🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 4.3.4-r0 📖 ~4 min read • Source: Alpine secdb entry — nsd 4.3.4-r0 Related CVEs: CVE-2020-28935 Upstream summary: Alpine main repository for vv3.19 ships nsd 4.3.4-r0 which addresses CVE-2020-28935. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 8 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-2440 Upstream summary: Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.13.6-r0 📖 ~4 min read • Source: Alpine secdb entry — ruby-nokogiri 1.13.6-r0 Related CVEs: CVE-2022-29181 CVE-2022-24836 CVE-2022-23476 CVE-2020-26247 CVE-2019-5477 Upstream summary: Alpine community repository for vv3.19 ships ruby-nokogiri 1.13.6-r0 which addresses CVE-2022-29181. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 8 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0390 Upstream summary: Multiple buffer overflows in Options Parsing Tool (OPT) shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 8 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2003 CVE-2015-9262 CVE-2017-16612 Upstream summary: Integer overflow in X.org libXcursor 1.1.13 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors […]
🟢 Low ⏱ 5–15 min Last verified: 8 June 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10075 CVE-2024-34062 Upstream summary: The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git […]
🟢 Low ⏱ 5–15 min Last verified: 8 June 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6715-1 Related CVEs: CVE-2024-1013 Upstream summary: It was discovered that unixODBC incorrectly handled certain bytes. An attacker could use this issue to execute arbitrary code or cause a crash. Table […]
🟠 High ⏱ 15–60 min Last verified: 8 June 2024 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2021:6-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8631 CVE-2020-8632 CVE-2021-3429 CVE-2023-1786 CVE-2019-0816 Upstream summary: cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:2503-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-2976 CVE-2020-8908 Upstream summary: Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix […]
🟠 High ⏱ 15–60 min Last verified: 8 June 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-0670 Related CVEs: CVE-2024-21626 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
