🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-9287 CVE-2026-27601 Upstream summary: Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 18 April 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8108-1 Related CVEs: CVE-2024-30172 CVE-2023-33201 CVE-2025-8916 CVE-2024-29857 CVE-2024-30171 CVE-2024-34447 Upstream summary: It was discovered that Bouncy Castle did not sanitize user input when inserting it into an LDAP search filter. […]
🟢 Low ⏱ 5–15 min Last verified: 18 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7778-1 Related CVEs: CVE-2025-9288 Upstream summary: Nikita Skovoroda discovered that sha.js did not properly handle certain inputs. An attacker could possibly use this issue to manipulate the internal state of […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-4444 Upstream summary: A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Onion Service […]
🟢 Low ⏱ 5–15 min Last verified: 18 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8173-1 Related CVEs: CVE-2025-7519 CVE-2026-4897 Upstream summary: It was discovered that polkit incorrectly handled nested elements in XML policy files. If an administrator were tricked into installing a malicious policy […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:1334 (see also SUSE bugzilla) Related CVEs: CVE-2026-0861 CVE-2025-4802 CVE-2026-4437 CVE-2026-4438 CVE-2026-0915 CVE-2025-15281 CVE-2025-8058 CVE-2025-0395 Upstream summary: Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) […]
🟠 High ⏱ 15–60 min Last verified: 18 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3230 Upstream summary: The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:16484 (see also SUSE bugzilla) Related CVEs: CVE-2026-4150 CVE-2026-4153 CVE-2026-4154 CVE-2026-2044 CVE-2026-2045 CVE-2026-2048 CVE-2026-2271 CVE-2026-2272 +12 more Upstream summary: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability […]
🟡 Medium ⏱ 10–30 min Last verified: 18 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1238-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1571 CVE-2018-10886 CVE-2020-11979 CVE-2020-1945 CVE-2021-36373 CVE-2021-36374 Upstream summary: Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:13657 Related CVEs: CVE-2026-35091 CVE-2026-35092 Upstream summary: The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software. Security Fix(es): * corosync: Corosync: Denial of […]
