🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:7667 Related CVEs: CVE-2026-27135 CVE-2023-44487 CVE-2020-11080 CVE-2024-28182 Upstream summary: libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: Denial of Service […]
🟠 High ⏱ 15–60 min Last verified: 22 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2025:17428 (see also SUSE bugzilla) Related CVEs: CVE-2025-41244 CVE-2022-31676 CVE-2023-20900 CVE-2023-34058 CVE-2023-34059 CVE-2015-5191 CVE-2023-20867 CVE-2025-22247 Upstream summary: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local […]
🔴 Critical ⏱ 15–90 min Last verified: 22 March 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2024:4391-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-41110 CVE-2014-8178 CVE-2014-8179 CVE-2014-9356 CVE-2014-9357 CVE-2015-3629 CVE-2015-3630 CVE-2019-14271 +12 more Upstream summary: Moby is an open-source project created by Docker for software containerization. A security […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 7 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:4148 Related CVEs: CVE-2026-23490 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 15–60 min Last verified: 22 March 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8273-1 Related CVEs: CVE-2024-50304 CVE-2026-23112 CVE-2026-23209 CVE-2026-31431 CVE-2026-31504 CVE-2026-31533 CVE-2026-43033 CVE-2026-43077 +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 CVE-2018-25032 CVE-2022-37434 CVE-2026-27171 Upstream summary: pkgsrc audit-packages flagged zlib<1.2.9 for vulnerability class 'unspecified'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9840 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Postfix — memory corruption vulnerability Related CVEs: CVE-2011-0411 CVE-2011-1720 Upstream summary: The Postfix SMTP server has a memory corruption error, when the Cyrus SASL library is used with authentication mechanisms […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Postfix — memory corruption vulnerability Related CVEs: CVE-2011-0411 CVE-2011-1720 Upstream summary: The Postfix SMTP server has a memory corruption error, when the Cyrus SASL library is used with authentication mechanisms […]
🟢 Low ⏱ 5–15 min Last verified: 21 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sieve-connect — TLS hostname verification was not occurring Upstream summary: sieve-connect developer Phil Pennock reports: sieve-connect was not actually verifying TLS certificate identities matched the expected hostname. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-28476 CVE-2025-67724 CVE-2014-9720 CVE-2025-67725 CVE-2025-67726 CVE-2026-31958 Upstream summary: pkgsrc audit-packages flagged py{27,36,37,38,39}-tornado-[0-9]* for vulnerability class 'cache-poisoning'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-28476 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
