🟢 Low ⏱ 5–15 min Last verified: 10 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-43806 Upstream summary: Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using `rustix::fs::Dir` using the `linux_raw` backend, it's possible for the iterator to "get […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.41-r0 📖 ~4 min read • Source: Alpine secdb entry — connman 1.41-r0 Related CVEs: CVE-2022-23096 CVE-2022-23097 CVE-2022-23098 CVE-2021-26675 CVE-2021-26676 Upstream summary: Alpine community repository for vv3.19 ships connman 1.41-r0 which addresses CVE-2022-23096. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 10 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6614-1 Related CVEs: CVE-2023-30577 CVE-2022-37703 CVE-2022-37704 CVE-2022-37705 https://launchpad.net/bugs/2012536 Upstream summary: It was discovered that amanda did not properly check certain arguments. A local unprivileged attacker could possibly use this issue […]
🟡 Medium ⏱ 10–30 min Last verified: 10 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6910-1 Related CVEs: CVE-2015-7559 CVE-2018-11775 CVE-2020-13920 CVE-2021-26117 CVE-2022-41678 CVE-2023-46604 Upstream summary: Chess Hazlett discovered that Apache ActiveMQ incorrectly handled certain commands. A remote attacker could possibly use this issue to […]
🟡 Medium ⏱ 10–30 min Last verified: 10 February 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6258-1 Related CVEs: CVE-2023-29932 CVE-2023-29933 CVE-2023-29934 CVE-2023-29939 Upstream summary: It was discovered that LLVM Toolchain did not properly manage memory under certain circumstances. If a user were tricked into opening […]
🟠 High ⏱ 15–60 min Last verified: 10 February 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:1824-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-26768 CVE-2023-26767 CVE-2023-26769 CVE-2022-26981 CVE-2022-31783 CVE-2017-13738 CVE-2017-13739 CVE-2017-13740 +12 more Upstream summary: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-1936 Related CVEs: CVE-2017-12613 CVE-2021-35940 CVE-2022-24963 CVE-2023-49582 Upstream summary: An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for […]
Gitea is a lightweight, self-hosted Git service written in Go that provides GitHub-like functionality (repositories, issues, pull requests, wikis, webhooks, and CI/CD via Gitea Actions) in a single binary consuming under 100 MB of RAM. Compared to GitLab CE (which requires 4–8 GB RAM and a complex Omnibus bundle), Gitea is ideal for small teams, […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:10219 Related CVEs: CVE-2024-45321 Upstream summary: The panminus is a script to get, unpack, build and install modules from CPAN. Security Fix(es): * perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory ESSA-2024:0650 (see also SUSE bugzilla) Related CVEs: CVE-2024-3596 Upstream summary: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, […]
