🟡 Medium ⏱ 10–30 min Last verified: 13 May 2025 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-5297 Related CVEs: CVE-2024-1298 CVE-2023-45236 CVE-2023-45237 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0350-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-0132 CVE-2024-0133 Upstream summary: NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically […]
🟡 Medium ⏱ 10–30 min Last verified: 13 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:15971 Related CVEs: CVE-2025-14087 CVE-2025-14512 CVE-2025-13601 CVE-2024-52533 CVE-2025-4373 CVE-2024-34397 CVE-2023-29499 CVE-2023-32611 +1 more Upstream summary: GLib provides the core application building blocks for libraries and applications written in C. It provides […]
🟠 High ⏱ 15–60 min Last verified: 13 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:9396 Related CVEs: CVE-2025-3891 CVE-2025-31492 CVE-2024-24814 CVE-2022-23527 CVE-2023-28625 Upstream summary: The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:3744-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-6545 CVE-2025-6547 CVE-2024-48949 CVE-2024-48948 CVE-2025-5889 Upstream summary: Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with […]
🟠 High ⏱ 15–60 min Last verified: 13 May 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:1915 (see also SUSE bugzilla) Related CVEs: CVE-2025-1244 CVE-2024-53920 CVE-2024-39331 CVE-2022-48337 CVE-2022-48339 CVE-2022-48338 CVE-2022-45939 CVE-2024-30203 +9 more Upstream summary: A command injection flaw was found in the text editor Emacs. It could […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2023:5998 Related CVEs: CVE-2023-40217 CVE-2024-11168 CVE-2024-5642 CVE-2024-9287 CVE-2025-0938 CVE-2025-4138 CVE-2025-4330 CVE-2025-4435 +10 more Upstream summary: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high […]
🟢 Low ⏱ 5–15 min Last verified: 12 May 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7055-1 Related CVEs: CVE-2024-3596 Upstream summary: Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Dan Shumow, Marc Stevens, and Adam Suhl discovered that FreeRADIUS incorrectly authenticated certain responses. An attacker able […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:0700 Related CVEs: CVE-2025-46397 Upstream summary: The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:0005-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-37305 Upstream summary: oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using […]
