🟠 High ⏱ 15–60 min Last verified: 16 May 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-5391 Related CVEs: CVE-2024-7519 CVE-2024-7521 CVE-2024-7526 CVE-2024-7527 CVE-2024-7529 CVE-2024-7518 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3090-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-44070 CVE-2024-34088 CVE-2024-31950 CVE-2024-31951 CVE-2024-31948 CVE-2023-47234 CVE-2023-47235 CVE-2023-38802 +11 more Upstream summary: An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c […]
🟠 High ⏱ 15–60 min Last verified: 16 May 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2025-2473 Related CVEs: CVE-2024-53197 CVE-2024-57979 CVE-2024-57807 CVE-2024-50302 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3576-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5261 CVE-2024-3044 CVE-2023-6185 CVE-2023-6186 Upstream summary: Improper Certificate Validation vulnerability in LibreOffice "LibreOfficeKit" mode disables TLS certification verification LibreOfficeKit can be used for accessing […]
🟢 Low ⏱ 5–15 min Last verified: 15 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1239 Upstream summary: duck before 0.10 did not properly handle loading of untrusted code from the current directory. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:3093-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-40030 Upstream summary: Cargo downloads a Rust project's dependencies and compiles the project. Starting in Rust 1.60.0 and prior to 1.72, Cargo did not escape […]
🟡 Medium ⏱ 10–30 min Last verified: 15 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1098 CVE-2011-1154 CVE-2011-1155 CVE-2011-1548 CVE-2022-1348 Upstream summary: Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by […]
🟢 Low ⏱ 5–15 min Last verified: 15 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-41253 Upstream summary: Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions provided in `zycore` in order to append […]
🟢 Low ⏱ 5–15 min Last verified: 15 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0770 Upstream summary: romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of (1) […]
🟡 Medium ⏱ 10–30 min Last verified: 15 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6550 CVE-2013-1808 CVE-2014-1869 Upstream summary: Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via "the clipText returned from […]
