🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.9.4-r0 📖 ~4 min read • Source: Alpine secdb entry — libgcrypt 1.9.4-r0 Related CVEs: CVE-2021-33560 CVE-2019-13627 CVE-2019-12904 CVE-2018-0495 Upstream summary: Alpine main repository for vv3.18 ships libgcrypt 1.9.4-r0 which addresses CVE-2021-33560. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 7 June 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2024:10978 (see also SUSE bugzilla) Related CVEs: CVE-2024-12254 CVE-2024-4030 CVE-2023-6507 Upstream summary: Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer […]
🟠 High ⏱ 15–60 min Last verified: 6 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2012-0876 CVE-2012-1147 CVE-2012-1148 CVE-2012-6702 CVE-2013-0340 CVE-2015-1283 +12 more Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module […]
🟢 Low ⏱ 5–15 min Last verified: 6 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-0806 Upstream summary: wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.[USERID] temporary file. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 6 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3340 Upstream summary: The tuxpaint-import.sh script in Tux Paint (tuxpaint) 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 6 June 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-7101 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 1.912-r0 📖 ~4 min read • Source: Alpine secdb entry — perl-email-address 1.912-r0 Related CVEs: CVE-2018-12558 Upstream summary: Alpine main repository for vv3.20 ships perl-email-address 1.912-r0 which addresses CVE-2018-12558. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 6 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2742 CVE-2012-2743 CVE-2012-3818 Upstream summary: Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:15074-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-3935 CVE-2023-28366 CVE-2023-3592 CVE-2020-13849 CVE-2018-12551 CVE-2023-0809 CVE-2021-34434 CVE-2017-7650 +10 more Upstream summary: In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is […]
🟠 High ⏱ 15–60 min Last verified: 6 June 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8076-1 Related CVEs: CVE-2024-39936 CVE-2023-51714 CVE-2022-25255 CVE-2020-13962 CVE-2020-17507 CVE-2024-25580 CVE-2023-24607 CVE-2023-32762 +2 more Upstream summary: It was discovered that Qt did not correctly handle OpenSSL's error queue. An attacker could […]
