🟢 Low ⏱ 5–15 min Last verified: 3 May 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7497-1 Related CVEs: CVE-2021-21305 CVE-2023-49090 Upstream summary: Rikita Ishikawa discovered that CarrierWave did not correctly sanitize certain inputs. An attacker could possibly use this issue to execute arbitrary code. This […]
🟠 High ⏱ 15–60 min Last verified: 3 May 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6488-2 Related CVEs: CVE-2023-41913 CVE-2022-40617 CVE-2021-45079 CVE-2021-41990 CVE-2021-41991 CVE-2018-17540 CVE-2018-10811 CVE-2018-16151 +2 more Upstream summary: USN-6488-1 fixed a vulnerability in strongSwan. This update provides the corresponding updates for Ubuntu 16.04 […]
🟡 Medium ⏱ 10–30 min Last verified: 3 May 2024 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2024:9423 (see also SUSE bugzilla) Related CVEs: CVE-2023-29483 Upstream summary: eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-202505-4 Related CVEs: CVE-2023-42970 CVE-2023-42875 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 2.42.0-1. Fixed in: 2.48.2-1. Group: AVG-2868. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 15–60 min Last verified: 3 May 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-0161 Related CVEs: CVE-2024-53580 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 6.0.125-r0 📖 ~4 min read • Source: Alpine secdb entry — dotnet6-build 6.0.125-r0 Related CVEs: CVE-2023-36049 CVE-2023-36558 CVE-2023-36792 CVE-2023-36793 CVE-2023-36794 CVE-2023-36796 CVE-2023-36799 CVE-2023-44487 +12 more Upstream summary: Alpine community repository for vv3.18 ships dotnet6-build 6.0.125-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 3 May 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-7505 Related CVEs: CVE-2024-9402 CVE-2024-9401 CVE-2024-9392 CVE-2024-9393 CVE-2024-9394 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2023:5194 Related CVEs: CVE-2023-38802 CVE-2023-31489 CVE-2023-31490 CVE-2023-41358 CVE-2023-41359 CVE-2023-41360 CVE-2023-41909 CVE-2023-46752 +11 more Upstream summary: FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, […]
🟢 Low ⏱ 5–15 min Last verified: 2 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-21543 Upstream summary: Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to […]
🟡 Medium ⏱ 10–30 min Last verified: 2 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7271 CVE-2014-7272 CVE-2015-0856 CVE-2018-14345 CVE-2020-28049 Upstream summary: Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication. Table of contents […]
