🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PyYAML — arbitrary code execution Related CVEs: CVE-2020-14343 CVE-2020-1747 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:14126 Related CVEs: CVE-2025-52999 CVE-2019-12384 CVE-2018-11784 CVE-2018-8014 CVE-2018-8034 CVE-2018-8037 CVE-2020-36518 CVE-2019-14540 +11 more Upstream summary: The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-46129 Upstream summary: NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The cryptographic key handling library, nkeys, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 9.20.9-r0 📖 ~4 min read • Source: Alpine secdb entry — bind 9.20.9-r0 Related CVEs: CVE-2025-40775 CVE-2026-3039 CVE-2026-3592 CVE-2026-3593 CVE-2026-5946 CVE-2026-5947 CVE-2026-5950 CVE-2026-1519 +12 more Upstream summary: Alpine main repository for vedge ships bind 9.20.9-r0 which […]
🟡 Medium ⏱ 5–30 min Last verified: 20 January 2026 Affected versions: RHEL 10 RHEL 10.0 RHEL 10.1 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-41054 Upstream summary: In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:1852 Related CVEs: CVE-2025-14104 Upstream summary: The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-1425 Upstream summary: A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function _dns_decode_rr_head/_dns_decode_SVCB_HTTPS of the file src/dns.c of the component […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-7240 CVE-2009-4997 Upstream summary: gnome-power-manager 2.14.0 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-41604 CVE-2026-41605 CVE-2026-41636 CVE-2026-41606 CVE-2026-41607 CVE-2020-13949 Upstream summary: Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to […]
