🟡 Medium ⏱ 10–30 min Last verified: 8 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-27297 CVE-2024-36050 CVE-2024-38531 CVE-2024-47174 CVE-2026-39860 Upstream summary: Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to […]
🟡 Medium ⏱ 10–30 min Last verified: 8 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: git — multiple vulnerabilities Related CVEs: CVE-2024-50349 CVE-2024-52006 CVE-2025-27613 CVE-2025-27614 CVE-2025-46835 CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 Upstream summary: Git development team reports: CVE-2025-27613: Gitk: When a user clones an untrusted repository and […]
🟢 Low ⏱ 5–15 min Last verified: 8 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2024-32879 CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 9.0.6-r0 📖 ~4 min read • Source: Alpine secdb entry — dotnet9-runtime 9.0.6-r0 Related CVEs: CVE-2025-30399 CVE-2025-26646 CVE-2025-26682 CVE-2025-24070 CVE-2026-32177 CVE-2026-35433 CVE-2026-32175 CVE-2026-42899 +12 more Upstream summary: Alpine community repository for vedge ships dotnet9-runtime 9.0.6-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 8 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-3206 Upstream summary: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5070881 • MSRC update-guide entry Related CVEs: CVE-2025-59287 Affected components: Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: Deserialization of untrusted data in Windows Server Update Service allows an unauthorized […]
🟠 High ⏱ 15–60 min Last verified: 8 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2205 CVE-2011-2531 CVE-2011-2532 CVE-2014-2744 CVE-2014-2745 CVE-2016-0756 CVE-2016-1231 CVE-2016-1232 +12 more Upstream summary: Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 8 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-28054 Upstream summary: Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when […]
rkhunter (Rootkit Hunter) is a security tool that scans for rootkits, backdoors, and local exploits on Linux systems. It checks for known malware, suspicious file attributes, hidden files, and unusual system configurations. This guide installs and configures rkhunter on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS A user […]
🟡 Medium ⏱ 10–30 min Last verified: 8 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16224 CVE-2019-16225 CVE-2019-16226 CVE-2019-16227 CVE-2019-16228 Upstream summary: An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, […]
