USN-8651-1: curl vulnerability
It was discovered that curl incorrectly handled reusing connections when the origin changed between transfers. A remote attacker
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
DSA-6451-1 firefox-esr – security update
https://security-tracker.debian.org/tracker/DSA-6451-1
3 sources
RHSA-2026:55776: Moderate: OpenJDK 8u504 Security Update for Portable Linux Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a
Connected reporting, one intelligence threadaccess.redhat.com
2 sources
RHSA-2026:55783: Moderate: OpenJDK 17.0.20.1 Security Update for Windows Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a
Connected reporting, one intelligence threadaccess.redhat.com
USN-8650-1: Cap’n Proto vulnerabilities
Chanho Kim and Jihyeok Han discovered that Cap’n Proto incorrectly handled negative Content-Length values or excessively large chunk
3 sources
RHSA-2026:54544: Important: OpenShift Container Platform 4.18.53 bug fix and security update
Red Hat OpenShift Container Platform release 4.18.53 is now available with updates to packages and images that fix
Connected reporting, one intelligence threadaccess.redhat.com
2 sources
RHSA-2026:56963: Important: gegl04 security update
An update for gegl04 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
Connected reporting, one intelligence threadaccess.redhat.com
Cisco Secure Workload Software Security Hardening Release: August 2026
As part of Cisco’s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team
Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an
Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE)
USN-8649-1: libheif vulnerabilities
It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was