🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:4367 Related CVEs: CVE-2023-4727 CVE-2022-2414 CVE-2021-4213 Upstream summary: The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System. Security Fix(es): * dogtag ca: token authentication bypass vulnerability (CVE-2023-4727) […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 0.9.13-r5 📖 ~4 min read • Source: Alpine secdb entry — libvncserver 0.9.13-r5 Related CVEs: CVE-2020-29260 CVE-2019-20839 CVE-2019-20840 CVE-2020-14397 CVE-2020-14399 CVE-2020-14400 CVE-2020-14401 CVE-2020-14402 +8 more Upstream summary: Alpine community repository for vv3.20 ships libvncserver 0.9.13-r5 which […]
🟢 Low ⏱ 5–15 min Last verified: 10 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3607 Upstream summary: DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-47248 Upstream summary: Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is […]
🟢 Low ⏱ 5–15 min Last verified: 10 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0667 Upstream summary: Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a […]
🟢 Low ⏱ 5–15 min Last verified: 10 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4979 Upstream summary: getipacctg in rancid 2.3.2~a8 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/ipacct.#####.prefixes, (2) /tmp/ipacct.#####.sorted, (3) /tmp/ipacct.#####.pl, and (4) /tmp/ipacct.##### […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.8-r0 📖 ~4 min read • Source: Alpine secdb entry — cabextract 1.8-r0 Related CVEs: CVE-2018-18584 Upstream summary: Alpine community repository for vv3.18 ships cabextract 1.8-r0 which addresses CVE-2018-18584. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 10 June 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6326-1 Related CVEs: CVE-2023-40267 CVE-2022-24439 Upstream summary: It was discovered that GitPython did not block insecure options from user inputs in the clone command. An attacker could possibly use this […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:3179-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-19726 CVE-2022-44840 CVE-2022-45703 CVE-2022-47673 CVE-2022-47695 CVE-2022-47696 CVE-2022-35206 CVE-2022-4285 +11 more Upstream summary: An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 7.321.2.6.28-r0 📖 ~4 min read • Source: Alpine secdb entry — openjdk7 7.321.2.6.28-r0 Related CVEs: CVE-2021-35550 CVE-2021-35556 CVE-2021-35559 CVE-2021-35561 CVE-2021-35564 CVE-2021-35565 CVE-2021-35586 CVE-2021-35588 +12 more Upstream summary: Alpine community repository for vv3.18 ships openjdk7 7.321.2.6.28-r0 which […]
