🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read • Source: Fedora update FEDORA-2026-7047e2fec5 Upstream summary: Rebuilt with openssl 0.10.79 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read • Source: Fedora update FEDORA-2026-38623b4fed Related CVEs: CVE-2026-42926 CVE-2026-42945 CVE-2026-42946 CVE-2026-42934 CVE-2026-40460 CVE-2026-40701 Upstream summary: nginx-mod-vts: – Rebuild for 1.30.1 nginx-mod-fancyindex: – Rebuild for 1.30.1 nginx-mod-naxsi: – Rebuild for 1.30.1 nginx-mod-headers-more: – Rebuild for 1.30.1 nginx-mod-brotli: […]
🟠 High ⏱ 15–60 min Last verified: 16 March 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8182-1 Related CVEs: CVE-2026-34785 CVE-2026-26962 CVE-2026-26961 CVE-2026-34230 CVE-2026-34830 CVE-2026-34763 CVE-2026-34827 CVE-2026-32762 +12 more Upstream summary: Andrew Lacambra discovered that Rack did not properly parse certain regular expressions. An attacker could […]
🟠 High ⏱ 15–60 min Last verified: 16 March 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8200-3 Related CVEs: CVE-2022-49046 CVE-2024-46816 CVE-2025-37849 CVE-2026-23060 CVE-2026-23074 CVE-2021-47599 CVE-2022-48875 CVE-2022-49072 +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]
🟢 Low ⏱ 5–15 min Last verified: 15 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-66506 CVE-2026-22772 Upstream summary: Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity. Prior to 1.8.3, function identity.extractIssuerURL splits (via […]
🟠 High ⏱ 15–60 min Last verified: 15 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2098 CVE-2018-11771 CVE-2018-1324 CVE-2019-12402 CVE-2021-35515 CVE-2021-35516 CVE-2021-35517 CVE-2021-36090 +3 more Upstream summary: Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress […]
🟡 Medium ⏱ 10–30 min Last verified: 15 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-36377 CVE-2025-70888 CVE-2026-39853 CVE-2026-39855 CVE-2026-39856 Upstream summary: Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe.sys, […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-125 Related CVEs: CVE-2025-23266 CVE-2025-23267 CVE-2025-23359 CVE-2024-0135 CVE-2024-0136 CVE-2024-0137 CVE-2024-0132 Upstream summary: NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where […]
🟠 High ⏱ 15–60 min Last verified: 15 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-19333 CVE-2019-19334 CVE-2019-20391 CVE-2019-20392 CVE-2019-20393 CVE-2019-20394 CVE-2019-20395 CVE-2019-20396 +10 more Upstream summary: In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3005 Related CVEs: CVE-2025-40928 Upstream summary: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified […]
