🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.0.4-r0 📖 ~4 min read • Source: Alpine secdb entry — dnsdist 2.0.4-r0 Related CVEs: CVE-2026-0396 CVE-2026-0397 CVE-2026-24028 CVE-2026-24029 CVE-2026-24030 CVE-2026-27853 CVE-2026-27854 CVE-2026-33254 +12 more Upstream summary: Alpine community repository for vedge ships dnsdist 2.0.4-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 19 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2015-8396 CVE-2015-8397 CVE-2024-22373 CVE-2024-22391 CVE-2024-25569 CVE-2025-11266 +5 more Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module […]
🟢 Low ⏱ 5–15 min Last verified: 19 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5375 Upstream summary: cmus-status-display in cmus 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cmus-status temporary file. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-14664 CVE-2024-20923 CVE-2024-20925 CVE-2026-21947 CVE-2024-21002 CVE-2024-21003 CVE-2024-21004 CVE-2024-21005 +1 more Upstream summary: Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The […]
🟢 Low ⏱ 5–15 min Last verified: 19 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8168-1 Related CVEs: CVE-2026-33056 Upstream summary: It was discovered that tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked […]
🟠 High ⏱ 15–60 min Last verified: 19 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7824-3 Related CVEs: CVE-2025-49844 CVE-2024-31228 CVE-2024-46981 CVE-2024-51741 CVE-2022-24834 CVE-2022-35977 CVE-2022-36021 CVE-2023-25155 +2 more Upstream summary: USN-7824-1 fixed several vulnerabilities in Redis. This update provides the corresponding update for Ubuntu 22.04 […]
🟡 Medium ⏱ 10–30 min Last verified: 19 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1639-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-28858 CVE-2023-28859 Upstream summary: redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-24842 CVE-2021-1234 Upstream summary: node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different […]
🟠 High ⏱ 15–60 min Last verified: 19 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:3004-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3746 CVE-2023-1017 CVE-2025-49133 CVE-2026-21444 CVE-2021-3446 CVE-2021-3505 CVE-2021-3623 CVE-2023-1018 Upstream summary: A flaw was found in the libtpms code that may cause access beyond the boundary […]
🟡 Medium ⏱ 10–30 min Last verified: 19 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-24979 Upstream summary: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was […]
