🟢 Low ⏱ 5–15 min Last verified: 26 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-6508 CVE-2022-3275 Upstream summary: Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the facter_task or […]
🟡 Medium ⏱ 10–30 min Last verified: 26 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0838 CVE-2002-1569 CVE-2004-1717 CVE-2006-5864 CVE-2010-2056 Upstream summary: Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2026:0436 (see also SUSE bugzilla) Related CVEs: CVE-2025-47913 Upstream summary: SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-32740 CVE-2026-35611 Upstream summary: Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version […]
🟠 High ⏱ 15–60 min Last verified: 26 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8863 CVE-2016-4074 CVE-2024-23337 CVE-2025-48060 CVE-2025-9403 CVE-2026-32316 CVE-2026-33947 CVE-2026-33948 +10 more Upstream summary: Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-24400 Upstream summary: AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML External […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19586 Related CVEs: CVE-2026-4775 CVE-2023-52356 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 26 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-40682 CVE-2026-42027 CVE-2026-42440 Upstream summary: XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor class initializes […]
🟢 Low ⏱ 5–15 min Last verified: 26 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4191 Upstream summary: extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 26 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-26486 CVE-2023-26487 CVE-2025-25304 CVE-2025-26619 CVE-2025-27793 CVE-2025-59840 CVE-2025-65110 CVE-2025-66648 Upstream summary: Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. The Vega […]
