🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-201804-5 Related CVEs: CVE-2018-1100 CVE-2018-7549 CVE-2018-7548 CVE-2018-13259 CVE-2018-0502 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 5.4.2-2. Fixed in: 5.5-1. Group: AVG-669. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 5–30 min Last verified: 2 November 2019 Affected versions: 16.04 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs […]
🟠 High ⏱ 5–30 min Last verified: 2 November 2019 Affected versions: Ubuntu 18.04 LTS Ubuntu 18.04 Ubuntu 18.04.6 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]
🟢 Low ⏱ 5–15 min Last verified: 2 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Helm — client unpacking chart that contains malicious content Upstream summary: Helm security notice A specially crafted chart may be able to unpack content into locations on the filesystem outside […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2019:1553-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16471 CVE-2019-16782 Upstream summary: There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.33-r0 📖 ~4 min read • Source: Alpine secdb entry — libidn 1.33-r0 Related CVEs: CVE-2015-8948 CVE-2016-6261 CVE-2016-6262 CVE-2016-6263 Upstream summary: Alpine main repository for vedge ships libidn 1.33-r0 which addresses CVE-2015-8948. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 2 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: icu — multiple vulnerabilities Related CVEs: CVE-2017-7867 CVE-2017-7868 Upstream summary: NVD reports: International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer […]
🟡 Medium ⏱ 10–30 min Last verified: 2 November 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8206-1 Related CVEs: CVE-2019-17113 CVE-2018-10017 CVE-2018-11710 Upstream summary: Antonio Morales Maldonado discovered that OpenMPT did not properly limit the length of strings in certain cases, leading to a buffer overflow. […]
🟡 Medium ⏱ 10–30 min Last verified: 2 November 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3353-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-21232 Upstream summary: re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 15–60 min Last verified: 2 November 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:14783-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-25051 Upstream summary: objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_list). Table of contents Symptom & […]
