🟢 Low ⏱ 5–15 min Last verified: 25 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4129 Upstream summary: CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5050188 • MSRC update-guide entry Related CVEs: CVE-2025-21176 Affected components: Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟡 Medium ⏱ 10–30 min Last verified: 25 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8215-1 Related CVEs: CVE-2026-40372 CVE-2026-33116 CVE-2026-32178 CVE-2026-32203 CVE-2026-26171 CVE-2026-26127 CVE-2026-26130 CVE-2026-21218 Upstream summary: It was discovered that the Microsoft.AspNetCore.DataProtection library in .NET did not properly verify cryptographic signatures under certain […]
🟡 Medium ⏱ 10–30 min Last verified: 25 March 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7661-1 Related CVEs: CVE-2025-43970 CVE-2023-46565 CVE-2025-43973 CVE-2025-43971 CVE-2025-43972 Upstream summary: It was discovered that GoBGP did not properly manage memory under certain circumstances, which could lead to a buffer overflow. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0015-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-12764 CVE-2025-12765 CVE-2025-9636 CVE-2025-27152 CVE-2024-38998 CVE-2024-38999 CVE-2024-9014 CVE-2024-4068 +6 more Upstream summary: pgAdmin <= 9.9 is affected by an LDAP injection vulnerability in the […]
🟢 Low ⏱ 5–15 min Last verified: 25 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7949-1 Related CVEs: CVE-2025-69277 Upstream summary: It was discovered that Sodium incorrectly handled the elliptic curve point validity check in certain atypical use cases. This could result in invalid points […]
🟡 Medium ⏱ 10–30 min Last verified: 25 March 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8202-3 Related CVEs: CVE-2026-40164 https://bugs.launchpad.net/ubuntu/+source/jq/+bug/2152052 CVE-2026-39956 CVE-2026-33947 CVE-2026-39979 CVE-2026-33948 CVE-2026-32316 CVE-2024-23337 +1 more Upstream summary: USN-8202-1 fixed vulnerabilities in jq. The update caused a regression for Ubuntu 18.04 LTS and […]
🟡 Medium ⏱ 10–30 min Last verified: 25 March 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1659-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-5958 Upstream summary: When sed is invoked with both -i (in-place edit) and –follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 March 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2026-1831 Related CVEs: CVE-2025-11234 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:3407 Related CVEs: CVE-2025-59375 Upstream summary: MinGW Windows Fontconfig library. Security Fix(es): * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted […]
