🟡 Medium ⏱ 10–30 min Last verified: 16 April 2025 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-3855 Related CVEs: CVE-2025-30691 CVE-2025-21587 CVE-2025-30698 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2025 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-22660 Related CVEs: CVE-2025-4598 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 16 April 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:7118 Related CVEs: CVE-2024-1394 CVE-2024-34158 CVE-2024-9355 Upstream summary: A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images […]
🟠 High ⏱ 15–60 min Last verified: 16 April 2025 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:1872 Related CVEs: CVE-2024-27316 CVE-2023-25690 CVE-2025-49630 CVE-2023-43622 CVE-2023-45802 CVE-2024-36387 Upstream summary: The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14446-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-41110 CVE-2025-22874 CVE-2025-47907 Upstream summary: Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 7.1.1.21-r0 📖 ~4 min read • Source: Alpine secdb entry — imagemagick 7.1.1.21-r0 Related CVEs: CVE-2023-5341 CVE-2022-44267 CVE-2022-44268 CVE-2022-3213 CVE-2022-1115 CVE-2022-1114 CVE-2022-2719 CVE-2022-0284 +12 more Upstream summary: Alpine community repository for vv3.19 ships imagemagick 7.1.1.21-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 99.0.4844.84-r0 📖 ~4 min read • Source: Alpine secdb entry — chromium 99.0.4844.84-r0 Related CVEs: CVE-2022-1096 CVE-2022-0452 CVE-2022-0453 CVE-2022-0454 CVE-2022-0455 CVE-2022-0456 CVE-2022-0457 CVE-2022-0458 +12 more Upstream summary: Alpine community repository for vv3.19 ships chromium 99.0.4844.84-r0 which […]
🟠 High ⏱ 5–30 min Last verified: 16 April 2025 Affected versions: CentOS Stream 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟢 Low ⏱ 5–15 min Last verified: 15 April 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5838 CVE-2024-47606 Upstream summary: The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:5231 Related CVEs: CVE-2024-1737 CVE-2024-1975 CVE-2024-4076 CVE-2023-4408 CVE-2023-50387 CVE-2023-50868 CVE-2023-5517 CVE-2023-5679 +1 more Upstream summary: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND […]
