🟡 Medium ⏱ 10–30 min Last verified: 13 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0246 CVE-2015-3171 CVE-2015-7529 Upstream summary: SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2021:1760 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 13 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-12356 CVE-2020-28086 Upstream summary: An issue was discovered in password-store.sh in pass in Simple Password Store 1.7.x before 1.7.2. The signature verification routine parses the output of GnuPG […]
🟠 High ⏱ 15–60 min Last verified: 13 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-14349 CVE-2018-14350 CVE-2018-14351 CVE-2018-14352 CVE-2018-14353 CVE-2018-14354 CVE-2018-14355 CVE-2018-14356 +12 more Upstream summary: An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO […]
🟡 Medium ⏱ 10–30 min Last verified: 13 April 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-0907 Upstream summary: Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff […]
🟡 Medium ⏱ 10–30 min Last verified: 13 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5956-1 Related CVEs: CVE-2016-10033 CVE-2016-10045 CVE-2017-11503 CVE-2017-5223 CVE-2018-19296 CVE-2020-13625 CVE-2021-3603 Upstream summary: Dawid Golunski discovered that PHPMailer was not properly escaping user input data used as arguments to functions executed […]
🟡 Medium ⏱ 10–30 min Last verified: 13 April 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:3473-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1708 CVE-2021-3602 CVE-2021-20291 CVE-2021-4024 CVE-2020-15157 CVE-2020-14370 CVE-2020-1726 CVE-2021-20199 Upstream summary: A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2021:4280 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 10–30 min Last verified: 13 April 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-6236 Related CVEs: CVE-2022-4285 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 30–90 min Last verified: 13 April 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-29678, IBM Support Bulletin CVE: CVE-2021-29678 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority […]
