🟠 High ⏱ 15–60 min Last verified: 4 June 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-3346 Related CVEs: CVE-2023-45290 CVE-2024-24783 CVE-2023-45289 CVE-2023-45288 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟠 High ⏱ 15–60 min Last verified: 4 June 2024 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:2960-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-1989 CVE-2023-1990 CVE-2023-2162 CVE-2023-1390 CVE-2023-28464 CVE-2023-28772 CVE-2023-1118 CVE-2023-0590 +12 more Upstream summary: A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:2083-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-43798 CVE-2021-43815 Upstream summary: Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 0.8_alpha-r0 📖 ~4 min read • Source: Alpine secdb entry — libmspack 0.8_alpha-r0 Related CVEs: CVE-2018-18584 CVE-2018-18585 CVE-2018-18586 CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682 CVE-2017-6419 +2 more Upstream summary: Alpine community repository for vv3.18 ships libmspack 0.8_alpha-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2023:7187 Related CVEs: CVE-2023-4016 Upstream summary: The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch, […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-0296 CVE-2015-1191 Upstream summary: Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that file's permissions to match those […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:4247 Related CVEs: CVE-2024-24806 CVE-2021-22918 Upstream summary: libuv is a multi-platform support library with a focus on asynchronous I/O. Security Fix(es): * libuv: Improper Domain Lookup that potentially leads to SSRF attacks […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24065 Upstream summary: The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-0720 CVE-2016-0721 CVE-2017-2661 CVE-2018-1079 CVE-2018-1086 CVE-2022-1049 CVE-2022-2735 Upstream summary: Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2022-1772 Related CVEs: CVE-2018-25032 CVE-2023-45853 CVE-2022-37434 Upstream summary: An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating (ex: when compressing) if the input has many […]
