🟢 Low ⏱ 5–15 min Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-3121 Upstream summary: An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-20204 Upstream summary: A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This degrades the confidentiality, integrity […]
Introduction Debian 9 Stretch is built around the ethos of stability and free software. Setting up install and configure fail2ban on debian 9 on Stretch leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Stretch freeze. Follow each step carefully and […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2021:1691 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5076 Upstream summary: htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7774 Upstream summary: The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: picasm — buffer overflow vulnerability Related CVEs: CVE-2005-1679 Upstream summary: Shaun Colley reports: When generating error and warning messages, picasm copies strings into fixed length buffers without bounds checking. If […]
🟠 High ⏱ 15–60 min Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-44492 CVE-2021-44493 CVE-2021-44494 CVE-2021-44495 CVE-2021-44496 CVE-2021-44497 CVE-2021-44498 CVE-2021-44499 +11 more Upstream summary: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using […]
Introduction Deploying configure openscap security compliance on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Before you […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-3433 Upstream summary: The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision […]
