🟡 Medium ⏱ 10–30 min Last verified: 7 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0705 CVE-2003-0706 CVE-2004-0458 Upstream summary: Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code. Table of contents Symptom & Impact Environment & Reproduction […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-1218 Related CVEs: CVE-2025-59798 CVE-2025-59799 CVE-2025-59800 CVE-2025-27834 CVE-2025-27835 CVE-2025-27836 CVE-2025-27837 CVE-2025-27833 +12 more Upstream summary: Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c. (CVE-2025-59798) Artifex […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3083 Related CVEs: CVE-2025-61911 CVE-2025-61912 CVE-2021-46823 Upstream summary: python-ldap is a lightweight directory access protocol (LDAP) client API for Python. In versions prior to 3.4.5, the sanitization method `ldap.filter.escape_filter_chars` can […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.45-r0 📖 ~4 min read • Source: Alpine secdb entry — perl-yaml-syck 1.45-r0 Related CVEs: CVE-2026-4177 Upstream summary: Alpine main repository for vedge ships perl-yaml-syck 1.45-r0 which addresses CVE-2026-4177. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 7 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-41556 CVE-2022-30292 CVE-2026-2659 CVE-2026-2661 CVE-2026-3388 CVE-2026-3389 CVE-2026-8258 CVE-2026-8261 Upstream summary: sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that […]
🟡 Medium ⏱ 10–30 min Last verified: 7 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-30130 CVE-2023-48795 CVE-2023-52892 CVE-2024-27354 CVE-2024-27355 CVE-2026-32935 CVE-2026-40194 CVE-2026-44167 Upstream summary: phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.4.9-r0 📖 ~4 min read • Source: Alpine secdb entry — gnupg 2.4.9-r0 Related CVEs: CVE-2025-68972 CVE-2025-68973 CVE-2018-12020 CVE-2022-34903 CVE-2020-25125 CVE-2019-14855 Upstream summary: Alpine main repository for vedge ships gnupg 2.4.9-r0 which addresses CVE-2025-68972. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 7 June 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-30673 Upstream summary: Sub::HandlesVia for Perl before 0.050002 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238. If an attacker can place a […]
🟢 Low ⏱ 5–15 min Last verified: 7 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10755 CVE-2023-2088 Upstream summary: An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions […]
🟡 Medium ⏱ 10–30 min Last verified: 7 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-8659 CVE-2017-5226 CVE-2019-12439 CVE-2020-5291 CVE-2026-41163 Upstream summary: Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as […]
