🟠 High ⏱ 15–60 min Last verified: 25 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8860 CVE-2018-20834 CVE-2021-32803 CVE-2021-32804 CVE-2021-37701 CVE-2021-37712 CVE-2024-28863 CVE-2026-23745 +3 more Upstream summary: The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-1293 Upstream summary: ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote […]
🟡 Medium ⏱ 10–30 min Last verified: 25 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-42612 CVE-2021-42613 CVE-2021-42614 Upstream summary: A use after free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have other […]
🟢 Low ⏱ 5–15 min Last verified: 25 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-69277 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLBA-2026:0860 Related CVEs: CVE-2025-22247 Upstream summary: The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components […]
🟠 High ⏱ 15–60 min Last verified: 25 January 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8102-1 Related CVEs: CVE-2026-3888 CVE-2024-1724 CVE-2024-29068 CVE-2024-29069 CVE-2023-1523 CVE-2022-3328 https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1961365 https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1961791 +11 more Upstream summary: Qualys discovered that snapd incorrectly handled certain operations in the snap's private /tmp directory. If […]
🟠 High ⏱ 15–60 min Last verified: 25 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8244-1 Related CVEs: CVE-2026-23112 CVE-2026-23231 CVE-2026-23273 CVE-2024-36347 CVE-2025-68351 CVE-2025-68353 CVE-2025-68365 CVE-2025-68368 +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]
🟠 High ⏱ 15–60 min Last verified: 25 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3719-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-47874 Upstream summary: Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. Prior to version 0.40.0, Starlette treats `multipart/form-data` parts without a `filename` as text […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:8096 Related CVEs: CVE-2025-40909 Upstream summary: Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl threads have […]
🟡 Medium ⏱ 10–30 min Last verified: 25 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0250-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-50711 Upstream summary: vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior […]
