🟠 High ⏱ 15–60 min Last verified: 16 May 2025 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-2779 Related CVEs: CVE-2024-28182 CVE-2024-25629 CVE-2024-27982 CVE-2024-27983 CVE-2024-22025 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 4.2.1-r0 📖 ~4 min read • Source: Alpine secdb entry — mpfr4 4.2.1-r0 Related CVEs: CVE-2023-25139 Upstream summary: Alpine main repository for vv3.19 ships mpfr4 4.2.1-r0 which addresses CVE-2023-25139. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02734-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-6297 Upstream summary: It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which […]
Bacula is a mature, enterprise-grade open-source backup solution that manages backup, recovery, and data verification across heterogeneous networks. It uses a three-tier architecture — Director, Storage Daemon, and File Daemon — allowing centralised policy management with distributed storage targets. On RHEL 9, Bacula packages are available from the EPEL repository and integrate naturally with systemd. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default […]
🟡 Medium ⏱ 10–30 min Last verified: 15 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1382 CVE-2009-2459 CVE-2024-40446 Upstream summary: Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-65430 CVE-2025-65431 Upstream summary: An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as is_active=False after having handed tokens for that user […]
🟡 Medium ⏱ 10–30 min Last verified: 15 May 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7350-1 Related CVEs: CVE-2022-30333 CVE-2022-48579 CVE-2023-40477 CVE-2024-33899 Upstream summary: It was discovered that UnRAR incorrectly handled certain paths. If a user or automated system were tricked into extracting a specially […]
🟠 High ⏱ 15–60 min Last verified: 15 May 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7961-1 Related CVEs: CVE-2024-53846 CVE-2025-48041 CVE-2025-48038 CVE-2025-48040 CVE-2025-48039 CVE-2025-46712 CVE-2025-4748 CVE-2025-32433 +2 more Upstream summary: It was discovered that Erlang incorrectly validated peer certificates when incorrect extended key usage was […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 0.82-r0 📖 ~4 min read • Source: Alpine secdb entry — pev 0.82-r0 Related CVEs: CVE-2021-45423 Upstream summary: Alpine community repository for vv3.20 ships pev 0.82-r0 which addresses CVE-2021-45423. Table of contents Symptom & Impact Environment […]
