🟢 Low ⏱ 5–15 min Last verified: 10 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-3417 Upstream summary: The good_client function in rquotad (rquota_svc.c) in Linux DiskQuota (aka quota) before 3.17 invokes the hosts_ctl function the first time without a host name, which […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-27211 Upstream summary: steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 10 December 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7610-1 Related CVEs: CVE-2025-37798 CVE-2025-37890 CVE-2025-37932 CVE-2025-37997 CVE-2025-38000 CVE-2025-38001 CVE-2023-53034 CVE-2024-53222 +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]
🟠 High ⏱ 15–60 min Last verified: 10 December 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7837-1 Related CVEs: CVE-2025-47219 CVE-2024-47537 CVE-2024-47539 CVE-2024-47540 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 +12 more Upstream summary: Shaun Mirani discovered that GStreamer Good Plugins incorrectly handled certain malformed media files. An attacker […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3960-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-41311 CVE-2025-68431 Upstream summary: In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2025 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-3602 Upstream summary: Directory traversal vulnerability in device-linux.c in the router advertisement daemon (radvd) before 1.8.2 allows local users to overwrite arbitrary files, and remote […]
🟡 Medium ⏱ 10–30 min Last verified: 10 December 2025 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-22405 Related CVEs: CVE-2025-38724 CVE-2025-39864 CVE-2025-39898 CVE-2025-39918 CVE-2025-39955 CVE-2025-39981 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 10 December 2025 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2025-8131 Related CVEs: CVE-2025-27221 CVE-2025-27219 CVE-2025-25186 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟠 High ⏱ 15–60 min Last verified: 10 December 2025 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2026-3407 Related CVEs: CVE-2025-59375 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2025:17129 Related CVEs: CVE-2025-7493 CVE-2025-59088 CVE-2025-59089 Upstream summary: Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise […]
