🟢 Low ⏱ 5–15 min Last verified: 14 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-3896 CVE-2023-4949 Upstream summary: Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2369 CVE-2015-8833 Upstream summary: Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 3.8.5-r0 📖 ~4 min read • Source: Alpine secdb entry — gnutls 3.8.5-r0 Related CVEs: CVE-2024-28834 CVE-2024-28835 CVE-2023-5981 CVE-2024-0553 CVE-2024-0567 CVE-2026-3832 CVE-2026-3833 CVE-2026-5260 +12 more Upstream summary: Alpine main repository for vv3.20 ships gnutls 3.8.5-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-0162 Upstream summary: misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 14 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-13822 CVE-2020-28498 CVE-2024-42459 CVE-2024-42460 CVE-2024-42461 CVE-2024-48948 CVE-2024-48949 CVE-2025-14505 Upstream summary: The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:4553 Related CVEs: CVE-2025-14242 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 15–60 min Last verified: 14 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-2226 CVE-2016-4487 CVE-2016-4488 CVE-2016-4489 CVE-2016-4490 CVE-2016-4491 CVE-2016-4492 CVE-2016-4493 +2 more Upstream summary: Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-41163 CVE-2020-5291 CVE-2019-12439 Upstream summary: bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid […]
🟠 High ⏱ 15–60 min Last verified: 14 March 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8130-1 Related CVEs: CVE-2026-2921 CVE-2025-47808 CVE-2025-47807 CVE-2025-47806 CVE-2024-47538 CVE-2024-47541 CVE-2024-47542 CVE-2024-47600 +6 more Upstream summary: It was discovered that GStreamer Base Plugins incorrectly handled certain AVI media files. A remote […]
🟡 Medium ⏱ 10–30 min Last verified: 14 March 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7604-2 Related CVEs: CVE-2025-32462 CVE-2023-28486 CVE-2023-28487 CVE-2022-33070 CVE-2023-22809 CVE-2021-23239 CVE-2021-3156 CVE-2019-18634 +1 more Upstream summary: USN-7604-1 fixed CVE-2025-32462 in sudo. This update provides the corresponding fixes for Ubuntu 20.04 LTS, […]
