🟡 Medium ⏱ 10–30 min Last verified: 2 March 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:0002 Related CVEs: CVE-2025-45582 Upstream summary: The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fix(es): * tar: Tar path traversal (CVE-2025-45582) […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 7 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:9031 Related CVEs: CVE-2025-66471 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 15–60 min Last verified: 2 March 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2026:12423 (see also SUSE bugzilla) Related CVEs: CVE-2026-4878 CVE-2023-2603 CVE-2023-2602 Upstream summary: A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-27466 CVE-2025-58142 CVE-2025-58143 CVE-2025-58149 CVE-2025-58150 CVE-2025-58147 CVE-2025-58148 CVE-2026-23553 Upstream summary: pkgsrc audit-packages flagged xenkernel420<20251113 for vulnerability class 'null-pointer-dereference'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-27466 Table of contents Symptom & Impact Environment & Reproduction […]
🟠 High ⏱ 5–30 min Last verified: 1 March 2026 Affected versions: RHEL 10 RHEL 10.0 RHEL 10.1 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Plex Media Server — security vulnerability Related CVEs: CVE-2018-13415 CVE-2021-42835 Upstream summary: Plex Security Team reports: We have recently been made aware of a security vulnerability in Plex Media Server […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read • Source: Microsoft KB5051987 • MSRC update-guide entry Related CVEs: CVE-2025-21376 CVE-2025-21379 CVE-2025-26634 CVE-2025-21351 CVE-2025-21352 CVE-2025-21368 CVE-2025-21369 CVE-2025-21375 +12 more Affected components: Windows Server 2025 Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: hcode — buffer overflow in mail.c Related CVEs: CVE-2024-34020 Upstream summary: The openSUSE project reports: The problematic function in question is putSDN() in mail.c. The static variable `cp` is used […]
🟡 Medium ⏱ 10–30 min Last verified: 1 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1676 Related CVEs: CVE-2026-6654 CVE-2024-24575 CVE-2024-24577 CVE-2023-38497 CVE-2025-62518 CVE-2026-0810 CVE-2026-33055 CVE-2026-33056 +6 more Upstream summary: Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A […]
