🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:4717 (see also SUSE bugzilla) Related CVEs: CVE-2026-23893 Upstream summary: openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-33589 CVE-2023-29479 CVE-2023-29480 Upstream summary: Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8198-1 Related CVEs: CVE-2026-31958 CVE-2026-35536 CVE-2025-67724 CVE-2025-67725 CVE-2025-67726 CVE-2025-47287 CVE-2023-28370 CVE-2024-52804 Upstream summary: It was discovered that Tornado incorrectly handled parsing of large multipart request bodies. An attacker could possibly […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9258 CVE-2017-9259 CVE-2017-9260 CVE-2018-1000223 CVE-2018-14044 CVE-2018-14045 CVE-2018-17096 CVE-2018-17097 +1 more Upstream summary: The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1191-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-24401 CVE-2025-68276 CVE-2025-68468 CVE-2025-68471 CVE-2024-52615 CVE-2024-52616 CVE-2023-38469 CVE-2023-38471 Upstream summary: Avahi is a system which facilitates service discovery on a local network via the […]
🟠 High ⏱ 15–60 min Last verified: 27 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8000-1 Related CVEs: CVE-2026-21932 CVE-2026-21925 CVE-2026-21933 CVE-2026-21945 CVE-2025-53057 CVE-2025-53066 CVE-2025-30749 CVE-2025-30761 +12 more Upstream summary: It was discovered that the RMI component of OpenJDK 8 would establish RMI TCP endpoint […]
🟢 Low ⏱ 5–15 min Last verified: 27 July 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8226-2 Related CVEs: CVE-2026-31431 Upstream summary: USN-8226-1 added a mitigation to kmod to disable loading the algif_aead module. This update adds the same mitigation to Ubuntu 14.04 LTS, Ubuntu 16.04 […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8087-3 Related CVEs: CVE-2026-26007 CVE-2023-50782 CVE-2020-25659 CVE-2016-9243 Upstream summary: USN-8087-1 fixed a vulnerability in python-cryptography. This update provides the corresponding update to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2632-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-49990 CVE-2023-49991 CVE-2023-49992 CVE-2023-49993 CVE-2023-49994 Upstream summary: Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 27 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2022:3275-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-21330 CVE-2024-52303 CVE-2023-47627 CVE-2023-47641 CVE-2023-49081 CVE-2023-49082 CVE-2024-23334 CVE-2024-23829 +3 more Upstream summary: aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp […]
