🟠 High ⏱ 5–30 min Last verified: 7 February 2020 Affected versions: Debian 9 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟡 Medium ⏱ 5–30 min Last verified: 7 February 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟡 Medium ⏱ 10–30 min Last verified: 7 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: RubyGems — multiple vulnerabilities Related CVEs: CVE-2019-8320 CVE-2019-8321 CVE-2019-8322 CVE-2019-8323 CVE-2019-8324 CVE-2019-8325 Upstream summary: RubyGems Security Advisories: CVE-2019-8320: Delete directory using symlink when decompressing tar CVE-2019-8321: Escape sequence injection vulnerability […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2017:2111-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-7436 CVE-2017-9269 Upstream summary: In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead to […]
🟢 Low ⏱ 5–15 min Last verified: 7 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: qutebrowser — Reloading page with certificate errors shows a green URL Related CVEs: CVE-2018-10895 CVE-2020-11054 Upstream summary: Qutebrowser developers report: After a certificate error was overridden by the user, qutebrowser […]
🟢 Low ⏱ 5–15 min Last verified: 7 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ruby-gems — Algorithmic Complexity Vulnerability Related CVEs: CVE-2013-4287 CVE-2013-4363 Upstream summary: Ruby Gem developers report: The patch for CVE-2013-4363 was insufficiently verified so the combined regular expression for verifying gem […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2006-5969 Upstream summary: CRLF injection vulnerability in the evalFolderLine function in fvwm 2.5.18 and earlier allows local users to execute arbitrary commands via carriage returns […]
🟠 High ⏱ 15–60 min Last verified: 7 February 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3915-1 Related CVEs: CVE-2019-3835 CVE-2019-3838 https://launchpad.net/bugs/1817308 https://launchpad.net/bugs/1815339 CVE-2019-6116 https://launchpad.net/bugs/1806517 CVE-2018-19409 CVE-2018-19475 +12 more Upstream summary: It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated […]
🟠 High ⏱ 15–60 min Last verified: 7 February 2020 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:0801-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-1000231 CVE-2020-19860 CVE-2020-19861 CVE-2017-1000232 Upstream summary: A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 7 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — XSS Related CVEs: CVE-2010-4257 CVE-2013-0235 CVE-2013-0236 CVE-2013-0237 CVE-2013-2199 CVE-2013-2200 CVE-2013-2201 CVE-2013-2202 +12 more Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block […]
