🟡 Medium ⏱ 10–30 min Last verified: 27 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:2319-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22918 CVE-2024-24806 Upstream summary: Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. The […]
🟡 Medium ⏱ 10–30 min Last verified: 27 January 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2025-20126-0 Related CVEs: CVE-2025-32728 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0355-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-1484 CVE-2026-1489 CVE-2025-13601 CVE-2025-14087 CVE-2025-6052 CVE-2024-52533 CVE-2025-14512 CVE-2025-7039 +5 more Upstream summary: A flaw was found in the GLib Base64 encoding routine when processing […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:15181-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-32801 CVE-2025-32802 CVE-2025-32803 Upstream summary: Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea […]
🟠 High ⏱ 15–60 min Last verified: 27 January 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2026-3752 Related CVEs: CVE-2025-61726 CVE-2025-61728 CVE-2025-61729 CVE-2025-68121 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🔴 Critical ⏱ 15–90 min Last verified: 27 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1673-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-25289 CVE-2026-42308 CVE-2026-42310 CVE-2021-25287 CVE-2021-25288 CVE-2021-28675 CVE-2021-28676 CVE-2021-28677 +12 more Upstream summary: An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2025:21776 Related CVEs: CVE-2025-59375 Upstream summary: Expat is a C library for parsing XML documents. Security Fix(es): * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations […]
🔴 Critical ⏱ 15–90 min Last verified: 27 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0260-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-27586 CVE-2026-31899 CVE-2021-21236 Upstream summary: CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests […]
🟠 High ⏱ 15–60 min Last verified: 27 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:12176 (see also SUSE bugzilla) Related CVEs: CVE-2026-30922 CVE-2026-23490 Upstream summary: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:17533 Related CVEs: CVE-2026-4150 CVE-2026-4153 CVE-2026-4154 CVE-2026-4887 CVE-2026-0797 CVE-2026-2044 CVE-2026-2045 CVE-2026-2048 +12 more Upstream summary: The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large […]
