🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:16799 Related CVEs: CVE-2026-40355 CVE-2026-40356 CVE-2024-3596 CVE-2022-42898 CVE-2025-3576 CVE-2025-24528 CVE-2024-37370 CVE-2024-37371 +2 more Upstream summary: Kerberos is a network authentication system, which can improve the security of your network by eliminating the […]
🟠 High ⏱ 15–60 min Last verified: 1 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4676 CVE-2007-6353 CVE-2008-2696 CVE-2014-9449 CVE-2017-11591 CVE-2017-11683 CVE-2017-14859 CVE-2017-14862 +12 more Upstream summary: Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:2124 Related CVEs: CVE-2025-61729 CVE-2026-25679 CVE-2025-61726 CVE-2025-68121 CVE-2025-30204 CVE-2025-22871 CVE-2025-58183 Upstream summary: A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under […]
🟠 High ⏱ 15–60 min Last verified: 1 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1932 CVE-2014-1933 CVE-2014-3007 CVE-2014-3589 CVE-2014-3598 CVE-2014-9601 CVE-2016-0740 CVE-2016-0775 +12 more Upstream summary: The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-1260 Upstream summary: pkgsrc audit-packages flagged sentencepiece<0.2.1 for vulnerability class 'out-of-bounds-read'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1260 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Okular — Local binary execution via action links Upstream summary: Albert Astals Cid: Okular can be tricked into executing local binaries via specially crafted PDF files. This binary execution can […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Vinyl/Varnish — HTTP/2 parsing deficiency Upstream summary: Vinyl Development Team reports: A deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync attack (request smuggling), which […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1605 Related CVEs: CVE-2026-27143 CVE-2026-27144 CVE-2026-32280 CVE-2026-32281 CVE-2026-32282 CVE-2026-32283 CVE-2026-32288 CVE-2026-32289 +12 more Upstream summary: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2026 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-ormar — vulnerabilities Related CVEs: CVE-2026-26198 CVE-2026-27953 Upstream summary: https://github.com/ormar-orm/ormar/security/advisories reports: SQL Injection in aggregate functions min() and max() Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model […]
