Introduction How to Sign Container Images with cosign on RHEL 10 on RHEL 10 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting configuration is […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2026 Affected versions: Debian 13 đź“– ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000026 Upstream summary: Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed đź“– ~4 min read • Source: SUSE advisory SUSE-SU-2026:20592-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-53816 CVE-2025-53817 Upstream summary: 7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to […]
đźź High ⏱ 15–60 min Last verified: 10 April 2026 Affected versions: Debian 13 (trixie) đź“– ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9905 CVE-2015-5395 CVE-2016-6188 CVE-2016-6189 CVE-2016-6190 CVE-2016-6191 CVE-2020-22402 CVE-2021-33054 +12 more Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2026 Affected versions: Debian 13 đź“– ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-47883 Upstream summary: The OpenRefine fork of the MIT Simile Butterfly server is a modular web application framework. The Butterfly framework uses the `java.net.URL` class to refer to (what […]
🟡 Medium ⏱ 10–30 min Last verified: 10 April 2026 Affected versions: Debian 13 (trixie) đź“– ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4454 CVE-2012-4455 CVE-2024-0914 CVE-2026-23893 CVE-2026-40253 Upstream summary: openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed đź“– ~4 min read • Source: SUSE advisory SUSE-SU-2026:0199-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-66034 Upstream summary: fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib (or python3 […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2026 Affected versions: Debian 11 (bullseye) đź“– ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-28180 CVE-2026-34986 Upstream summary: Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing […]
🟢 Low ⏱ 5–15 min Last verified: 10 April 2026 Affected versions: Debian 13 (trixie) đź“– ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2860 CVE-2018-11652 Upstream summary: Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in […]
đźź High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 đź“– ~4 min read • Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 CVE-2022-29599 CVE-2020-13956 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean […]
