🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.11.2-r0 📖 ~4 min read • Source: Alpine secdb entry — tinyproxy 1.11.2-r0 Related CVEs: CVE-2023-49606 CVE-2022-40468 Upstream summary: Alpine main repository for vv3.19 ships tinyproxy 1.11.2-r0 which addresses CVE-2023-49606. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 9 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10324 CVE-2016-10325 CVE-2016-10326 CVE-2017-7853 CVE-2022-41550 Upstream summary: In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2150 Upstream summary: xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image. Table […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.2.2-r1 📖 ~4 min read • Source: Alpine secdb entry — libsndfile 1.2.2-r1 Related CVEs: CVE-2024-50612 CVE-2019-3832 CVE-2018-19758 CVE-2017-17456 CVE-2017-17457 CVE-2018-19661 CVE-2018-19662 CVE-2018-13139 +8 more Upstream summary: Alpine main repository for vv3.19 ships libsndfile 1.2.2-r1 which […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 1.2.2-r0 📖 ~4 min read • Source: Alpine secdb entry — irssi 1.2.2-r0 Related CVEs: CVE-2019-15717 CVE-2019-13045 CVE-2019-5882 CVE-2018-7050 CVE-2018-7051 CVE-2018-7052 CVE-2018-7053 CVE-2018-7054 +12 more Upstream summary: Alpine community repository for vv3.19 ships irssi 1.2.2-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-26160 Upstream summary: jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-2658 Upstream summary: Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6358-1 Related CVEs: CVE-2023-31606 Upstream summary: It was discovered that RedCloth incorrectly handled certain inputs during html sanitisation. An attacker could possibly use this issue to cause a denial of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 6.0-r9 📖 ~4 min read • Source: Alpine secdb entry — unzip 6.0-r9 Related CVEs: CVE-2018-18384 CVE-2019-13232 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 CVE-2014-9636 CVE-2014-9913 CVE-2016-9844 +6 more Upstream summary: Alpine main repository for vv3.18 ships unzip 6.0-r9 which […]
🟢 Low ⏱ 5–15 min Last verified: 9 February 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory RHSA-2024:8830 (see also SUSE bugzilla) Related CVEs: CVE-2024-2313 Upstream summary: If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use […]
