🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1078-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-2494 CVE-2024-2496 CVE-2023-3750 CVE-2023-2700 CVE-2024-1441 Upstream summary: A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates […]
🟠 High ⏱ 15–60 min Last verified: 11 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6809-1 Related CVEs: CVE-2022-3563 CVE-2023-27349 CVE-2023-45866 https://launchpad.net/bugs/1977968 CVE-2022-0204 CVE-2019-8922 CVE-2021-3658 CVE-2021-41229 +6 more Upstream summary: It was discovered that BlueZ could be made to dereference invalid memory. An attacker could […]
🟢 Low ⏱ 5–15 min Last verified: 11 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6210-1 Related CVEs: CVE-2023-34246 Upstream summary: It was discovered that Doorkeeper incorrectly performed authorization checks for public clients that have been previous approved. An attacker could potentially exploit these in […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2401-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13225 Upstream summary: A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing […]
🟡 Medium ⏱ 10–30 min Last verified: 11 February 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6408-1 Related CVEs: CVE-2023-43786 CVE-2023-43787 CVE-2023-43788 CVE-2023-43789 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 Upstream summary: Yair Mizrahi discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2024:0560-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-37460 Upstream summary: Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` […]
🟠 High ⏱ 15–60 min Last verified: 11 February 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-6947 Related CVEs: CVE-2024-34156 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 2.1.5.1-r3 📖 ~4 min read • Source: Alpine secdb entry — libjpeg-turbo 2.1.5.1-r3 Related CVEs: CVE-2023-2804 CVE-2021-20205 CVE-2020-35538 CVE-2020-13790 CVE-2019-2201 CVE-2018-20330 CVE-2018-19664 CVE-2018-11813 +1 more Upstream summary: Alpine main repository for vv3.18 ships libjpeg-turbo 2.1.5.1-r3 which […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-018 Related CVEs: CVE-2021-3618 Upstream summary: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.5.2-r0 📖 ~4 min read • Source: Alpine secdb entry — gitea 1.5.2-r0 Related CVEs: CVE-2021-45326 CVE-2021-45331 CVE-2021-45329 CVE-2023-48795 CVE-2022-42968 CVE-2022-32149 CVE-2022-30781 CVE-2022-27313 +6 more Upstream summary: Alpine community repository for vedge ships gitea 1.5.2-r0 which […]
