🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-156 Related CVEs: CVE-2023-5197 Upstream summary: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and removal of rules from […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:15112-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22794 CVE-2022-32224 CVE-2022-44566 Upstream summary: A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed […]
Introduction Setting up manage packages with dnf on oracle linux 9 on a Oracle Linux 9 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Manage Packages with DNF on Oracle Linux 9, with all the commands you need, the SELinux and firewalld considerations to […]
🟠 High ⏱ 15–60 min Last verified: 14 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3467 CVE-2014-3468 CVE-2014-3469 CVE-2015-2806 CVE-2015-3622 CVE-2016-4008 CVE-2017-10790 CVE-2017-6891 +5 more Upstream summary: Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-4012 CVE-2021-22212 CVE-2019-6442 CVE-2019-6443 CVE-2019-6445 Upstream summary: ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:1824-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-26768 CVE-2023-26769 CVE-2023-26767 CVE-2022-26981 CVE-2022-31783 CVE-2017-13738 CVE-2017-13739 CVE-2017-13741 +6 more Upstream summary: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause […]
🟠 High ⏱ 15–60 min Last verified: 14 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9780 CVE-2018-6560 CVE-2019-10063 CVE-2019-8308 CVE-2021-21261 CVE-2021-21381 CVE-2021-41133 CVE-2021-43860 +7 more Upstream summary: In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with […]
🟢 Low ⏱ 5–15 min Last verified: 14 August 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6708-1 Related CVEs: CVE-2023-46045 Upstream summary: It was discovered that Graphviz incorrectly handled certain config6a files. An attacker could possibly use this issue to cause a denial of service. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2008-2384 Upstream summary: pkgsrc audit-packages flagged ap{,2,22}-auth-mysql>=4<4.3.9nb1 for vulnerability class 'sql-injection'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2384 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟢 Low ⏱ 5–15 min Last verified: 14 August 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7118-1 Related CVEs: CVE-2023-40889 CVE-2023-40890 Upstream summary: It was discovered that ZBar did not properly handle certain QR codes. If a user or automated system using ZBar were tricked into […]
