🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-71176 Upstream summary: pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of service or possibly […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-44774 CVE-2026-35051 CVE-2026-39858 CVE-2025-47952 CVE-2024-45410 CVE-2026-40912 CVE-2026-32695 CVE-2026-26999 +12 more Upstream summary: Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.46, 3.6.17, […]
🟡 Medium ⏱ 10–30 min Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0002 CVE-2012-5630 CVE-2012-5644 CVE-2015-3245 CVE-2015-3246 Upstream summary: libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-3994 Upstream summary: A vulnerability was detected in rui314 mold up to 2.40.4. This issue affects the function mold::ObjectFilemold::X86_64::initialize_sections of the file src/input-files.cc of the component Object File […]
🟡 Medium ⏱ 10–30 min Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16165 CVE-2019-16166 CVE-2020-23856 CVE-2023-2789 CVE-2025-8735 CVE-2025-8736 Upstream summary: GNU cflow through 1.6 has a use-after-free in the reference function in parser.c. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-38173 Upstream summary: Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-36049 CVE-2023-32695 CVE-2026-33151 Upstream summary: socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used. […]
🟠 High ⏱ 15–60 min Last verified: 21 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8119-2 Related CVEs: CVE-2026-29111 CVE-2022-3821 CVE-2022-4415 CVE-2022-45873 CVE-2020-13529 CVE-2021-33910 CVE-2018-16888 CVE-2019-20386 +12 more Upstream summary: USN-8119-1 fixed vulnerabilities in systemd. This update provides the corresponding updates for Ubuntu 14.04 LTS, […]
🟡 Medium ⏱ 10–30 min Last verified: 21 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8170-1 Related CVEs: CVE-2026-35091 CVE-2026-35092 CVE-2025-30472 Upstream summary: It was discovered that Corosync incorrectly handled the membership commit token validity check. A remote attacker could use this issue to cause […]
🟢 Low ⏱ 5–15 min Last verified: 21 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7363-1 Related CVEs: CVE-2025-24032 CVE-2025-24531 Upstream summary: Marcus Rückert and Matthias Gerstner discovered that PAM-PKCS#11 did not properly handle certain return codes when authentication was not possible. An attacker could […]
