🟡 Medium ⏱ 10–30 min Last verified: 30 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1671-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-9082 CVE-2017-7475 CVE-2017-9814 CVE-2025-50422 CVE-2019-6461 CVE-2019-6462 Upstream summary: Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-5991 CVE-2025-5455 CVE-2025-5992 Upstream summary: pkgsrc audit-packages flagged qt6-qtbase>=6.9.0<6.9.1 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-5991 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟡 Medium ⏱ 10–30 min Last verified: 30 January 2026 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-21926 Related CVEs: CVE-2025-39843 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5075971 • MSRC update-guide entry Related CVEs: CVE-2026-21235 CVE-2026-21236 CVE-2026-21533 CVE-2026-21513 CVE-2026-21510 CVE-2026-21508 CVE-2026-21253 CVE-2026-21239 +5 more Affected components: Windows Server 2016 Microsoft summary: Use after free in Microsoft Graphics Component allows […]
🟡 Medium ⏱ 10–30 min Last verified: 30 January 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:5640 Related CVEs: CVE-2026-21936 CVE-2026-21937 CVE-2026-21941 CVE-2026-21948 CVE-2026-21964 CVE-2026-21968 CVE-2025-53040 CVE-2025-53042 +12 more Upstream summary: MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) […]
🟠 High ⏱ 15–60 min Last verified: 30 January 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:10708 Related CVEs: CVE-2026-5201 CVE-2022-48622 CVE-2021-44648 CVE-2021-46829 Upstream summary: The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:21140 Related CVEs: CVE-2025-59088 CVE-2025-59089 CVE-2025-7493 CVE-2025-4404 CVE-2024-2698 CVE-2024-3183 CVE-2020-17049 CVE-2023-5455 +1 more Upstream summary: AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and […]
🔴 Critical ⏱ 15–90 min Last verified: 30 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0138-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-36048 Upstream summary: QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before […]
🟡 Medium ⏱ 10–30 min Last verified: 30 January 2026 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:13515 Related CVEs: CVE-2026-33554 Upstream summary: The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): * freeipmi: […]
🔴 Critical ⏱ 15–90 min Last verified: 30 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-4303 CVE-2023-38403 CVE-2025-54351 CVE-2024-26306 CVE-2024-53580 CVE-2025-54349 CVE-2025-54350 Upstream summary: The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers […]
