🟠 High ⏱ 15–60 min Last verified: 9 May 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:4708 Related CVEs: CVE-2023-3899 Upstream summary: The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the AlmaLinux entitlement platform. Security Fix(es): * subscription-manager: […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 4.9.3-r1 📖 ~4 min read • Source: Alpine secdb entry — tcpdump 4.9.3-r1 Related CVEs: CVE-2020-8037 CVE-2017-16808 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14466 CVE-2018-14461 CVE-2018-14462 +12 more Upstream summary: Alpine main repository for vv3.18 ships tcpdump 4.9.3-r1 which […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:6184 Related CVEs: CVE-2024-40897 Upstream summary: Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The "language" is a generic […]
🟠 High ⏱ 15–60 min Last verified: 8 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11554 CVE-2017-11555 CVE-2017-11556 CVE-2017-11608 CVE-2018-11499 CVE-2018-11693 CVE-2018-11694 CVE-2018-11695 +12 more Upstream summary: There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) […]
🟠 High ⏱ 15–60 min Last verified: 8 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3151 CVE-2005-3302 CVE-2005-4470 CVE-2007-1253 CVE-2008-1102 CVE-2008-1103 CVE-2008-4863 CVE-2009-3850 +12 more Upstream summary: Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2024-495 Related CVEs: CVE-2023-51764 Upstream summary: Postfix through 3.8.4 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in recent versions). Remote attackers can […]
🟢 Low ⏱ 5–15 min Last verified: 8 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes. A :utf8 […]
🟡 Medium ⏱ 10–30 min Last verified: 8 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-29189 CVE-2022-29190 CVE-2022-29222 Upstream summary: Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network […]
🟢 Low ⏱ 5–15 min Last verified: 8 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13574 Upstream summary: In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:0037-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-45676 CVE-2023-45677 CVE-2023-45681 Upstream summary: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of […]
