🟢 Low ⏱ 5–15 min Last verified: 22 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10759 Upstream summary: A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature […]
🟢 Low ⏱ 5–15 min Last verified: 22 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-4022 Upstream summary: A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV (matroska) file format. A specially crafted MKV file can cause arbitrary code […]
🟠 High ⏱ 5–30 min Last verified: 22 June 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 22 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17536 Upstream summary: Phabricator before 2017-11-10 does not block the –config and –debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary code by […]
🟡 Medium ⏱ 10–30 min Last verified: 21 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14604 CVE-2019-11461 CVE-2022-37290 Upstream summary: GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in […]
🟢 Low ⏱ 5–15 min Last verified: 21 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14744 Upstream summary: In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and […]
🟢 Low ⏱ 5–15 min Last verified: 21 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-40299 Upstream summary: In Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by sdb.cc), which allows local users to gain the privileges of other users via […]
🟢 Low ⏱ 5–15 min Last verified: 21 June 2022 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-15892 CVE-2021-36740 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 5–30 min Last verified: 20 June 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟡 Medium ⏱ 10–30 min Last verified: 20 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 CVE-2016-6489 CVE-2018-16869 CVE-2021-20305 CVE-2021-3580 Upstream summary: The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output […]
