🟠 High ⏱ 15–60 min Last verified: 14 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:0841-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-25255 CVE-2023-24607 CVE-2023-32763 CVE-2024-39936 CVE-2023-32762 CVE-2023-33285 CVE-2023-34410 CVE-2023-37369 +6 more Upstream summary: In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux […]
🔴 Critical ⏱ 15–90 min Last verified: 14 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2020:177-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18218 CVE-2007-1536 CVE-2007-2799 CVE-2012-1571 CVE-2014-3710 CVE-2014-8116 CVE-2014-8117 CVE-2017-1000249 +5 more Upstream summary: cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read • Source: Fedora update FEDORA-2026-1fd21102d1 Related CVEs: CVE-2026-1502 CVE-2026-4786 CVE-2026-5713 CVE-2026-6100 Upstream summary: Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 —- New minor version of the alternate Python interpreter Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 14 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1438 CVE-2013-1439 CVE-2013-2126 CVE-2015-3885 CVE-2015-8366 CVE-2015-8367 CVE-2017-13735 CVE-2017-14265 +12 more Upstream summary: Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2026:12441 Related CVEs: CVE-2026-4878 CVE-2023-2602 CVE-2023-2603 Upstream summary: Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): * libcap: libcap: Privilege escalation via TOCTOU […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 6.21.0-r0 📖 ~4 min read • Source: Alpine secdb entry — incus-feature 6.21.0-r0 Related CVEs: CVE-2026-23953 CVE-2026-23954 CVE-2025-52890 CVE-2025-52889 Upstream summary: Alpine community repository for vedge ships incus-feature 6.21.0-r0 which addresses CVE-2026-23953. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-39882 Upstream summary: OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response body into an in-memory bytes.Buffer without […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-33186 Upstream summary: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:6300 Related CVEs: CVE-2026-2920 CVE-2026-2921 CVE-2026-2922 CVE-2026-2923 CVE-2026-3082 CVE-2026-3083 CVE-2026-3085 Upstream summary: GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free […]
