🟡 Medium ⏱ 10–30 min Last verified: 5 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9390 CVE-2014-9706 CVE-2015-0838 CVE-2017-16228 Upstream summary: Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial […]
🟡 Medium ⏱ 10–30 min Last verified: 5 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0620 CVE-2003-0645 CVE-2006-4250 CVE-2015-1336 Upstream summary: Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via (1) MANDATORY_MANPATH, MANPATH_MAP, and […]
🟢 Low ⏱ 5–15 min Last verified: 5 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4111 Upstream summary: The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with […]
🟡 Medium ⏱ 5–30 min Last verified: 4 April 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 4 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0098 CVE-2003-0099 Upstream summary: Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request […]
🟢 Low ⏱ 5–15 min Last verified: 4 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-3540 Upstream summary: Buffer overflow in petris before 1.0.1 allows remote attackers to execute arbitrary code via unspecified attack vectors. Table of contents Symptom & Impact Environment & […]
🟡 Medium ⏱ 10–30 min Last verified: 4 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2945 CVE-2005-2992 CVE-2015-9275 Upstream summary: arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) […]
🟠 High ⏱ 15–60 min Last verified: 4 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0962 CVE-2004-0426 CVE-2004-0792 CVE-2004-2093 CVE-2006-2083 CVE-2007-4091 CVE-2007-6199 CVE-2007-6200 +12 more Upstream summary: Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to […]
🟠 High ⏱ 5–30 min Last verified: 3 April 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟡 Medium ⏱ 10–30 min Last verified: 3 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-3253 CVE-2016-6814 CVE-2020-17521 Upstream summary: The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of […]
