🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-28231 Upstream summary: pillow_heif is a Python library for working with HEIF images and plugin for Pillow. Prior to version 1.3.0, an integer overflow in […]
🟡 Medium ⏱ 10–30 min Last verified: 22 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1829 CVE-2014-1830 CVE-2015-2296 CVE-2018-18074 CVE-2023-32681 CVE-2024-35195 CVE-2024-47081 CVE-2026-25645 Upstream summary: Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header […]
🟠 High ⏱ 15–60 min Last verified: 22 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8255-1 Related CVEs: CVE-2023-2640 CVE-2023-32629 CVE-2026-23112 CVE-2026-23273 CVE-2023-53421 CVE-2023-53520 CVE-2023-53662 CVE-2023-54207 +12 more Upstream summary: Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux […]
🟢 Low ⏱ 5–15 min Last verified: 22 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8055-1 Related CVEs: CVE-2026-2604 Upstream summary: It was discovered that Evolution Data Server incorrectly handled removing local cache files. An attacker could possibly use this issue to cause Evolution Data […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-7324 CVE-2026-6746 CVE-2026-6747 CVE-2026-6748 CVE-2026-6749 CVE-2026-6750 CVE-2026-6751 CVE-2026-6752 +12 more Upstream summary: Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence […]
🟢 Low ⏱ 5–15 min Last verified: 22 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8226-2 Related CVEs: CVE-2026-31431 Upstream summary: USN-8226-1 added a mitigation to kmod to disable loading the algif_aead module. This update adds the same mitigation to Ubuntu 14.04 LTS, Ubuntu 16.04 […]
🟢 Low ⏱ 5–15 min Last verified: 22 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2015-0552 CVE-2018-5345 Upstream summary: Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 9.18.7-r0 📖 ~4 min read • Source: Alpine secdb entry — bind 9.18.7-r0 Related CVEs: CVE-2022-2795 CVE-2022-2881 CVE-2022-2906 CVE-2022-3080 CVE-2022-38177 CVE-2022-38178 CVE-2025-13878 CVE-2025-8677 +12 more Upstream summary: Alpine main repository for vv3.19 ships bind 9.18.7-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 22 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2020:1289-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14352 Upstream summary: A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths […]
🟡 Medium ⏱ 10–30 min Last verified: 22 May 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2025-25745 Related CVEs: CVE-2025-62626 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
