🟢 Low ⏱ 5–15 min Last verified: 28 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-47155 Upstream summary: The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to […]
🟡 Medium ⏱ 10–30 min Last verified: 28 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-11372 CVE-2019-11373 CVE-2020-15395 CVE-2020-26797 Upstream summary: An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 24.1.4-r0 📖 ~4 min read • Source: Alpine secdb entry — xwayland 24.1.4-r0 Related CVEs: CVE-2024-9632 CVE-2024-31080 CVE-2024-31081 CVE-2024-31083 CVE-2023-6816 CVE-2024-0229 CVE-2024-21885 CVE-2024-21886 +12 more Upstream summary: Alpine community repository for vv3.20 ships xwayland 24.1.4-r0 which […]
🟡 Medium ⏱ 10–30 min Last verified: 28 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7190-1 Related CVEs: CVE-2023-49606 CVE-2022-40468 CVE-2017-11747 Upstream summary: It was discovered that Tinyproxy did not properly manage memory during the parsing of HTTP connection headers. An attacker could use this […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.4.0-r5 📖 ~4 min read • Source: Alpine secdb entry — guix 1.4.0-r5 Related CVEs: CVE-2024-27297 Upstream summary: Alpine community repository for vv3.19 ships guix 1.4.0-r5 which addresses CVE-2024-27297. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 28 May 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4288-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-46136 CVE-2024-49767 Upstream summary: Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 2.7.0-r0 📖 ~4 min read • Source: Alpine secdb entry — mbedtls 2.7.0-r0 Related CVEs: CVE-2018-0488 CVE-2018-0487 CVE-2017-18187 CVE-2017-14032 CVE-2017-2784 CVE-2024-45157 CVE-2024-28960 CVE-2024-23170 +12 more Upstream summary: Alpine main repository for vv3.19 ships mbedtls 2.7.0-r0 which […]
🟡 Medium ⏱ 10–30 min Last verified: 28 May 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-20533 Related CVEs: CVE-2024-5569 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 28 May 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-10592 Related CVEs: CVE-2024-11695 CVE-2024-11692 CVE-2024-11696 CVE-2024-11159 CVE-2024-11694 CVE-2024-11697 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟢 Low ⏱ 5–15 min Last verified: 27 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-28054 Upstream summary: Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) […]
