🟢 Low ⏱ 5–15 min Last verified: 15 March 2022 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-29472 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 15 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-2226 CVE-2016-4487 CVE-2016-4488 CVE-2016-4489 CVE-2016-4490 CVE-2016-4491 CVE-2016-4492 CVE-2016-4493 +2 more Upstream summary: Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary […]
Introduction Setting up set up two-factor authentication with google authenticator on centos stream 9 on a CentOS Stream 9 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Set Up Two-Factor Authentication with Google Authenticator on CentOS Stream 9, with all the commands you need, […]
🟢 Low ⏱ 5–15 min Last verified: 15 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000052 Upstream summary: fmtlib version prior to version 4.1.0 (before commit 0555cea5fc0bf890afe0071a558e44625a34ba85) contains a Memory corruption (SIGSEGV), CWE-134 vulnerability in fmt::print() library function that can result in Denial […]
🟡 Medium ⏱ 10–30 min Last verified: 15 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-14779 CVE-2018-14780 CVE-2020-13131 CVE-2020-13132 Upstream summary: A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function […]
🟢 Low ⏱ 5–15 min Last verified: 15 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4326 Upstream summary: RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by […]
🟢 Low ⏱ 5–15 min Last verified: 15 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5249-1 Related CVEs: CVE-2022-23220 Upstream summary: It was discovered that USBView allowed unprivileged users to run usbview as root. A local attacker could use this vulnerability to gain administrative privileges […]
🟠 High ⏱ 15–60 min Last verified: 15 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5711-1 Related CVEs: CVE-2022-40284 CVE-2021-46790 CVE-2022-30783 CVE-2022-30784 CVE-2022-30785 CVE-2022-30786 CVE-2022-30787 CVE-2022-30788 +2 more Upstream summary: Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A local […]
🟠 High ⏱ 15–60 min Last verified: 15 March 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6751-1 Related CVEs: CVE-2022-35229 CVE-2022-35230 CVE-2014-3005 CVE-2016-10134 CVE-2016-10742 CVE-2016-4338 CVE-2017-2824 CVE-2017-2825 +3 more Upstream summary: It was discovered that Zabbix incorrectly handled input data in the discovery and graphs pages. […]
🟡 Medium ⏱ 10–30 min Last verified: 15 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5961-1 Related CVEs: CVE-2018-10753 CVE-2018-10771 CVE-2019-1010069 CVE-2021-32434 CVE-2021-32435 CVE-2021-32436 Upstream summary: It was discovered that abcm2ps incorrectly handled memory when parsing specially crafted ABC files. An attacker could use this […]
