🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 0.9.6-r0 📖 ~4 min read • Source: Alpine secdb entry — libssh 0.9.6-r0 Related CVEs: CVE-2021-3634 CVE-2020-16135 CVE-2020-1730 CVE-2019-14889 CVE-2018-10933 Upstream summary: Alpine community repository for vv3.18 ships libssh 0.9.6-r0 which addresses CVE-2021-3634. Table of contents […]
🟡 Medium ⏱ 10–30 min Last verified: 17 January 2024 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2025-20801 Related CVEs: CVE-2023-52356 CVE-2023-52355 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 10–30 min Last verified: 17 January 2024 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-6989 Related CVEs: CVE-2024-45491 CVE-2024-45490 CVE-2024-45492 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟢 Low ⏱ 5–15 min Last verified: 16 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-46316 Upstream summary: In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines. Table of contents Symptom & Impact Environment & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-062 Related CVEs: CVE-2022-23491 Upstream summary: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2732-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-41810 Upstream summary: Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vulnerability. If application code […]
🟢 Low ⏱ 5–15 min Last verified: 16 January 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-14983 Upstream summary: The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can […]
🟡 Medium ⏱ 10–30 min Last verified: 16 January 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6731-1 Related CVEs: CVE-2017-17042 CVE-2019-1020001 CVE-2024-27285 Upstream summary: It was discovered that YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct […]
🟡 Medium ⏱ 10–30 min Last verified: 16 January 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2969-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-42353 Upstream summary: WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 2.9.6-r0 📖 ~4 min read • Source: Alpine secdb entry — traefik 2.9.6-r0 Related CVEs: CVE-2022-23469 CVE-2022-46153 CVE-2023-29013 CVE-2023-24534 CVE-2020-15129 Upstream summary: Alpine community repository for vv3.19 ships traefik 2.9.6-r0 which addresses CVE-2022-23469. Table of contents […]
