🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:8534 Related CVEs: CVE-2026-4424 CVE-2026-5121 CVE-2022-36227 Upstream summary: The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. […]
🟠 High ⏱ 15–60 min Last verified: 26 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8263-1 Related CVEs: CVE-2026-25796 CVE-2026-25797 CVE-2026-24484 CVE-2026-25637 CVE-2026-25576 CVE-2026-25798 CVE-2026-24481 CVE-2026-25898 +12 more Upstream summary: It was discovered that ImageMagick incorrectly handled certain malformed image files in certain instances. If […]
🟠 High ⏱ 15–60 min Last verified: 26 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8278-1 Related CVEs: CVE-2024-50004 CVE-2024-58096 CVE-2024-58097 CVE-2025-37926 CVE-2025-38201 CVE-2025-38591 CVE-2025-40039 CVE-2025-40082 +12 more Upstream summary: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 10 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:6388 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 Upstream summary: The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 10 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:7680 Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat […]
🟠 High ⏱ 15–60 min Last verified: 25 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-5389 CVE-2019-10155 CVE-2019-12312 CVE-2020-1763 CVE-2022-23094 CVE-2023-23009 CVE-2023-30570 CVE-2023-38710 +4 more Upstream summary: The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. […]
🟢 Low ⏱ 5–15 min Last verified: 25 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-27406 Upstream summary: Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-216 Related CVEs: CVE-2025-23272 CVE-2025-23247 Upstream summary: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A […]
🟢 Low ⏱ 5–15 min Last verified: 25 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25860 CVE-2026-34155 Upstream summary: The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update […]
🟡 Medium ⏱ 10–30 min Last verified: 25 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-2087 CVE-2011-4358 CVE-2012-2672 CVE-2013-5855 Upstream summary: Oracle Mojarra 1.2_14 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an […]
