🟢 Low ⏱ 5–15 min Last verified: 18 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13990 Upstream summary: initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description. Table of contents Symptom & Impact Environment & Reproduction […]
🟢 Low ⏱ 5–15 min Last verified: 18 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-25107 Upstream summary: The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, which is not a secure source of random bits. Table […]
🟢 Low ⏱ 5–15 min Last verified: 18 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-18359 Upstream summary: PostGIS 2.x before 2.3.3, as used with PostgreSQL, allows remote attackers to cause a denial of service via crafted ST_AsX3D function input, as demonstrated by […]
🟡 Medium ⏱ 10–30 min Last verified: 18 December 2023 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2024-0135 Related CVEs: CVE-2023-3019 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 18 December 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-7257 Related CVEs: CVE-2023-36558 CVE-2023-36049 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.2.6-r0 📖 ~4 min read • Source: Alpine secdb entry — borgbackup 1.2.6-r0 Related CVEs: CVE-2023-36811 Upstream summary: Alpine community repository for vv3.18 ships borgbackup 1.2.6-r0 which addresses CVE-2023-36811. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-108 Related CVEs: CVE-2023-0179 CVE-2022-3623 CVE-2022-4378 Upstream summary: A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both […]
🟢 Low ⏱ 5–15 min Last verified: 17 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-7220 CVE-2020-27511 Upstream summary: Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 0.6.2-r0 📖 ~4 min read • Source: Alpine secdb entry — seatd 0.6.2-r0 Related CVEs: CVE-2021-41387 Upstream summary: Alpine community repository for vv3.19 ships seatd 0.6.2-r0 which addresses CVE-2021-41387. Table of contents Symptom & Impact Environment […]
PHP-FPM (FastCGI Process Manager) is the recommended way to run PHP behind a web server. Unlike the older Apache mod_php, which embeds a PHP interpreter in each Apache worker process, PHP-FPM runs as a separate service that manages a pool of PHP worker processes. Nginx communicates with PHP-FPM via a Unix socket or TCP socket […]
