🟢 Low ⏱ 5–15 min Last verified: 6 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-6614 Upstream summary: The save_log_local function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose […]
🟢 Low ⏱ 5–15 min Last verified: 6 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5226 Upstream summary: irc_server.c in dircproxy 1.2.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via an ACTION command without a parameter, which […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 9 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:0771 Related CVEs: CVE-2025-67268 CVE-2025-67269 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 6 February 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3575 CVE-2009-3617 CVE-2010-1512 CVE-2019-3500 CVE-2026-8367 Upstream summary: Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to cause a denial of service (crash) […]
🟠 High ⏱ 15–60 min Last verified: 6 February 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8093-1 Related CVEs: CVE-2026-3731 CVE-2026-0965 CVE-2026-0964 CVE-2026-0967 CVE-2026-0966 CVE-2026-0968 CVE-2025-8277 CVE-2025-8114 +9 more Upstream summary: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a […]
🟢 Low ⏱ 5–15 min Last verified: 6 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0793 Upstream summary: The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:4672 Related CVEs: CVE-2025-61726 CVE-2025-61728 CVE-2025-68121 CVE-2024-24785 CVE-2025-61729 CVE-2025-65637 CVE-2025-47913 CVE-2025-52881 +12 more Upstream summary: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. […]
🟢 Low ⏱ 5–15 min Last verified: 6 February 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8256-1 Related CVEs: CVE-2026-41082 Upstream summary: Andrew Nesbitt discovered that opam did not properly validate file destination paths in package install files. An attacker could use this issue to bypass […]
🟡 Medium ⏱ 10–30 min Last verified: 6 February 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7558-1 Related CVEs: CVE-2023-50186 CVE-2024-0444 CVE-2025-3887 Upstream summary: It was discovered that the AV1 codec plugin in GStreamer could be made to write out of bounds. An attacker could possibly […]
🟠 High ⏱ 15–60 min Last verified: 6 February 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7955-2 Related CVEs: CVE-2026-21441 https://bugs.launchpad.net/bugs/2138420 CVE-2025-66418 CVE-2025-66471 CVE-2025-50182 CVE-2025-50181 CVE-2024-37891 CVE-2018-25091 +4 more Upstream summary: USN-7955-1 fixed vulnerabilities in urllib3. The update introduced a regression in response streaming on Ubuntu […]
