🟠 High ⏱ 15–60 min Last verified: 15 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0974 CVE-2008-5718 CVE-2018-1160 CVE-2021-31439 CVE-2022-0194 CVE-2022-22995 CVE-2022-23121 CVE-2022-23122 +12 more Upstream summary: The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 2.40-r8 📖 ~4 min read • Source: Alpine secdb entry — binutils 2.40-r8 Related CVEs: CVE-2025-0840 CVE-2023-1972 CVE-2023-1579 CVE-2022-38533 CVE-2022-38126 CVE-2021-3487 CVE-2018-19931 CVE-2018-19932 +3 more Upstream summary: Alpine main repository for vv3.18 ships binutils 2.40-r8 which […]
🟠 High ⏱ 15–60 min Last verified: 15 April 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8268-1 Related CVEs: CVE-2026-4890 CVE-2026-4891 CVE-2026-2291 CVE-2026-4892 CVE-2026-5172 CVE-2026-4893 CVE-2019-14834 CVE-2023-28450 +8 more Upstream summary: Andrew S. Fasano, Royce M, and Hugo Martinez Ray discovered that Dnsmasq did not allocate […]
🟡 Medium ⏱ 5–30 min Last verified: 14 April 2026 Affected versions: Oracle Linux 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 10 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:10758 Related CVEs: CVE-2026-35535 Upstream summary: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:6621 Related CVEs: CVE-2026-30892 Upstream summary: crun is a OCI runtime Security Fix(es): * crun: crun: Privilege escalation due to incorrect parsing of the `–user` option (CVE-2026-30892) For more details about the […]
🟠 High ⏱ 15–60 min Last verified: 14 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11509 CVE-2017-6369 CVE-2025-54989 CVE-2025-65104 CVE-2026-27890 CVE-2026-28212 CVE-2026-28214 CVE-2026-28224 +4 more Upstream summary: An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-22049 CVE-2025-68696 Upstream summary: httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:1409 Related CVEs: CVE-2025-1220 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1735 CVE-2025-6491 CVE-2024-11235 CVE-2025-1217 +12 more Upstream summary: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1000236 Upstream summary: Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used. Table of contents Symptom & Impact Environment & Reproduction Root […]
