🟢 Low ⏱ 5–15 min Last verified: 27 July 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-29063 Upstream summary: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), […]
🟢 Low ⏱ 5–15 min Last verified: 27 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4510 Upstream summary: cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive […]
🟢 Low ⏱ 5–15 min Last verified: 27 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-0808 Upstream summary: as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:4717 (see also SUSE bugzilla) Related CVEs: CVE-2026-23893 Upstream summary: openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-33589 CVE-2023-29479 CVE-2023-29480 Upstream summary: Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8198-1 Related CVEs: CVE-2026-31958 CVE-2026-35536 CVE-2025-67724 CVE-2025-67725 CVE-2025-67726 CVE-2025-47287 CVE-2023-28370 CVE-2024-52804 Upstream summary: It was discovered that Tornado incorrectly handled parsing of large multipart request bodies. An attacker could possibly […]
🟡 Medium ⏱ 10–30 min Last verified: 27 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9258 CVE-2017-9259 CVE-2017-9260 CVE-2018-1000223 CVE-2018-14044 CVE-2018-14045 CVE-2018-17096 CVE-2018-17097 +1 more Upstream summary: The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1191-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-24401 CVE-2025-68276 CVE-2025-68468 CVE-2025-68471 CVE-2024-52615 CVE-2024-52616 CVE-2023-38469 CVE-2023-38471 Upstream summary: Avahi is a system which facilitates service discovery on a local network via the […]
🟠 High ⏱ 15–60 min Last verified: 27 July 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8000-1 Related CVEs: CVE-2026-21932 CVE-2026-21925 CVE-2026-21933 CVE-2026-21945 CVE-2025-53057 CVE-2025-53066 CVE-2025-30749 CVE-2025-30761 +12 more Upstream summary: It was discovered that the RMI component of OpenJDK 8 would establish RMI TCP endpoint […]
🟢 Low ⏱ 5–15 min Last verified: 27 July 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8226-2 Related CVEs: CVE-2026-31431 Upstream summary: USN-8226-1 added a mitigation to kmod to disable loading the algif_aead module. This update adds the same mitigation to Ubuntu 14.04 LTS, Ubuntu 16.04 […]
