🟢 Low ⏱ 5–15 min Last verified: 23 April 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6266-1 Related CVEs: CVE-2023-38633 Upstream summary: Zac Sims discovered that librsvg incorrectly handled decoding URLs. A remote attacker could possibly use this issue to read arbitrary files by using an […]
🟠 High ⏱ 15–60 min Last verified: 23 April 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-4634 Related CVEs: CVE-2023-38497 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.3.1-r1 📖 ~4 min read • Source: Alpine secdb entry — libwebp 1.3.1-r1 Related CVEs: CVE-2023-4863 CVE-2023-1999 Upstream summary: Alpine main repository for vv3.18 ships libwebp 1.3.1-r1 which addresses CVE-2023-4863. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 0.4.15-r9 📖 ~4 min read • Source: Alpine secdb entry — libproxy 0.4.15-r9 Related CVEs: CVE-2020-26154 CVE-2020-25219 Upstream summary: Alpine community repository for vv3.18 ships libproxy 0.4.15-r9 which addresses CVE-2020-26154. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2029-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5206 Upstream summary: A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-047 Related CVEs: CVE-2022-1705 CVE-2022-1962 CVE-2022-1996 CVE-2022-24675 CVE-2022-27191 CVE-2022-28131 CVE-2022-28327 CVE-2022-29526 +7 more Upstream summary: 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed […]
🟢 Low ⏱ 5–15 min Last verified: 22 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-1800 Upstream summary: The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks […]
🟠 High ⏱ 15–60 min Last verified: 22 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011 CVE-2022-2319 CVE-2022-2320 CVE-2022-3550 CVE-2022-3551 +12 more Upstream summary: A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access […]
🟢 Low ⏱ 5–15 min Last verified: 22 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13952 Upstream summary: The set_ipv6() function in zscan_rfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 3.9.1-r0 📖 ~4 min read • Source: Alpine secdb entry — aom 3.9.1-r0 Related CVEs: CVE-2024-5171 CVE-2021-30473 CVE-2021-30474 CVE-2021-30475 Upstream summary: Alpine main repository for vedge ships aom 3.9.1-r0 which addresses CVE-2024-5171. Table of contents Symptom […]
