🟢 Low ⏱ 5–15 min Last verified: 26 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-6581 Upstream summary: A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, […]
🟢 Low ⏱ 5–15 min Last verified: 26 July 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7040-1 Related CVEs: CVE-2023-26112 Upstream summary: It was discovered that ConfigObj contains regex that is susceptible to catastrophic backtracking. An attacker could possibly use this issue to cause a regular […]
🟠 High ⏱ 15–60 min Last verified: 26 July 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:0275-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-22796 Upstream summary: A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2024:364-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-7207 Upstream summary: Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in […]
🟡 Medium ⏱ 10–30 min Last verified: 26 July 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4496-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-1183 Upstream summary: A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.30-r0 📖 ~4 min read • Source: Alpine secdb entry — faac 1.30-r0 Related CVEs: CVE-2018-19886 Upstream summary: Alpine community repository for vv3.18 ships faac 1.30-r0 which addresses CVE-2018-19886. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 26 July 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-6566 Related CVEs: CVE-2023-27371 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:2337 Related CVEs: CVE-2023-49083 Upstream summary: The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers. Security Fix(es): * python-cryptography: NULL-dereference when […]
🟠 High ⏱ 5–30 min Last verified: 25 July 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: Oracle Bug OLRNT-topic_xk2_xb5_cwb Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-017 Related CVEs: CVE-2021-36084 CVE-2021-36085 CVE-2021-36086 CVE-2021-36087 Upstream summary: The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper). (CVE-2021-36084) The CIL compiler in […]
