🟢 Low ⏱ 5–15 min Last verified: 14 April 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-2519 Related CVEs: CVE-2022-1615 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🔴 Critical ⏱ 5–30 min Last verified: 14 April 2023 Affected versions: Ubuntu 20.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202407-21 Related CVEs: CVE-2022-3554 CVE-2022-3555 CVE-2023-3138 CVE-2023-43785 CVE-2023-43786 CVE-2023-43787 CVE-2020-14344 CVE-2020-14363 +1 more Upstream summary: Multiple vulnerabilities have been discovered in X.Org X11 library. Please review the CVE identifiers referenced below for […]
🟡 Medium ⏱ 10–30 min Last verified: 14 April 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8241-1 Related CVEs: CVE-2022-25236 CVE-2022-25235 CVE-2017-9233 Upstream summary: It was discovered that Expat, vendored in Coin3D incorrectly handled certain files. An attacker could possibly use this issue to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 14 April 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2025:1309 Related CVEs: CVE-2020-11023 Upstream summary: The gcc-toolset-13-gcc13 package contains the GNU Compiler Collection version 13. Security Fix(es): * jquery: Untrusted code execution via <option> tag in HTML passed to DOM […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14371-1 Related CVEs: CVE-2022-45688 Upstream summary: A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data. Table […]
🟠 High ⏱ 15–60 min Last verified: 14 April 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory GHSA-hqxw-f8mx-cpmw (see also SUSE bugzilla) Related CVEs: CVE-2023-2253 CVE-2017-11468 Upstream summary: A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2023 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-12788 Related CVEs: CVE-2023-4039 CVE-2022-40982 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟠 High ⏱ 15–60 min Last verified: 14 April 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-12798 Related CVEs: CVE-2023-22024 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2022:5597 Related CVEs: CVE-2022-24724 CVE-2023-24824 CVE-2020-5238 Upstream summary: Pandoc is a markdown/markup conversion tool. The version of pandoc in AlmaLinux 8 CRB uses cmark-gfm (GitHub's extended version of the C reference implementation […]
