🟢 Low ⏱ 5–15 min Last verified: 8 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-45286 Upstream summary: A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same *bytes.Buffer […]
🟡 Medium ⏱ 10–30 min Last verified: 8 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-4570 CVE-2016-4571 CVE-2018-20004 CVE-2018-20005 CVE-2018-20592 CVE-2018-20593 CVE-2026-5037 Upstream summary: The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 8 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 8 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-0240 Upstream summary: Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live […]
🟡 Medium ⏱ 10–30 min Last verified: 8 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0689 CVE-2009-2463 CVE-2013-5607 CVE-2014-1545 CVE-2015-7183 CVE-2016-1951 Upstream summary: Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 10 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:3476 Related CVEs: CVE-2026-26103 CVE-2026-26104 Upstream summary: The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fix(es): * udisks: Missing […]
🟠 High ⏱ 15–60 min Last verified: 8 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13445 CVE-2019-13465 CVE-2019-13566 CVE-2020-16124 CVE-2021-37146 CVE-2024-39289 CVE-2024-39835 CVE-2024-41148 +2 more Upstream summary: An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() […]
🟢 Low ⏱ 5–15 min Last verified: 8 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32141 CVE-2026-33228 Upstream summary: flatted is a circular JSON parser. Prior to 3.4.0, flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. […]
🟠 High ⏱ 15–60 min Last verified: 8 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8136-2 Related CVEs: CVE-2026-0394 https://launchpad.net/bugs/2150116 CVE-2025-59028 CVE-2026-27855 CVE-2026-27860 CVE-2025-59031 CVE-2025-59032 CVE-2026-27858 +7 more Upstream summary: USN-8136-1 fixed vulnerabilities in Dovecot. The update caused a regression on Ubuntu 22.04 LTS and […]
🟠 High ⏱ 15–60 min Last verified: 8 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8155-2 Related CVEs: CVE-2026-28388 CVE-2026-28389 CVE-2026-28390 CVE-2026-28387 CVE-2025-68160 CVE-2025-69420 CVE-2026-22796 CVE-2025-69421 +12 more Upstream summary: USN-8155-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding updates for CVE-2026-28387 for openssl […]
