🟢 Low ⏱ 5–15 min Last verified: 7 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4996 Upstream summary: init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this […]
🟡 Medium ⏱ 10–30 min Last verified: 7 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-49568 CVE-2023-49569 CVE-2025-21613 CVE-2025-21614 CVE-2026-25934 CVE-2026-33762 CVE-2026-34165 CVE-2026-41506 Upstream summary: A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-41142 CVE-2026-42216 CVE-2026-40244 CVE-2026-40250 CVE-2026-34545 CVE-2026-34588 CVE-2026-34589 CVE-2026-27622 +12 more Upstream summary: OpenEXR provides the specification and reference implementation of the EXR file format, an […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:0464 Related CVEs: CVE-2025-58436 CVE-2025-61915 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 7 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-38511 CVE-2026-33055 CVE-2026-33056 Upstream summary: An issue was discovered in the tar crate before 0.4.36 for Rust. When symlinks are present in a TAR archive, extraction can create […]
🟢 Low ⏱ 5–15 min Last verified: 7 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-56005 Upstream summary: An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:21195-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0840 CVE-2025-11083 CVE-2025-11412 CVE-2025-11413 CVE-2025-11414 CVE-2025-1182 CVE-2025-3198 CVE-2025-5244 +12 more Upstream summary: A vulnerability, which was classified as problematic, was found in GNU Binutils […]
🟠 High ⏱ 15–60 min Last verified: 7 June 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7953-1 Related CVEs: CVE-2025-14178 CVE-2025-14180 CVE-2025-14177 CVE-2025-1220 CVE-2025-1735 CVE-2025-6491 CVE-2024-11235 CVE-2025-1217 +12 more Upstream summary: It was discovered that PHP incorrectly handled memory while reading images in multi-chunk mode. An […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5073696 • MSRC update-guide entry Related CVEs: CVE-2026-21265 CVE-2026-0386 CVE-2026-20805 CVE-2026-20809 CVE-2026-20816 CVE-2026-20820 CVE-2026-20821 CVE-2026-20824 +12 more Affected components: Windows Server 2016 Microsoft summary: Windows Secure Boot stores Microsoft certificates in the […]
🟢 Low ⏱ 5–15 min Last verified: 7 June 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8133-1 Related CVEs: CVE-2026-32597 Upstream summary: It was discovered that PyJWT did not validate the critical header parameter, contrary to the RFC specification expectations. A remote attacker could possibly use […]
