🟡 Medium ⏱ 10–30 min Last verified: 17 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-3885 CVE-2015-8366 CVE-2026-24808 Upstream summary: Integer overflow in the ljpeg_start function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service (crash) via a […]
🟠 High ⏱ 15–60 min Last verified: 17 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8068-1 Related CVEs: CVE-2025-31648 CVE-2025-20053 CVE-2025-22839 CVE-2025-22840 CVE-2025-20109 CVE-2025-24305 CVE-2025-26403 CVE-2025-21090 +12 more Upstream summary: Sergiu Ghetie discovered that some Intel® processors did not properly handle values in the microcode […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-41257 CVE-2026-43894 CVE-2025-49014 CVE-2026-32316 CVE-2026-33947 CVE-2026-33948 CVE-2026-39956 CVE-2026-39979 +12 more Upstream summary: jq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8168-1 Related CVEs: CVE-2026-33056 Upstream summary: It was discovered that tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked […]
🟠 High ⏱ 15–60 min Last verified: 17 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8023-1 Related CVEs: CVE-2026-25210 CVE-2026-24515 CVE-2012-1148 CVE-2015-1283 CVE-2016-0718 CVE-2016-4472 CVE-2018-20843 CVE-2019-15903 +11 more Upstream summary: It was discovered that Expat, contained within the xmltok library, incorrectly handled the initialization of […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-3700 Upstream summary: A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing […]
🟠 High ⏱ 15–60 min Last verified: 17 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5376-5 Related CVEs: https://launchpad.net/bugs/2142790 https://launchpad.net/bugs/2142239 https://launchpad.net/bugs/2116251 CVE-2025-48385 CVE-2025-46835 CVE-2025-27614 CVE-2025-48386 CVE-2025-27613 +12 more Upstream summary: USN-5376-4 fixed a regression in Git. The update introduced a regression when specifying configuration includes […]
🟡 Medium ⏱ 10–30 min Last verified: 17 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3016-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-34623 Upstream summary: An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object […]
🟡 Medium ⏱ 10–30 min Last verified: 17 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1329-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-3386 Upstream summary: The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:4672 Related CVEs: CVE-2025-61726 CVE-2025-61728 CVE-2025-68121 CVE-2024-24785 CVE-2025-61729 CVE-2025-65637 CVE-2025-47913 CVE-2025-52881 +12 more Upstream summary: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. […]
