🟠 High ⏱ 15–60 min Last verified: 1 May 2025 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-10550 Related CVEs: CVE-2025-6032 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 1 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:2042 Related CVEs: CVE-2025-6176 Upstream summary: Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.19.1-r1 📖 ~4 min read • Source: Alpine secdb entry — c-ares 1.19.1-r1 Related CVEs: CVE-2024-25629 CVE-2021-3672 Upstream summary: Alpine main repository for vv3.18 ships c-ares 1.19.1-r1 which addresses CVE-2024-25629. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 1 May 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:23142 Related CVEs: CVE-2025-13499 CVE-2023-0666 CVE-2023-0668 CVE-2023-2855 CVE-2023-2856 CVE-2023-2858 CVE-2023-2952 CVE-2022-3190 Upstream summary: The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0817-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-22201 CVE-2023-36478 CVE-2024-8184 CVE-2023-40167 CVE-2023-26048 CVE-2023-36479 CVE-2023-41900 CVE-2023-26049 Upstream summary: Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:4672 Related CVEs: CVE-2025-61726 CVE-2025-61728 CVE-2025-68121 CVE-2024-24785 CVE-2025-61729 CVE-2025-65637 CVE-2025-47913 CVE-2025-52881 +12 more Upstream summary: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-17175 CVE-2025-68480 Upstream summary: In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "only" […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2024-031 Related CVEs: CVE-2024-41090 CVE-2024-41091 CVE-2024-41087 Upstream summary: kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090) kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091) Table of […]
🟢 Low ⏱ 5–15 min Last verified: 30 April 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-34457 Upstream summary: wb2osz/direwolf (Dire Wolf) versions up to and including 1.8, prior to commit 694c954, contain a stack-based buffer overflow vulnerability in the function kiss_rec_byte() located in […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-867 Related CVEs: CVE-2025-1244 CVE-2024-53920 CVE-2024-30203 CVE-2024-30204 CVE-2024-30205 CVE-2024-39331 CVE-2024-30202 CVE-2023-28617 +6 more Upstream summary: A flaw was found in the Emacs text editor. Improper handling of custom "man" URI […]
