. An attacker could possibly use this issue to
Connected reporting, one intelligence threadubuntu.com · cybersecuritynews.com
USN-8484-1: GD.pm vulnerability
It was discovered that GD.pm incorrectly handled filename arguments. An attacker could possibly use this issue to execute
2 sources
USN-8482-1: Roundcube Webmail vulnerability
It was discovered that Roundcube Webmail was prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in
Connected reporting, one intelligence threadubuntu.com