🟢 Low ⏱ 5–15 min Last verified: 20 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17511 Upstream summary: KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:0797-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22885 CVE-2021-22904 CVE-2021-22881 CVE-2021-22902 Upstream summary: A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1624 CVE-2019-12761 Upstream summary: Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5148-1 Related CVEs: CVE-2021-3504 Upstream summary: It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive information. Table […]
Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up enable brotli compression on nginx on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each step carefully […]
🟠 High ⏱ 15–60 min Last verified: 20 March 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-3945 Related CVEs: CVE-2021-32627 CVE-2021-32675 CVE-2021-32626 CVE-2021-32628 CVE-2021-32687 CVE-2021-41099 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 30–90 min Last verified: 20 March 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2011-1222, IBM Support Bulletin CVE: CVE-2011-1222 NVD summary: Buffer overflow in the Journal Based Backup (JBB) feature in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x before 5.5.3, […]
🟠 High ⏱ 15–60 min Last verified: 20 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: clamav — multiple vulnerabilities Related CVEs: CVE-2005-0133 CVE-2005-1922 CVE-2005-1923 CVE-2005-2919 CVE-2005-2920 CVE-2006-0162 CVE-2006-1614 CVE-2006-1615 +12 more Upstream summary: ClamAV project reports: ClamAV 0.98.7 is here! This release contains new scanning […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-202107-66 Related CVEs: CVE-2021-2388 CVE-2021-2369 CVE-2021-2341 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 16.0.1.u9-1. Fixed in: 16.0.2.u7-1. Group: AVG-2188. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟠 High ⏱ 15–60 min Last verified: 20 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wireshark — multiple security issues Related CVEs: CVE-2010-3445 CVE-2012-0041 CVE-2012-0066 CVE-2012-0067 CVE-2012-0068 CVE-2012-3548 CVE-2012-4048 CVE-2012-4049 +12 more Upstream summary: wireshark developers reports: wnpa-sec-2018-05. IEEE 802.11 dissector crash. (CVE-2018-7335) wnpa-sec-2018-06. Large […]
