🟢 Low ⏱ 5–15 min Last verified: 23 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-2625 Upstream summary: It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-50254 Upstream summary: Deepin Linux's default document reader `deepin-reader` software suffers from a serious vulnerability in versions prior to 6.0.7 due to a design flaw […]
🟡 Medium ⏱ 10–30 min Last verified: 23 April 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7108-1 Related CVEs: CVE-2023-46445 CVE-2023-46446 CVE-2023-48795 Upstream summary: Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that AsyncSSH did not properly handle the extension info message. An attacker able to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 3.00-r0 📖 ~4 min read • Source: Alpine secdb entry — transmission 3.00-r0 Related CVEs: CVE-2018-10756 Upstream summary: Alpine community repository for vv3.19 ships transmission 3.00-r0 which addresses CVE-2018-10756. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.8-r0 📖 ~4 min read • Source: Alpine secdb entry — cabextract 1.8-r0 Related CVEs: CVE-2018-18584 Upstream summary: Alpine community repository for vv3.19 ships cabextract 1.8-r0 which addresses CVE-2018-18584. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 23 April 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7441-1 Related CVEs: CVE-2024-10525 CVE-2024-3935 CVE-2021-34431 CVE-2021-34434 CVE-2021-41039 CVE-2023-0809 CVE-2023-28366 CVE-2023-3592 Upstream summary: It was discovered that Eclipse Mosquitto client incorrectly handled memory when receiving a SUBACK packet. An attacker […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 4.9.3-r1 📖 ~4 min read • Source: Alpine secdb entry — tcpdump 4.9.3-r1 Related CVEs: CVE-2020-8037 CVE-2017-16808 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14466 CVE-2018-14461 CVE-2018-14462 +12 more Upstream summary: Alpine main repository for vv3.19 ships tcpdump 4.9.3-r1 which […]
PostgreSQL does not include built-in primary election or automatic failover — that is where Patroni comes in. Patroni is a Python-based template for HA PostgreSQL using a distributed configuration store (DCS) such as etcd to coordinate which node is the primary at any given time. When the primary fails, Patroni automatically elects a new primary […]
🟠 High ⏱ 15–60 min Last verified: 23 April 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6078-2 Related CVEs: CVE-2023-1999 CVE-2018-25009 CVE-2018-25010 CVE-2018-25011 CVE-2018-25012 CVE-2018-25013 CVE-2018-25014 CVE-2020-36328 +3 more Upstream summary: USN-6078-1 fixed a vulnerability in libwebp. This update provides the corresponding update for Ubuntu 16.04 […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 4.20.0-r0 📖 ~4 min read • Source: Alpine secdb entry — libtasn1 4.20.0-r0 Related CVEs: CVE-2024-12133 CVE-2021-46848 CVE-2018-1000654 CVE-2018-6003 CVE-2017-10790 Upstream summary: Alpine main repository for vv3.19 ships libtasn1 4.20.0-r0 which addresses CVE-2024-12133. Table of contents […]
