🟢 Low ⏱ 5–15 min Last verified: 17 December 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6598-1 Related CVEs: CVE-2023-48795 Upstream summary: Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk discovered that the SSH protocol was vulnerable to a prefix truncation attack. If a remote attacker was able […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 22.1.0-r0 📖 ~4 min read • Source: Alpine secdb entry — py3-treq 22.1.0-r0 Related CVEs: GHSA-fhpf-pp6p-55qc Upstream summary: Alpine community repository for vv3.19 ships py3-treq 22.1.0-r0 which addresses GHSA-fhpf-pp6p-55qc. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 17 December 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6274-1 Related CVEs: CVE-2023-36661 CVE-2019-9628 Upstream summary: Jurien de Jong discovered that XMLTooling did not properly handle certain KeyInfo element content within an XML signature. An attacker could possibly use […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 20.0.1_p9-r0 📖 ~4 min read • Source: Alpine secdb entry — openjdk20 20.0.1_p9-r0 Related CVEs: CVE-2023-21930 CVE-2023-21967 CVE-2023-21939 CVE-2023-21938 CVE-2023-21968 CVE-2023-21937 Upstream summary: Alpine community repository for vv3.19 ships openjdk20 20.0.1_p9-r0 which addresses CVE-2023-21930. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 17 December 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7038-1 Related CVEs: CVE-2023-49582 CVE-2021-35940 Upstream summary: Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime (APR) library. A local attacker could possibly use this issue to read […]
🟠 High ⏱ 15–60 min Last verified: 17 December 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:0026-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19725 CVE-2023-33204 CVE-2022-39377 CVE-2019-16167 CVE-2018-19416 CVE-2018-19517 Upstream summary: sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c. Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 17 December 2023 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-4468 Related CVEs: CVE-2023-4049 CVE-2023-4056 CVE-2023-4047 CVE-2023-4050 CVE-2023-4046 CVE-2023-4057 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 17 December 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-1134 Related CVEs: CVE-2023-46589 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:2241-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-21971 Upstream summary: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.32 and prior. Difficult […]
🟡 Medium ⏱ 10–30 min Last verified: 17 December 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2022-10007 Related CVEs: CVE-2022-1049 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
