🟡 Medium ⏱ 10–30 min Last verified: 6 January 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2025:17558 (see also SUSE bugzilla) Related CVEs: CVE-2025-48964 CVE-2025-47268 Upstream summary: ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via […]
🟡 Medium ⏱ 10–30 min Last verified: 6 January 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2025-9156 Related CVEs: CVE-2025-22871 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 6 January 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2021:6-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8631 CVE-2020-8632 CVE-2024-6174 CVE-2019-0816 CVE-2021-3429 CVE-2022-2084 CVE-2023-1786 CVE-2024-11584 Upstream summary: cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5065429 • MSRC update-guide entry Related CVEs: CVE-2025-54918 CVE-2025-55226 CVE-2025-53799 CVE-2025-53800 CVE-2025-48807 CVE-2025-49734 CVE-2025-54099 CVE-2025-54101 +12 more Affected components: Windows Server 2016 Microsoft summary: Improper authentication in Windows NTLM allows an authorized […]
🟠 High ⏱ 15–60 min Last verified: 6 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-resolv — Possible denial of service Related CVEs: CVE-2004-0755 CVE-2004-0983 CVE-2005-1992 CVE-2005-2337 CVE-2006-3694 CVE-2006-5467 CVE-2006-6303 CVE-2008-1447 +12 more Upstream summary: Manu reports: The vulnerability is caused by an insufficient check […]
🟡 Medium ⏱ 5–30 min Last verified: 5 January 2026 Affected versions: RHEL 10.0 RHEL 10.1 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
🟢 Low ⏱ 5–15 min Last verified: 5 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lives — insecure files permissions Upstream summary: Debian reports: smogrify script creates insecure temporary files. lives creates and uses world-writable directory. Table of contents Symptom & Impact Environment & Reproduction […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-31625 CVE-2025-1735 Upstream summary: pkgsrc audit-packages flagged php81-pgsql<8.1.7 for vulnerability class 'remote-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-31625 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟠 High ⏱ 15–60 min Last verified: 5 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wolfssl — multiple issues Related CVEs: CVE-2015-6925 CVE-2015-7744 CVE-2020-12966 CVE-2021-46744 CVE-2022-34293 CVE-2025-11931 CVE-2025-11932 CVE-2025-11933 +5 more Upstream summary: wolfSSL blog reports: This release includes multiple fixes across TLS 1.2, TLS […]
🟢 Low ⏱ 5–15 min Last verified: 5 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pdfminer.six — Arbitrary Code Execution in pdfminer.six via Crafted PDF Input Related CVEs: CVE-2025-64512 Upstream summary: Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if […]
