🟡 Medium ⏱ 10–30 min Last verified: 20 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-32275 CVE-2021-41736 CVE-2021-41737 CVE-2023-37770 Upstream summary: An issue was discovered in faust through v2.30.5. A NULL pointer dereference exists in the function CosPrim::computeSigOutput() located in cosprim.hh. It allows […]
🟢 Low ⏱ 5–15 min Last verified: 20 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-18359 Upstream summary: PostGIS 2.x before 2.3.3, as used with PostgreSQL, allows remote attackers to cause a denial of service via crafted ST_AsX3D function input, as demonstrated by an […]
🟡 Medium ⏱ 10–30 min Last verified: 20 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libgcrypt — ECDSA timing attack Related CVEs: CVE-2013-4242 CVE-2015-7511 CVE-2016-6313 CVE-2017-0379 CVE-2017-7526 CVE-2018-0495 CVE-2019-13627 Upstream summary: GnuPG reports: Mitigate an ECDSA timing attack. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 20 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-25885 Upstream summary: An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service (ReDOS) via supplying a crafted […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:0606 Related CVEs: CVE-2025-14242 Upstream summary: The vsftpd packages include a Very Secure File Transfer Protocol (FTP) daemon, which is used to serve files over a network. Security Fix(es): * […]
🟠 High ⏱ 15–60 min Last verified: 20 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-1614 CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5977 CVE-2017-5978 CVE-2017-5979 CVE-2017-5980 +12 more Upstream summary: Stack-based buffer overflow in the zzip_open_shared_io function in zzip/file.c in ZZIPlib Library before 0.13.49 allows user-assisted […]
🟡 Medium ⏱ 10–30 min Last verified: 20 December 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8123-1 Related CVEs: CVE-2025-47917 CVE-2021-44732 CVE-2025-48965 CVE-2025-52497 CVE-2025-52496 CVE-2025-27810 CVE-2024-23775 Upstream summary: It was discovered that Mbed TLS incorrectly handled memory allocation failures. A remote attacker could possibly use this […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.2.4-r3 📖 ~4 min read • Source: Alpine secdb entry — musl 1.2.4-r3 Related CVEs: CVE-2025-26519 CVE-2020-28928 CVE-2019-14697 CVE-2016-8859 Upstream summary: Alpine main repository for vv3.18 ships musl 1.2.4-r3 which addresses CVE-2025-26519. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 20 December 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7772-1 Related CVEs: CVE-2025-58068 https://launchpad.net/bugs/2125423 Upstream summary: It was discovered that Eventlet incorrectly handled certain requests. An attacker could possibly use this issue to bypass front-end security controls, launch targeted […]
🟡 Medium ⏱ 10–30 min Last verified: 20 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2018:1128-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000156 Upstream summary: GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in […]
