🟡 Medium ⏱ 10–30 min Last verified: 6 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5944-1 Related CVEs: CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 Upstream summary: It was discovered that SnakeYAML did not limit the maximal nested depth for collections when parsing YAML data. If a user […]
🟡 Medium ⏱ 10–30 min Last verified: 6 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5966-2 Related CVEs: https://launchpad.net/bugs/2012536 CVE-2022-37703 CVE-2022-37704 CVE-2022-37705 Upstream summary: USN-5966-1 fixed vulnerabilities in amanda. Unfortunately it introduced a regression in GNUTAR-based backups. This update reverts all of the changes in […]
🟡 Medium ⏱ 10–30 min Last verified: 6 June 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:15874 Related CVEs: CVE-2023-49083 CVE-2023-23931 Upstream summary: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports […]
🟠 High ⏱ 15–60 min Last verified: 6 June 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2022:8453 Related CVEs: CVE-2022-3787 CVE-2022-41974 CVE-2022-41973 Upstream summary: The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices. Security Fix(es): * device-mapper-multipath: Regression of CVE-2022-41974 […]
🟠 High ⏱ 15–60 min Last verified: 5 June 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2022-5799 Related CVEs: CVE-2022-1962 CVE-2022-28131 CVE-2022-30631 CVE-2022-32148 CVE-2022-1705 CVE-2022-30633 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 5 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6640-1 Related CVEs: CVE-2023-4641 https://launchpad.net/bugs/1998169 CVE-2013-4235 CVE-2017-12424 CVE-2018-7169 https://launchpad.net/bugs/1690820 CVE-2016-6252 CVE-2017-2616 Upstream summary: It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-001 Related CVEs: CVE-2014-3634 CVE-2022-24903 Upstream summary: A flaw was found in the way rsyslog handled invalid log message priority values. In certain configurations, a local attacker, or a remote […]
🟢 Low ⏱ 5–15 min Last verified: 5 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6275-1 Related CVEs: CVE-2023-38497 Upstream summary: Addison Crump discovered that Cargo incorrectly set file permissions on UNIX-like systems when extracting crate archives. If the crate would contain files writable by […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:3211 Related CVEs: CVE-2023-46316 Upstream summary: The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host. Security Fix(es): * traceroute: improper command […]
🟢 Low ⏱ 5–15 min Last verified: 5 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8174-1 Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: It was discovered that XML::Parser incorrectly handled certain multi-byte UTF-8 characters. If a user or automated system were tricked into processing specially crafted […]
