🟡 Medium ⏱ 10–30 min Last verified: 19 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1639-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-28858 CVE-2023-28859 Upstream summary: redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-24842 CVE-2021-1234 Upstream summary: node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different […]
🟠 High ⏱ 15–60 min Last verified: 19 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:3004-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3746 CVE-2023-1017 CVE-2025-49133 CVE-2026-21444 CVE-2021-3446 CVE-2021-3505 CVE-2021-3623 CVE-2023-1018 Upstream summary: A flaw was found in the libtpms code that may cause access beyond the boundary […]
🟡 Medium ⏱ 10–30 min Last verified: 19 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-24979 Upstream summary: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was […]
🟠 High ⏱ 15–60 min Last verified: 19 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2024:6757 (see also SUSE bugzilla) Related CVEs: CVE-2024-7383 CVE-2021-20286 CVE-2022-0485 CVE-2023-5215 CVE-2023-5871 Upstream summary: A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1555-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-20884 CVE-2026-20889 CVE-2026-20911 CVE-2026-21413 CVE-2026-24450 CVE-2026-24660 CVE-2026-5342 Upstream summary: An integer overflow vulnerability exists in the deflate_dng_load_raw functionality of LibRaw Commit 8dc68e2. A specially crafted […]
🟠 High ⏱ 15–60 min Last verified: 19 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2015-5738 CVE-2021-3345 CVE-2021-33560 CVE-2013-4242 CVE-2014-3591 CVE-2015-0837 CVE-2015-7511 CVE-2016-6313 +6 more Upstream summary: The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used […]
🟠 High ⏱ 15–60 min Last verified: 19 April 2026 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2026-9686 Related CVEs: CVE-2026-22007 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-23865 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:0056-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-3817 CVE-2026-39827 CVE-2026-39834 CVE-2026-42508 CVE-2026-46597 CVE-2026-33748 CVE-2026-33747 CVE-2025-66564 +12 more Upstream summary: HashiCorp's go-getter library is vulnerable to argument injection when executing Git to discover […]
🟠 High ⏱ 15–60 min Last verified: 19 April 2026 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2026-6383 Related CVEs: CVE-2026-25679 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
