Introduction This guide explains how to Install and Configure ufw Firewall on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with […]
🟡 Medium ⏱ 10–30 min Last verified: 5 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0825 CVE-2003-0734 CVE-2005-2069 CVE-2007-5794 Upstream summary: Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly […]
🟡 Medium ⏱ 10–30 min Last verified: 5 June 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-2883 Related CVEs: CVE-2022-3627 CVE-2022-3970 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2022:2200 Related CVEs: CVE-2022-23267 CVE-2022-29117 CVE-2022-29145 CVE-2020-8927 CVE-2022-24464 CVE-2022-24512 CVE-2022-219862 CVE-2021-41355 Upstream summary: .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, […]
🟠 High ⏱ 15–60 min Last verified: 5 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10198 CVE-2016-10199 CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9807 CVE-2016-9808 CVE-2016-9810 +12 more Upstream summary: The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause […]
🟠 High ⏱ 15–60 min Last verified: 5 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-0199 CVE-2019-0221 CVE-2019-10072 CVE-2019-12418 CVE-2019-17563 CVE-2019-17569 CVE-2020-11996 CVE-2020-13934 +12 more Upstream summary: The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with […]
Prometheus generates alerts, but it is Alertmanager that handles routing, deduplication, grouping, and delivery to your notification channels. Without a properly configured Alertmanager, even the most thorough alerting rules in Prometheus are useless — they fire into the void. Integrating Alertmanager with both PagerDuty and Slack gives you a two-tier notification strategy: high-severity incidents page […]
🟡 Medium ⏱ 5–30 min Last verified: 5 June 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-202109-3 Related CVEs: CVE-2021-3781 CVE-2019-14817 CVE-2019-14813 CVE-2019-14812 CVE-2019-14811 CVE-2019-3838 CVE-2019-3835 CVE-2019-6116 +5 more Upstream summary: Type: arbitrary command execution. Status: Fixed. Affected: 9.54.0-2. Fixed in: 9.54.0-3. Group: AVG-2374. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-38711 Upstream summary: In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files. Table of contents Symptom & Impact Environment & Reproduction Root […]
