🟢 Low ⏱ 5–15 min Last verified: 7 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6856-1 Related CVEs: CVE-2024-25081 CVE-2024-25082 Upstream summary: It was discovered that FontForge incorrectly handled filenames. If a user or an automated system were tricked into opening a specially crafted input […]
🟢 Low ⏱ 5–15 min Last verified: 7 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6963-1 Related CVEs: CVE-2024-36472 CVE-2020-17489 Upstream summary: It was discovered that GNOME Shell incorrectly opened the portal helper automatically when detecting a captive network portal. A remote attacker could possibly […]
🟡 Medium ⏱ 10–30 min Last verified: 7 April 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7926-1 Related CVEs: CVE-2025-65073 CVE-2021-3563 CVE-2022-2447 Upstream summary: Kay discovered that OpenStack Keystone incorrectly handled the ec2tokens and s3tokens APIs. A remote attacker could possibly use this issue to obtain […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:8096 Related CVEs: CVE-2025-40909 Upstream summary: Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl threads have […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2022:3275-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-21330 CVE-2023-47641 CVE-2023-49081 CVE-2024-23334 CVE-2023-47627 Upstream summary: aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is […]
🟠 High ⏱ 15–60 min Last verified: 7 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6939-1 Related CVEs: CVE-2024-39929 CVE-2021-38371 CVE-2023-51766 CVE-2023-42117 CVE-2023-42119 CVE-2023-42114 CVE-2023-42115 CVE-2023-42116 +12 more Upstream summary: Phillip Szelat discovered that Exim misparses multiline MIME header filenames. A remote attacker could use […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.9.4-r0 📖 ~4 min read • Source: Alpine secdb entry — libgcrypt 1.9.4-r0 Related CVEs: CVE-2021-33560 CVE-2019-13627 CVE-2019-12904 CVE-2018-0495 Upstream summary: Alpine main repository for vv3.19 ships libgcrypt 1.9.4-r0 which addresses CVE-2021-33560. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2025:12346 (see also SUSE bugzilla) Related CVEs: CVE-2025-49091 Upstream summary: KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such […]
🟡 Medium ⏱ 10–30 min Last verified: 7 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7586-1 Related CVEs: CVE-2024-34703 CVE-2024-39312 CVE-2024-34702 CVE-2024-50383 CVE-2024-50382 Upstream summary: It was discovered that Botan could have compiler dependent operations induced under certain circumstances. An attacker could possibly use this […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:4187-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23266 CVE-2024-0135 CVE-2024-0136 CVE-2025-23359 CVE-2025-23267 CVE-2024-0137 CVE-2024-0134 Upstream summary: NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize […]
