🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-3239 Upstream summary: Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-36407 CVE-2025-48174 CVE-2025-48175 Upstream summary: libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:1472 Related CVEs: CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469 CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 +5 more Upstream summary: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-56005 Upstream summary: An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0042 CVE-2004-2259 CVE-2011-0762 CVE-2011-2189 CVE-2015-1419 CVE-2021-3618 Upstream summary: vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11468 CVE-2023-2253 CVE-2026-33540 CVE-2026-35172 Upstream summary: Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-42215 CVE-2026-44244 CVE-2026-44243 Upstream summary: GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32286 Upstream summary: The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-35469 Upstream summary: spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-2207 CVE-2002-2227 Upstream summary: Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret. […]
