🟠 High ⏱ 15–60 min Last verified: 24 May 2025 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-21968 Related CVEs: CVE-2025-10920 CVE-2025-10921 CVE-2025-10922 CVE-2025-10923 CVE-2025-10924 CVE-2025-10925 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2024-28871 CVE-2024-23837 Upstream summary: LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request […]
🟠 High ⏱ 15–60 min Last verified: 24 May 2025 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2026-50133 Related CVEs: CVE-2025-40149 CVE-2025-40256 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 4.4.1-r0 📖 ~4 min read • Source: Alpine secdb entry — harfbuzz 4.4.1-r0 Related CVEs: CVE-2022-33068 Upstream summary: Alpine main repository for vv3.19 ships harfbuzz 4.4.1-r0 which addresses CVE-2022-33068. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202505-02 Related CVEs: CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934 CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 +12 more Upstream summary: Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:15099 Related CVEs: CVE-2025-6020 CVE-2025-8941 CVE-2024-10963 CVE-2024-10041 CVE-2024-22365 Upstream summary: Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:4420 Related CVEs: CVE-2024-4467 CVE-2022-40284 CVE-2023-3354 CVE-2020-35517 CVE-2020-10756 CVE-2020-14364 CVE-2019-20382 CVE-2020-8608 +12 more Upstream summary: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:14126 Related CVEs: CVE-2025-52999 CVE-2019-10086 CVE-2025-48734 CVE-2019-12384 CVE-2018-11784 CVE-2018-8014 CVE-2018-8034 CVE-2018-8037 +12 more Upstream summary: The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-0855 CVE-2007-3726 CVE-2014-9983 CVE-2022-30333 CVE-2023-40477 CVE-2024-33899 Upstream summary: Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.28.6-r0 📖 ~4 min read • Source: Alpine secdb entry — exiv2 0.28.6-r0 Related CVEs: CVE-2025-54080 CVE-2025-55304 CVE-2025-26623 CVE-2024-39695 CVE-2024-24826 CVE-2024-25112 CVE-2023-44398 CVE-2021-32815 +12 more Upstream summary: Alpine community repository for vedge ships exiv2 0.28.6-r0 which […]
