🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1534-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-32487 CVE-2022-46663 CVE-2014-9488 Upstream summary: less through 653 allows OS command execution via a newline character in the name of a file, because quoting is […]
🟠 High ⏱ 15–60 min Last verified: 30 May 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6900-1 Related CVEs: CVE-2023-52631 CVE-2023-52637 CVE-2023-52638 CVE-2023-52642 CVE-2023-52643 CVE-2023-52645 CVE-2023-52880 CVE-2023-6270 +12 more Upstream summary: It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained […]
🟡 Medium ⏱ 10–30 min Last verified: 30 May 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6233-1 Related CVEs: CVE-2017-16516 CVE-2022-24795 CVE-2023-33460 Upstream summary: It was discovered that YAJL was not properly performing bounds checks when decoding a string with escape sequences. If a user or […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 2.1.28-r0 📖 ~4 min read • Source: Alpine secdb entry — cyrus-sasl 2.1.28-r0 Related CVEs: CVE-2022-24407 CVE-2019-19906 CVE-2013-4122 CVE-2020-8032 Upstream summary: Alpine main repository for vv3.19 ships cyrus-sasl 2.1.28-r0 which addresses CVE-2022-24407. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 0.5.3.20230718-r0 📖 ~4 min read • Source: Alpine secdb entry — w3m 0.5.3.20230718-r0 Related CVEs: CVE-2023-38252 CVE-2023-38253 CVE-2022-38223 CVE-2018-6196 CVE-2018-6197 CVE-2018-6198 Upstream summary: Alpine community repository for vv3.19 ships w3m 0.5.3.20230718-r0 which addresses CVE-2023-38252. Table of […]
🟠 High ⏱ 15–60 min Last verified: 30 May 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-0791 Related CVEs: CVE-2024-52531 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 30 May 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-0003 Related CVEs: CVE-2023-6857 CVE-2023-6863 CVE-2023-6864 CVE-2023-6860 CVE-2023-50762 CVE-2023-6858 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 29 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2001-1494 CVE-2005-2876 CVE-2006-7108 CVE-2007-5191 CVE-2008-1926 CVE-2011-1675 CVE-2011-1677 CVE-2013-0157 +12 more Upstream summary: script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.14.0-r0 📖 ~4 min read • Source: Alpine secdb entry — rabbitmq-c 0.14.0-r0 Related CVEs: CVE-2023-35789 Upstream summary: Alpine main repository for vedge ships rabbitmq-c 0.14.0-r0 which addresses CVE-2023-35789. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 29 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-4249 Upstream summary: A vulnerability was found in xml-conduit. It has been classified as problematic. Affected is an unknown function of the file xml-conduit/src/Text/XML/Stream/Parse.hs of the component DOCTYPE […]
