🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:12423 Related CVEs: CVE-2026-4878 Upstream summary: Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: libcap: Privilege escalation via TOCTOU […]
🟠 High ⏱ 15–60 min Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:2211-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-7164 CVE-2019-7548 Upstream summary: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3198-1 Related CVEs: CVE-2021-32610 Upstream summary: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:13917 Related CVEs: CVE-2026-30922 CVE-2026-26007 CVE-2026-32597 CVE-2025-66418 CVE-2025-66471 CVE-2026-21441 CVE-2026-23490 Upstream summary: The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow […]
🟠 High ⏱ 15–60 min Last verified: 2 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2020:173-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-2201 CVE-2020-17541 CVE-2014-9092 CVE-2017-15232 CVE-2018-1152 CVE-2018-11813 CVE-2018-19644 CVE-2020-13790 +4 more Upstream summary: In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due […]
🟠 High ⏱ 15–60 min Last verified: 2 April 2026 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-14181 Related CVEs: CVE-2025-48988 CVE-2025-49125 CVE-2025-52434 CVE-2025-48976 CVE-2025-52520 CVE-2025-53506 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 2 April 2026 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2026-5080 Related CVEs: CVE-2026-4111 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 2 April 2026 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2025-8060 Related CVEs: CVE-2025-4919 CVE-2025-4918 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟠 High ⏱ 15–60 min Last verified: 2 April 2026 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2025-20632 Related CVEs: CVE-2025-38495 CVE-2025-38494 CVE-2025-38499 CVE-2025-38618 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5082806 • MSRC update-guide entry Related CVEs: CVE-2026-32077 Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an […]
