🟢 Low ⏱ 5–15 min Last verified: 3 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-47022 Upstream summary: An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c. Table […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:1161-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24070 CVE-2017-9800 CVE-2019-0203 CVE-2020-17525 CVE-2024-46901 CVE-2021-28544 CVE-2007-2448 CVE-2009-2411 +12 more Upstream summary: Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, […]
🟡 Medium ⏱ 10–30 min Last verified: 3 February 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-2383 CVE-2008-7220 CVE-2024-55581 Upstream summary: The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 3 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-6960 CVE-2017-6961 CVE-2017-6962 Upstream summary: An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the load_apng function […]
🟠 High ⏱ 15–60 min Last verified: 3 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6075-1 Related CVEs: CVE-2023-32205 CVE-2023-32206 CVE-2023-32207 CVE-2023-32211 CVE-2023-32212 CVE-2023-32213 CVE-2023-32215 CVE-2023-0547 +12 more Upstream summary: Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a […]
🟠 High ⏱ 15–60 min Last verified: 3 February 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6079-1 Related CVEs: CVE-2022-27672 CVE-2022-36280 CVE-2022-3707 CVE-2022-4129 CVE-2022-4842 CVE-2022-48423 CVE-2022-48424 CVE-2023-0210 +12 more Upstream summary: It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 3.32.0-r1 📖 ~4 min read • Source: Alpine secdb entry — evince 3.32.0-r1 Related CVEs: CVE-2019-11459 CVE-2017-1000083 Upstream summary: Alpine community repository for vv3.18 ships evince 3.32.0-r1 which addresses CVE-2019-11459. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 3 February 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8290-1 Related CVEs: CVE-2024-45296 Upstream summary: It was discovered that Path-to-Regexp incorrectly handled route patterns containing multiple named parameters separated by non-delimiter characters such as hyphens. An attacker could possibly […]
🟢 Low ⏱ 5–15 min Last verified: 3 February 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-28765 Related CVEs: CVE-2023-4039 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 2 February 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-36113 CVE-2022-36114 CVE-2022-46176 CVE-2023-38497 CVE-2023-40030 Upstream summary: Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in […]
