🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read • Source: Fedora update FEDORA-2026-fbeaecb457 Related CVEs: CVE-2026-6842 CVE-2026-6843 Upstream summary: * fix CVE-2026-6842 and CVE-29026-6843 Resolves: CVE-2026-6842 Resolves: CVE-2026-6843 Resolves: rhbz#2455127 Resolves: rhbz#2455314 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 15 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4048 CVE-2006-4800 CVE-2008-3162 CVE-2008-3230 CVE-2008-4610 CVE-2008-4866 CVE-2008-4867 CVE-2009-0385 +12 more Upstream summary: Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1432 Related CVEs: CVE-2025-14242 CVE-2021-3618 Upstream summary: A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer overflow in the ls command parameter […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1428 Related CVEs: CVE-2026-22702 Upstream summary: virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers to perform […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:14126 Related CVEs: CVE-2025-52999 CVE-2020-36518 CVE-2019-14540 CVE-2019-16335 CVE-2019-16942 CVE-2019-16943 CVE-2019-17531 CVE-2019-20330 +6 more Upstream summary: The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * […]
🟡 Medium ⏱ 10–30 min Last verified: 14 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7720 CVE-2022-24771 CVE-2022-24772 CVE-2022-24773 CVE-2025-12816 CVE-2025-66030 CVE-2025-66031 Upstream summary: The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIBREOFFICE-2025-006 Related CVEs: CVE-2025-1080 CVE-2024-7788 CVE-2024-6472 CVE-2018-16858 CVE-2019-9848 CVE-2019-9849 CVE-2019-9850 CVE-2019-9851 +8 more Upstream summary: LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:8469 Related CVEs: CVE-2026-26171 CVE-2026-32178 CVE-2026-32203 CVE-2026-33116 CVE-2026-26130 Upstream summary: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it […]
🟡 Medium ⏱ 10–30 min Last verified: 14 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-36133 CVE-2025-46733 CVE-2026-33317 CVE-2026-33662 Upstream summary: The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the […]
🟢 Low ⏱ 5–15 min Last verified: 14 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-24400 Upstream summary: AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML External […]
