🟢 Low ⏱ 5–15 min Last verified: 16 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-36489 Upstream summary: Buffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of service via crafted PCX/TGA/BMP files to allegro_image addon. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 16 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1561 CVE-2004-2027 CVE-2005-0837 CVE-2005-0838 CVE-2011-4612 CVE-2014-9018 CVE-2014-9091 CVE-2015-3026 +1 more Upstream summary: Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:5917 Related CVEs: CVE-2026-23893 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 15–60 min Last verified: 16 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-37568 CVE-2025-59420 CVE-2025-61920 CVE-2025-62706 CVE-2025-68158 CVE-2026-27962 CVE-2026-28490 CVE-2026-28498 +2 more Upstream summary: lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is specified […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7723-1 Related CVEs: CVE-2025-8067 CVE-2025-6019 CVE-2018-17336 Upstream summary: Michael Imfeld discovered that UDisks did not check the validity of input data correctly when handling files for loop devices. An attacker […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:21738-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-44933 CVE-2018-7685 CVE-2017-7435 CVE-2017-9271 CVE-2019-18900 Upstream summary: `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in […]
🟢 Low ⏱ 5–15 min Last verified: 16 April 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8168-1 Related CVEs: CVE-2026-33056 Upstream summary: It was discovered that tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7992-2 Related CVEs: CVE-2026-24061 CVE-2023-40303 CVE-2020-10188 CVE-2022-39028 CVE-2019-0053 CVE-2021-40491 Upstream summary: USN-7992-1 fixed vulnerabilities in telnetd in Inetutils. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 […]
🟢 Low ⏱ 5–15 min Last verified: 16 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8209-1 Related CVEs: CVE-2026-41254 Upstream summary: It was discovered that Little CMS incorrectly handled certain malformed ICC profiles. An attacker could use this issue to cause Little CMS to crash, […]
