🟡 Medium ⏱ 10–30 min Last verified: 1 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-21232 CVE-2020-11958 CVE-2022-23901 CVE-2026-2903 Upstream summary: re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1784-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-40176 CVE-2026-40261 CVE-2024-35241 CVE-2024-35242 CVE-2024-24821 CVE-2023-43655 CVE-2025-67746 Upstream summary: Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19053 Related CVEs: CVE-2026-33554 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 9 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:0293 Related CVEs: CVE-2025-31651 CVE-2025-55752 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 1 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8182-1 Related CVEs: CVE-2026-34785 CVE-2026-26962 CVE-2026-26961 CVE-2026-34230 CVE-2026-34830 CVE-2026-34763 CVE-2026-34827 CVE-2026-32762 +12 more Upstream summary: Andrew Lacambra discovered that Rack did not properly parse certain regular expressions. An attacker could […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7929-1 Related CVEs: CVE-2025-66004 Upstream summary: It was discovered that usbmuxd incorrectly handled certain paths received with the SavePairRecord command. A local attacker could possibly use this issue to delete […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8071-1 Related CVEs: CVE-2026-2781 Upstream summary: It was discovered that NSS incorrectly handled memory when performing certain GHASH operations. A remote attacker could use this issue to cause NSS to […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8168-1 Related CVEs: CVE-2026-33056 Upstream summary: It was discovered that tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 9 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19368 Related CVEs: CVE-2024-12086 CVE-2026-41035 CVE-2025-10158 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1957-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-14179 CVE-2024-4577 CVE-2024-1874 CVE-2026-6104 CVE-2026-6722 CVE-2026-7258 CVE-2026-7259 CVE-2026-7261 +12 more Upstream summary: In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and […]
