🟡 Medium ⏱ 10–30 min Last verified: 11 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7147-1 Related CVEs: CVE-2016-6802 CVE-2023-34478 CVE-2023-46749 CVE-2023-46750 Upstream summary: It was discovered that Apache Shiro incorrectly handled path traversal when used with other web frameworks or path rewriting. An attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:0067 Related CVEs: CVE-2025-45582 Upstream summary: The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fix(es): * tar: Tar path traversal […]
🟡 Medium ⏱ 10–30 min Last verified: 11 March 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0963-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1580 CVE-2023-32570 Upstream summary: An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 1.3.2-r0 📖 ~4 min read • Source: Alpine secdb entry — pam-u2f 1.3.2-r0 Related CVEs: CVE-2025-23013 CVE-2021-31924 Upstream summary: Alpine community repository for vv3.20 ships pam-u2f 1.3.2-r0 which addresses CVE-2025-23013. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14891-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-2176 CVE-2025-2177 CVE-2025-2173 CVE-2025-2174 CVE-2025-2175 Upstream summary: A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption […]
🟡 Medium ⏱ 10–30 min Last verified: 11 March 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-202410:15282-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5569 Upstream summary: A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 6.0.4-r0 📖 ~4 min read • Source: Alpine secdb entry — suricata 6.0.4-r0 Related CVEs: CVE-2021-37592 CVE-2021-45098 CVE-2021-35063 Upstream summary: Alpine community repository for vv3.19 ships suricata 6.0.4-r0 which addresses CVE-2021-37592. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 11 March 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1396-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-31744 CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-8654 CVE-2016-9262 CVE-2016-9560 CVE-2020-27828 +12 more Upstream summary: In Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability, […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2961-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-22034 Upstream summary: Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change […]
🟠 High ⏱ 15–60 min Last verified: 11 March 2025 Affected versions: CentOS Stream 10 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:4174 Related CVEs: CVE-2025-61726 CVE-2025-68121 CVE-2025-61729 CVE-2025-68156 Upstream summary: Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fix(es): * golang: net/url: Memory exhaustion in query parameter parsing […]
Progressive Robot: Your Gateway to Comprehensive IT Solutions — Specializing in Web Development, Mobile App Development, and Expert IT Services.
© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
