🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:0113-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-2592 Upstream summary: A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the […]
🟢 Low ⏱ 5–15 min Last verified: 1 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3720 Upstream summary: The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 1 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8225-1 Related CVEs: CVE-2025-68480 CVE-2018-17175 Upstream summary: Jared Deckard discovered that Python marshmallow did not correctly handle hiding certain fields. An attacker could possibly use this issue to leak sensitive […]
🟢 Low ⏱ 5–15 min Last verified: 1 July 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8134-1 Related CVEs: CVE-2026-30922 CVE-2026-23490 Upstream summary: It was discovered that pyasn1 could exhaust system resources when attempting to decode a malformed certificate. An attacker could possibly use this to […]
🟠 High ⏱ 15–60 min Last verified: 1 July 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8000-1 Related CVEs: CVE-2026-21932 CVE-2026-21925 CVE-2026-21933 CVE-2026-21945 CVE-2025-53057 CVE-2025-53066 CVE-2025-30749 CVE-2025-30761 +12 more Upstream summary: It was discovered that the RMI component of OpenJDK 8 would establish RMI TCP endpoint […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-34531 Upstream summary: Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the client […]
🟡 Medium ⏱ 10–30 min Last verified: 1 July 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:3858-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-23903 Upstream summary: A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 9 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19367 Related CVEs: CVE-2026-23868 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟡 Medium ⏱ 10–30 min Last verified: 1 July 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1218-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-25645 CVE-2024-47081 Upstream summary: Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read • Source: Fedora update FEDORA-2026-76f57efeef Related CVEs: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 Upstream summary: Update the openssl crate to version 0.10.78 and the openssl-sys crate to version 0.9.114. Release notes: – openssl 0.10.77 / openssl-sys 0.9.113: https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.77 […]
