🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.0.1-r0 📖 ~4 min read • Source: Alpine secdb entry — unicorn 2.0.1-r0 Related CVEs: CVE-2022-29693 CVE-2022-29694 CVE-2022-29695 Upstream summary: Alpine community repository for vedge ships unicorn 2.0.1-r0 which addresses CVE-2022-29693. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 4 May 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6753-1 Related CVEs: CVE-2023-46233 Upstream summary: Thomas Neil James Shadwell discovered that CryptoJS was using an insecure cryptographic default configuration. A remote attacker could possibly use this issue to expose […]
🟡 Medium ⏱ 10–30 min Last verified: 4 May 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6571-1 Related CVEs: CVE-2022-26563 CVE-2019-11454 CVE-2019-11455 Upstream summary: Youssef Rebahi-Gilbert discovered that Monit did not properly process credentials for disabled accounts. An attacker could possibly use this issue to login […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:2973 Related CVEs: CVE-2023-43785 CVE-2023-43786 CVE-2023-43787 CVE-2023-3138 CVE-2021-31535 Upstream summary: The libX11 packages contain the core X11 protocol client library. Security Fix(es): * libX11: out-of-bounds memory access in _XkbReadKeySyms() (CVE-2023-43785) * libX11: […]
🟢 Low ⏱ 5–15 min Last verified: 4 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6178-1 Related CVEs: CVE-2019-6246 CVE-2021-44960 Upstream summary: It was discovered that in SVG++ library that the demo application incorrectly managed memory resulting in a memory access violation under certain circumstances. […]
🟡 Medium ⏱ 10–30 min Last verified: 4 May 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:158-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40898 Upstream summary: An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-2142 Related CVEs: CVE-2022-48468 CVE-2022-33070 Upstream summary: protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member. (CVE-2022-48468) Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 4 May 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2021:322-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3121 CVE-2023-2727 CVE-2023-2728 Upstream summary: An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue. […]
🟠 High ⏱ 5–30 min Last verified: 3 May 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: Oracle Bug 34321783 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2023:5994 Related CVEs: CVE-2023-40217 CVE-2023-24329 CVE-2019-7164 CVE-2019-7548 CVE-2019-9636 CVE-2022-40897 CVE-2022-48560 CVE-2022-48565 +12 more Upstream summary: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, […]
