🟡 Medium ⏱ 10–30 min Last verified: 24 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1006 CVE-2011-1022 CVE-2018-14348 Upstream summary: Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local […]
🟠 High ⏱ 15–60 min Last verified: 24 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-21795 CVE-2024-21812 CVE-2024-22097 CVE-2024-23305 CVE-2024-23310 CVE-2024-23313 CVE-2024-23606 CVE-2024-23809 +12 more Upstream summary: A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig […]
🟠 High ⏱ 15–60 min Last verified: 24 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7258-1 Related CVEs: CVE-2022-24728 CVE-2023-28439 CVE-2024-24815 CVE-2024-24816 CVE-2024-43411 CVE-2018-9861 CVE-2020-9281 CVE-2021-32808 +3 more Upstream summary: Kevin Backhouse discovered that CKEditor did not properly sanitize HTML content. An attacker could possibly […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.2.2-r0 📖 ~4 min read • Source: Alpine secdb entry — flatpak-builder 1.2.2-r0 Related CVEs: CVE-2022-21682 Upstream summary: Alpine community repository for vv3.18 ships flatpak-builder 1.2.2-r0 which addresses CVE-2022-21682. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 24 February 2024 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:0936 Related CVEs: CVE-2024-52533 CVE-2024-34397 CVE-2023-29499 CVE-2023-32611 CVE-2023-32636 CVE-2023-32665 CVE-2021-28153 Upstream summary: GLib provides the core application building blocks for libraries and applications written in C. It provides the core object […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 5.6.2-r0 📖 ~4 min read • Source: Alpine secdb entry — wolfssl 5.6.2-r0 Related CVEs: CVE-2023-3724 CVE-2022-42905 CVE-2022-39173 CVE-2022-38152 CVE-2022-34293 Upstream summary: Alpine community repository for vv3.18 ships wolfssl 5.6.2-r0 which addresses CVE-2023-3724. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 24 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-45888 CVE-2022-49034 CVE-2023-31083 CVE-2023-45896 CVE-2023-52658 CVE-2023-52760 CVE-2023-52812 CVE-2023-52857 +12 more Upstream summary: An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1536 Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes. A […]
🟡 Medium ⏱ 10–30 min Last verified: 23 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-1107 CVE-2012-1108 CVE-2012-1584 CVE-2012-2396 CVE-2017-12678 CVE-2018-11439 CVE-2023-47466 Upstream summary: The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 23 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4398 Upstream summary: Multiple CRLF injection vulnerabilities in the (1) now-playing.rb and (2) xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via […]
