🟠 High ⏱ 15–60 min Last verified: 5 March 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:9555 Related CVEs: CVE-2024-9050 Upstream summary: This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop Security Fix(es): * NetworkManager-libreswan: Local privilege escalation via leftupdown […]
🟠 High ⏱ 15–60 min Last verified: 5 March 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-0025 Related CVEs: CVE-2023-6858 CVE-2023-6859 CVE-2023-6861 CVE-2023-6867 CVE-2023-6865 CVE-2023-6860 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 5 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-0745 CVE-2006-1526 CVE-2006-4447 CVE-2006-6101 CVE-2006-6102 CVE-2006-6103 CVE-2007-1003 CVE-2007-2437 +12 more Upstream summary: X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 13.8-r0 📖 ~4 min read • Source: Alpine secdb entry — postgresql13 13.8-r0 Related CVEs: CVE-2022-2625 CVE-2022-1552 CVE-2021-23214 CVE-2021-23222 CVE-2021-3677 CVE-2021-32027 CVE-2021-32028 CVE-2021-32029 +12 more Upstream summary: Alpine community repository for vv3.18 ships postgresql13 13.8-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-118 Related CVEs: CVE-2022-3560 Upstream summary: A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a […]
🟢 Low ⏱ 5–15 min Last verified: 4 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24720 Upstream summary: image_processing is an image processing wrapper for libvips and ImageMagick/GraphicsMagick. Prior to version 1.12.2, using the `#apply` method from image_processing to apply a series of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2019-1313 Related CVEs: CVE-2016-2191 CVE-2023-43907 Upstream summary: The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) […]
🟢 Low ⏱ 5–15 min Last verified: 4 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-10007 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟢 Low ⏱ 5–15 min Last verified: 4 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-7653 Upstream summary: The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because […]
🟢 Low ⏱ 5–15 min Last verified: 4 March 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0648 Upstream summary: Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code. Table of contents Symptom & Impact Environment & […]
