🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 0.650-r0 📖 ~4 min read • Source: Alpine secdb entry — lrzip 0.650-r0 Related CVEs: CVE-2022-28044 CVE-2022-26291 CVE-2021-27347 CVE-2021-27345 CVE-2020-25467 Upstream summary: Alpine community repository for vv3.19 ships lrzip 0.650-r0 which addresses CVE-2022-28044. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 7 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-17626 CVE-2019-19450 CVE-2020-28463 CVE-2023-33733 Upstream summary: ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' […]
🟡 Medium ⏱ 10–30 min Last verified: 7 March 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7556-1 Related CVEs: CVE-2024-6484 CVE-2024-6531 CVE-2024-6485 Upstream summary: It was discovered that Bootstrap did not correctly sanitize certain input in the carousel component. An attacker could possibly use this issue […]
🟠 High ⏱ 15–60 min Last verified: 7 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6744-1 Related CVEs: CVE-2024-28219 CVE-2023-44271 CVE-2023-50447 CVE-2022-24303 CVE-2022-45198 CVE-2022-22817 CVE-2021-23437 CVE-2021-34552 +12 more Upstream summary: Hugo van Kemenade discovered that Pillow was not properly performing bounds checks when processing an […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4496-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-1183 Upstream summary: A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT […]
🟠 High ⏱ 15–60 min Last verified: 7 March 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7739-1 Related CVEs: CVE-2021-25215 CVE-2021-25216 CVE-2021-25214 CVE-2023-50387 CVE-2023-50868 CVE-2023-3341 CVE-2023-2828 CVE-2016-2775 +12 more Upstream summary: Greg Kuechle discovered that Bind incorrectly handled certain incremental zone updates. A remote attacker could […]
🟠 High ⏱ 15–60 min Last verified: 7 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:1671 Related CVEs: CVE-2024-11053 CVE-2024-21193 CVE-2024-21194 CVE-2024-21196 CVE-2024-21197 CVE-2024-21198 CVE-2024-21199 CVE-2024-21201 +12 more Upstream summary: MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 4.96.2-r0 📖 ~4 min read • Source: Alpine secdb entry — exim 4.96.2-r0 Related CVEs: CVE-2023-42117 CVE-2023-42119 CVE-2023-42114 CVE-2023-42115 CVE-2023-42116 CVE-2021-27216 CVE-2020-28007 CVE-2020-28008 +12 more Upstream summary: Alpine community repository for vv3.18 ships exim 4.96.2-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 7 March 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-12077 Related CVEs: CVE-2023-21830 CVE-2023-21843 CVE-2022-43548 CVE-2023-21835 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 42.2-r0 📖 ~4 min read • Source: Alpine secdb entry — epiphany 42.2-r0 Related CVEs: CVE-2022-29536 CVE-2021-45085 CVE-2021-45086 CVE-2021-45087 CVE-2021-45088 Upstream summary: Alpine community repository for vv3.18 ships epiphany 42.2-r0 which addresses CVE-2022-29536. Table of contents […]
