🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2025:21691 (see also SUSE bugzilla) Related CVEs: CVE-2025-11230 CVE-2025-32464 CVE-2024-53008 Upstream summary: Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted […]
🟡 Medium ⏱ 10–30 min Last verified: 28 April 2025 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-6184 Related CVEs: CVE-2024-40897 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 3.9.5-r0 📖 ~4 min read • Source: Alpine secdb entry — python3 3.9.5-r0 Related CVEs: CVE-2021-29921 CVE-2021-3426 CVE-2021-23336 CVE-2021-3177 CVE-2019-20907 CVE-2020-14422 CVE-2020-8315 CVE-2020-8492 +12 more Upstream summary: Alpine main repository for vv3.19 ships python3 3.9.5-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 8 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:3407 Related CVEs: CVE-2025-59375 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 15–60 min Last verified: 28 April 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2151-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-37535 Upstream summary: GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 2.4.9-r0 📖 ~4 min read • Source: Alpine secdb entry — cups 2.4.9-r0 Related CVEs: CVE-2024-35235 CVE-2023-4504 CVE-2023-32324 CVE-2022-26691 CVE-2020-3898 CVE-2019-8842 CVE-2019-8696 CVE-2019-8675 +1 more Upstream summary: Alpine main repository for vv3.18 ships cups 2.4.9-r0 which […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2029-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5206 Upstream summary: A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:1429 Related CVEs: CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1220 CVE-2025-1735 CVE-2025-6491 CVE-2022-31628 CVE-2022-31629 +3 more Upstream summary: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): […]
🟢 Low ⏱ 5–15 min Last verified: 27 April 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-13353 Upstream summary: In gokey versions <0.2.0, a flaw in the seed decryption logic resulted in passwords incorrectly being derived solely from the initial vector and the AES-GCM […]
