🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2023:3559 Related CVEs: CVE-2023-32067 CVE-2022-4904 CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2024-25629 Upstream summary: The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: 0-byte […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-198 Related CVEs: CVE-2022-4904 CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067 CVE-2024-25629 Upstream summary: A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7208 Upstream summary: GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in a crafted filesystem label. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-27478 Upstream summary: libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previously requested key, if that […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.26.0-r0 📖 ~4 min read • Source: Alpine secdb entry — opensc 0.26.0-r0 Related CVEs: CVE-2024-45615 CVE-2024-45616 CVE-2024-45617 CVE-2024-45618 CVE-2024-45619 CVE-2024-45620 CVE-2024-8443 CVE-2023-5992 +12 more Upstream summary: Alpine community repository for vedge ships opensc 0.26.0-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-4817 CVE-2011-1500 Upstream summary: pithos before 0.3.5 allows overwrite of arbitrary files via symlinks. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟡 Medium ⏱ 10–30 min Last verified: 5 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-3476 CVE-2007-3477 CVE-2007-3996 CVE-2009-3546 CVE-2021-32773 Upstream summary: Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.20.3-r0 📖 ~4 min read • Source: Alpine secdb entry — krb5 1.20.3-r0 Related CVEs: CVE-2024-37370 CVE-2024-37371 CVE-2022-42898 CVE-2021-37750 CVE-2021-36222 CVE-2020-28196 CVE-2018-20217 CVE-2017-15088 +2 more Upstream summary: Alpine main repository for vedge ships krb5 1.20.3-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 5 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8538 CVE-2015-8750 CVE-2016-2050 CVE-2016-2091 CVE-2016-5027 CVE-2016-5028 CVE-2016-5029 CVE-2016-5030 +12 more Upstream summary: dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV). Table of contents Symptom […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-38143 CVE-2022-41639 CVE-2022-41794 CVE-2022-41838 CVE-2022-41988 CVE-2023-22845 CVE-2023-24472 CVE-2022-41684 +12 more Upstream summary: A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE […]
