🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-33711 CVE-2026-33897 CVE-2026-33898 CVE-2026-33945 CVE-2026-23953 CVE-2026-23954 CVE-2025-52890 CVE-2026-33542 +2 more Upstream summary: Incus is a system container and virtual machine manager. Incus provides an API […]
🟡 Medium ⏱ 10–30 min Last verified: 6 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8202-1 Related CVEs: CVE-2026-39956 CVE-2026-33947 CVE-2026-39979 CVE-2026-33948 CVE-2026-40164 CVE-2026-32316 CVE-2025-48060 CVE-2024-23337 +1 more Upstream summary: It was discovered that jq did not correctly handle certain string concatenations. An attacker could […]
🟡 Medium ⏱ 10–30 min Last verified: 6 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7858-1 Related CVEs: CVE-2025-52885 CVE-2025-43718 CVE-2025-50420 CVE-2025-52886 CVE-2025-43903 CVE-2025-32364 CVE-2025-32365 CVE-2024-56378 +1 more Upstream summary: It was discovered that poppler incorrectly handled certain PDF files. An attacker could possibly use […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:2753 Related CVEs: CVE-2026-24882 CVE-2025-68973 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 6 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-45139 CVE-2025-66034 Upstream summary: fontTools is a library for manipulating fonts, written in Python. The subsetting module has a XML External Entity Injection (XXE) vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19073 Related CVEs: CVE-2026-34982 CVE-2026-28417 CVE-2026-28421 CVE-2026-33412 CVE-2026-25749 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟡 Medium ⏱ 10–30 min Last verified: 6 May 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:10585 (see also SUSE bugzilla) Related CVEs: CVE-2025-48060 CVE-2024-23337 CVE-2015-8863 CVE-2016-4074 CVE-2025-9403 Upstream summary: jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in […]
🟡 Medium ⏱ 10–30 min Last verified: 6 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:2109-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14019 Upstream summary: Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved. […]
🟡 Medium ⏱ 10–30 min Last verified: 6 May 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:20170-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-64718 Upstream summary: js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the […]
🟠 High ⏱ 15–60 min Last verified: 6 May 2026 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2026-13857 Related CVEs: CVE-2025-59032 CVE-2026-27857 CVE-2026-27858 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
