🟢 Low ⏱ 5–15 min Last verified: 26 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mutt-devel — failure to check SMTP TLS server certificate Related CVEs: CVE-2011-1429 Upstream summary: Dave B reports on Full Disclosure: It seems that mutt fails to check the validity of […]
🟡 Medium ⏱ 10–30 min Last verified: 26 December 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16165 CVE-2019-16166 CVE-2020-23856 CVE-2023-2789 CVE-2025-8735 CVE-2025-8736 Upstream summary: GNU cflow through 1.6 has a use-after-free in the reference function in parser.c. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 26 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9811 CVE-2017-5837 CVE-2017-5839 CVE-2017-5842 CVE-2017-5844 CVE-2019-9928 CVE-2021-3522 CVE-2023-37328 +12 more Upstream summary: The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:3997 Related CVEs: CVE-2025-31492 CVE-2023-37464 CVE-2025-3891 CVE-2024-24814 CVE-2022-23527 CVE-2023-28625 CVE-2021-32786 CVE-2021-32791 +4 more Upstream summary: The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-5723 Upstream summary: Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4509 Upstream summary: The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6303 Upstream summary: Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 CVE-2022-29599 CVE-2020-13956 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean […]
🟢 Low ⏱ 5–15 min Last verified: 26 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-1502 Upstream summary: Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or […]
🟡 Medium ⏱ 10–30 min Last verified: 26 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2021:1414-1 (see also SUSE bugzilla) Related CVEs: CVE-2008-0171 Upstream summary: regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service […]
