🟢 Low ⏱ 5–15 min Last verified: 16 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35450 Upstream summary: Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain set_language calls. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 10–30 min Last verified: 16 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-52595 CVE-2026-28348 CVE-2026-28350 Upstream summary: lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.0, the HTML Parser in lxml does not properly […]
🟡 Medium ⏱ 10–30 min Last verified: 16 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2738 CVE-2013-2739 CVE-2013-2745 CVE-2020-12695 CVE-2020-28926 CVE-2022-26505 CVE-2023-33476 CVE-2023-47430 +1 more Upstream summary: minidlna has SQL Injection that may allow retrieval of arbitrary files Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 16 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0727 CVE-2013-7273 CVE-2015-7496 CVE-2016-1000002 CVE-2017-12164 CVE-2018-14424 CVE-2019-3825 CVE-2020-16125 +1 more Upstream summary: GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 16 June 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8213-1 Related CVEs: CVE-2026-39881 CVE-2026-35177 CVE-2026-33412 CVE-2026-34982 CVE-2026-32249 CVE-2026-26269 CVE-2026-28419 CVE-2026-28418 +12 more Upstream summary: Michał Majchrowicz discovered that Vim's zip plugin could overwrite arbitrary files. An attacker could possibly […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:20090-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-66570 CVE-2026-33745 CVE-2026-21428 CVE-2026-28435 CVE-2026-32627 CVE-2025-46728 CVE-2026-34441 CVE-2026-22776 +3 more Upstream summary: cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:21140 Related CVEs: CVE-2025-59088 CVE-2025-59089 CVE-2025-7493 CVE-2025-4404 CVE-2024-2698 CVE-2024-3183 CVE-2021-3480 CVE-2020-17049 +12 more Upstream summary: AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and […]
🟢 Low ⏱ 5–15 min Last verified: 16 June 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8221-1 Related CVEs: CVE-2026-24049 Upstream summary: It was discovered that wheel did not correctly handle certain file paths. If a user or automated system were tricked into opening a specially […]
🟢 Low ⏱ 5–15 min Last verified: 16 June 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8168-1 Related CVEs: CVE-2026-33056 Upstream summary: It was discovered that tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked […]
🟠 High ⏱ 15–60 min Last verified: 16 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2283-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5564 CVE-2016-3698 Upstream summary: A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered […]
