🟠 High ⏱ 15–60 min Last verified: 1 February 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-4100 Related CVEs: CVE-2023-2828 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.3-r1 📖 ~4 min read • Source: Alpine secdb entry — re2c 1.3-r1 Related CVEs: CVE-2020-11958 Upstream summary: Alpine main repository for vv3.18 ships re2c 1.3-r1 which addresses CVE-2020-11958. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 1 February 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-6848 Related CVEs: CVE-2024-45769 CVE-2024-45770 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.10.22-r0 📖 ~4 min read • Source: Alpine secdb entry — geth 1.10.22-r0 Related CVEs: CVE-2022-37450 Upstream summary: Alpine community repository for vv3.18 ships geth 1.10.22-r0 which addresses CVE-2022-37450. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:2562-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25657 Upstream summary: A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA […]
🟢 Low ⏱ 5–15 min Last verified: 31 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-37598 Upstream summary: Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the name variable in ast.js. NOTE: the vendor considers this an invalid […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.9.23.1-r0 📖 ~4 min read • Source: Alpine secdb entry — xrdp 0.9.23.1-r0 Related CVEs: CVE-2023-42822 CVE-2023-40184 CVE-2022-23468 CVE-2022-23477 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 +12 more Upstream summary: Alpine community repository for vedge ships xrdp 0.9.23.1-r0 which […]
PgBouncer is a lightweight PostgreSQL connection pooler that solves one of PostgreSQL’s most common scalability problems: the high cost of creating new database connections. Unlike MySQL, PostgreSQL spawns a new OS process for each client connection, which consumes approximately 5–10 MB of memory and requires significant CPU time to establish. Web applications that open hundreds […]
🟢 Low ⏱ 5–15 min Last verified: 31 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-43618 Upstream summary: GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-1914 Related CVEs: CVE-2022-41853 CVE-2023-1183 Upstream summary: Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By […]
