🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:8096 Related CVEs: CVE-2025-40909 Upstream summary: Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): * perl: Perl threads have […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1474 CVE-2018-18898 Upstream summary: Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6114 Upstream summary: The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/changelog or (2) /tmp/.git-effort. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 13 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-26486 CVE-2023-26487 CVE-2025-25304 CVE-2025-26619 CVE-2025-27793 CVE-2025-59840 CVE-2025-65110 CVE-2025-66648 Upstream summary: Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. The Vega […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 2.9-r1 📖 ~4 min read • Source: Alpine secdb entry — lcms2 2.9-r1 Related CVEs: CVE-2018-16435 CVE-2016-10165 CVE-2026-41254 Upstream summary: Alpine main repository for vv3.20 ships lcms2 2.9-r1 which addresses CVE-2018-16435. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-3292 Upstream summary: The GridFTP in Globus Toolkit (GT) before 5.2.2, when certain autoconf macros are defined, does not properly check the return value from the getpwnam_r function, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-27628 CVE-2026-28804 CVE-2026-27888 CVE-2026-27025 CVE-2026-27026 Upstream summary: pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-68920 Upstream summary: C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-45765 Upstream summary: ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not something that is enforced by this library. Currently more […]
🟢 Low ⏱ 5–15 min Last verified: 13 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3068 Upstream summary: Unspecified vulnerability in Eric Integrated Development Environment (eric3) before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit." Table of contents […]
