acl, attr: Multiple vulnerabilities

Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Multiple vulnerabilities have been discovered in acl and attr. Please review the CVE identifiers referenced below for details. Impact Please review the referenced C...

CVE-2026-55191

creationtimestamp| type| source ---|---|--- 2026-08-19 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthumehjgp2t 2026-08-20 00:19:32+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mthxwp2rbi2h...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.11.5 security update

Red Hat multicluster engine for Kubernetes v2.11 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

CVE-2026-8619

The HTTP service in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0, and Archer MR600 v2 crashes via NULL pointer dereference when an adjacent-network attacker sends a specially crafted HTTP request, temporarily disabling the web management interface. CVSS 4.0 base score is 7.1 (HIGH). TP-Li...

CVE-2026-8619 Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600

An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote attacker on an adjacent network can send ...

CVE-2026-76395

creationtimestamp| type| source ---|---|--- 2026-08-19 23:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtlnzlfl2l 2026-08-20 00:19:51+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mthxxar4cl2w...

CVE-2026-76404

creationtimestamp| type| source ---|---|--- 2026-08-19 23:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjphemr2m 2026-08-20 00:10:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthxfqi6lq2t 2026-08-20 03:00:06+00:00| seen|...

CVE-2026-76929

Wireshark's pcapng file parser contains an out-of-bounds read affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18, triggering a crash and denial of service when a crafted file is opened. Exploitation requires local access and user interaction; no in-the-wild exploitation is reported. Users should upg...

CVE-2026-76928

Wireshark's X.509IF protocol dissector crashes via a NULL pointer dereference in versions 4.4.0–4.4.18 and 4.6.0–4.6.7. CVSS 7.5 HIGH; network-based DoS requiring no authentication. Affected users should upgrade to a patched release; see wnpa-sec-2026-87 for details.

CVE-2026-76927

Wireshark versions 4.6.0–4.6.7 and 4.4.0–4.4.18 contain a null pointer dereference in the H.245 protocol dissector, causing an application crash and denial of service (CVSS 4.7, MEDIUM) when a crafted packet is processed. No patch version or exploitation details are provided in the documents.

CVE-2026-76926

Wireshark (versions 4.6.0–4.6.7 and 4.4.0–4.4.18) contains a reachable assertion in the BUSMASTER file parser, causing abnormal exit and denial of service. The flaw is exploitable over the network with high complexity and requires user interaction (opening a crafted file). CVSS 3.1 scores it LOW ...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.3 security update

Red Hat Advanced Cluster Management for Kubernetes v2.16 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

CVE-2026-76850

creationtimestamp| type| source ---|---|--- 2026-08-19 22:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx 2026-08-19 23:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r 2026-08-20 00:10:12+00:00| seen|...

CVE-2026-76589

creationtimestamp| type| source ---|---|--- 2026-08-19 22:48:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fyps7rs64drt 2026-08-19 23:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjwdbfm2z 2026-08-20 04:30:26+00:00| seen|...

CVE-2026-76891

Wireshark's sharkd component (versions 4.6.0–4.6.7 and 4.4.0—4.4.18) crashes due to an expired pointer dereference, causing denial of service. CVSS 3.1 rates it LOW (3.1). References: wireshark.org/security/wnpa-sec-2026-64.html, gitlab.com/wireshark/wireshark/-/work_items/21395. Exploitation sta...

CVE-2026-76890

Wireshark's sharkd service crashes via expired pointer dereference in versions 4.6.0–4.6.7 and 4.4.0–4.4.18, enabling remote denial of service. CVSS 3.1 LOW (network attack, high complexity, no privileges). No exploitation details are provided; update to a patched version per the Wireshark securi...

CVE-2026-76923

Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76922

Wireshark's Bluetooth BR/EDR FHS protocol dissector has a null pointer dereference causing a crash (DoS). Affected versions: 4.4.0–4.4.18 and 4.6.0–4.6.7. CVSS 5.5 (medium). No exploitation details provided. Upgrade to a patched version. See wnpa-sec-2026-80 for details.

CVE-2026-76920

Wireshark versions 4.6.0–4.6.7 and 4.4.0–4.4.18 contain an out-of-bounds write in the 3GPP phone log file parser, triggered by a crafted log file, causing a denial-of-service crash. CVSS 4.7 (Medium) requires local access and user interaction. No in-the-wild exploitation is reported; upgrade to a...

CVE-2026-76760

In chenhg5 cc-connect up to version 1.4.1, the Authenticate function in core/webhook.go injects the attacker-controlled exec argument directly into command execution, enabling unauthenticated remote code injection over the network. CVSS 3.1 rates this HIGH (7.3). No patch version or exploit detai...