🟢 Low ⏱ 5–15 min Last verified: 23 July 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-27638 CVE-2025-24356 Upstream summary: receive.c in fastd before v21 allows denial of service (assertion failure) when receiving packets with an invalid type code. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 1.17.4-r1 📖 ~4 min read • Source: Alpine secdb entry — cairo 1.17.4-r1 Related CVEs: CVE-2019-6462 CVE-2020-35492 CVE-2018-19876 Upstream summary: Alpine main repository for vv3.20 ships cairo 1.17.4-r1 which addresses CVE-2019-6462. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2025-8959 Upstream summary: HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, […]
🟢 Low ⏱ 5–15 min Last verified: 23 July 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6906-1 Related CVEs: CVE-2024-5569 Upstream summary: It was discovered that python-zipp did not properly handle the zip files with malformed names. An attacker could possibly use this issue to cause […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5053638 • MSRC update-guide entry Related CVEs: CVE-2025-24035 CVE-2025-24045 CVE-2025-24064 CVE-2025-26645 CVE-2024-9157 CVE-2025-24044 CVE-2025-24987 CVE-2025-24988 +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Sensitive data storage in improperly […]
🟠 High ⏱ 15–60 min Last verified: 23 July 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7573-2 Related CVEs: CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 +12 more Upstream summary: USN-7573-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2023:5264 Related CVEs: CVE-2022-40284 CVE-2023-3354 CVE-2025-11234 CVE-2021-3750 CVE-2023-3301 CVE-2021-46790 CVE-2022-30784 CVE-2022-30786 +4 more Upstream summary: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. […]
🟠 High ⏱ 15–60 min Last verified: 23 July 2025 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2025:20479-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-6018 CVE-2020-16125 CVE-2011-1709 CVE-2018-14424 Upstream summary: A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read • Source: Fedora update FEDORA-2026-204499102d Upstream summary: Update to version 0.103.13. Addresses RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2025:17129 Related CVEs: CVE-2025-7493 CVE-2025-59088 CVE-2025-59089 Upstream summary: Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise […]
