🟡 Medium ⏱ 10–30 min Last verified: 15 April 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-7096 Related CVEs: CVE-2023-23931 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 15 April 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2025-20364 Related CVEs: CVE-2024-26130 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.12-r0 📖 ~4 min read • Source: Alpine secdb entry — gzip 1.12-r0 Related CVEs: CVE-2022-1271 Upstream summary: Alpine main repository for vv3.19 ships gzip 1.12-r0 which addresses CVE-2022-1271. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 15 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2000-0992 CVE-2001-1459 CVE-2001-1507 CVE-2002-0639 CVE-2002-0640 CVE-2002-0765 CVE-2003-0190 CVE-2003-0386 +12 more Upstream summary: Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3966-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-22628 Upstream summary: Buffer Overflow vulnerability in LibRaw::stretch() function in librawsrcpostprocessingaspect_ratio.cpp. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 15 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5086 CVE-2009-0036 CVE-2010-2237 CVE-2010-2238 CVE-2010-2239 CVE-2010-2242 CVE-2011-1146 CVE-2011-1486 +12 more Upstream summary: Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-848 Related CVEs: CVE-2024-56732 CVE-2021-45931 CVE-2022-33068 CVE-2023-25193 Upstream summary: HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buffer function. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.14.2-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-asyncssh 2.14.2-r0 Related CVEs: CVE-2023-48795 Upstream summary: Alpine community repository for vedge ships py3-asyncssh 2.14.2-r0 which addresses CVE-2023-48795. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:15116-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22799 Upstream summary: A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2024-1892 Upstream summary: A Regular Expression Denial of Service (ReDoS) vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of […]
