🟡 Medium ⏱ 5–30 min Last verified: 3 December 2025 Affected versions: RHEL 10.0 RHEL 10.1 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libudisks — Udisks: out-of-bounds read in udisks daemon Related CVEs: CVE-2025-8067 Upstream summary: [email protected] reports: A flaw was found in the Udisks daemon, where it allows unprivileged users to create […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0427 Upstream summary: Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-1194 Related CVEs: CVE-2025-5278 Upstream summary: A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory […]
🟡 Medium ⏱ 10–30 min Last verified: 2 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4571 CVE-2012-5577 CVE-2012-5578 Upstream summary: Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-3155 Upstream summary: A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-13654 Upstream summary: A stack buffer overflow vulnerability exists in the buffer_get function of duc, a disk management tool, where a condition can evaluate to true due to underflow, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2659 Related CVEs: CVE-2024-39936 CVE-2025-2756 CVE-2025-3549 CVE-2025-11277 CVE-2025-2750 CVE-2025-2751 CVE-2025-2757 CVE-2025-3158 +12 more Upstream summary: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through […]
🟠 High ⏱ 15–60 min Last verified: 2 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1059 CVE-2019-14818 CVE-2020-10722 CVE-2020-10723 CVE-2020-10724 CVE-2020-10725 CVE-2020-10726 CVE-2020-14374 +10 more Upstream summary: The DPDK vhost-user interface does not check to verify that all the requested guest physical range […]
🟢 Low ⏱ 5–15 min Last verified: 2 December 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-0495 Upstream summary: Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support credentials by setting secrets directly as attribute values in cache-to/cache-from configuration. When […]
