PT-2026-102126

Security vulnerability affects the icu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100694

Security vulnerability affects the icu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102181

Security vulnerability affects the icu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100966

Security vulnerability affects the icu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100707

Security vulnerability affects the icu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-99829

Multiple security vulnerabilities affect the icu package. A stack buffer overflow was found in Internationl components for unicode ICU . See references for individual vulnerability details...

PT-2026-100090

Security vulnerability affects the icu package. This issue is resolved in later releases. See references for vulnerability details...

Astra Linux – Vulnerability in Thunderbird

To protect ICU from exploitation, the behavior for out-of-memory conditions has been changed to a crash instead of attempting to continue. This vulnerability affects Firefox ESR 115.9 and Thunderbird 115.9...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.43 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.43 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.53 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.34 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Photon OS 5.0: Icu PHSA-2025-5.0-91-0578

An update of the icu package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0578. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Icu PHSA-2025-5.0-92-0578

An update of the icu package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0578. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Bulletin: IBM Storage Protect for Space Management is vulnerable to cross-site scripting due to Angular (CVE-2026-27970)

Summary IBM Storage Protect for Space Management uses Angular to provide web-based user interface components. A cross-site scripting XSS vulnerability in the Angular internationalization i18n pipeline could allow attacker-controlled JavaScript to execute if a malicious translation file is...

CVE-2026-46458

CVE-2026-46458 affects ICU Scandinavia Boomerang. An information-disclosure flaw allows an unauthenticated attacker to retrieve plaintext credentials by requesting specific XML files from the webroot over static HTTP. The root cause is exposure of sensitive credential files via static HTTP paths....

CVE-2026-46458 Credential exposure in ICU Scandinavia Boomerang

ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP. This allows an unauthenticated remote attacker to retrieve plaintext service account and SMTP credentials by requesting specific XML files from the webroot. This...

CVE-2026-46459: Missing Authorization

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database. This issue has been fixed in version 2.4.18.029...

CVE-2026-46458: Insufficiently Protected Credentials

ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP. This allows an unauthenticated remote attacker to retrieve plaintext service account and SMTP credentials by requesting specific XML files from the webroot. This...

PT-2026-60165

ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP. This allows an unauthenticated remote attacker to retrieve plaintext service account and SMTP credentials by requesting specific XML files from the webroot. This...

CVE-2026-46629 Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled arguments

Twig is a template language for PHP. Prior to 3.26.0, twig/intl-extra memoises IntlDateFormatter and NumberFormatter instances in arrays keyed by template-controlled filter arguments such as locale, pattern, and attrs, allowing a template to allocate many ICU formatter objects that remain pinned...