🟠 High ⏱ 15–60 min Last verified: 5 April 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-7410 Related CVEs: CVE-2024-55549 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1135-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-25629 Upstream summary: c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, […]
🟠 High ⏱ 15–60 min Last verified: 5 April 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-6732 Related CVEs: CVE-2023-43115 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2023:774-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-4692 CVE-2023-4693 Upstream summary: An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-1260 Related CVEs: CVE-2024-31573 Upstream summary: XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.4.39-r0 📖 ~4 min read • Source: Alpine secdb entry — orc 0.4.39-r0 Related CVEs: CVE-2024-40897 Upstream summary: Alpine main repository for vedge ships orc 0.4.39-r0 which addresses CVE-2024-40897. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2782 Related CVEs: CVE-2023-45924 Upstream summary: libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disputed because there are no […]
🟢 Low ⏱ 5–15 min Last verified: 4 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-34623 Upstream summary: An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic […]
🟠 High ⏱ 15–60 min Last verified: 4 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4195 CVE-2007-4196 CVE-2007-4197 CVE-2007-4198 CVE-2007-4199 CVE-2007-4200 CVE-2012-5619 CVE-2017-13755 +12 more Upstream summary: Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202408-25 Related CVEs: CVE-2021-43784 CVE-2022-29162 CVE-2023-25809 CVE-2023-27561 CVE-2023-28642 CVE-2024-21626 Upstream summary: Multiple vulnerabilities have been discovered in runc. Please review the CVE identifiers referenced below for details. Table of contents Symptom & […]
