🟢 Low ⏱ 5–15 min Last verified: 27 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1204 Upstream summary: FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service (application crash) by calling Xman with a long -title value, possibly […]
🟢 Low ⏱ 5–15 min Last verified: 27 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1840 Upstream summary: jquery_ujs.js in jquery-rails before 3.1.3 and 4.x before 4.0.4 and rails.js in jquery-ujs before 1.0.4, as used with Ruby on Rails 3.x and 4.x, allow […]
🟢 Low ⏱ 5–15 min Last verified: 27 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-46175 Upstream summary: JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). […]
🟡 Medium ⏱ 5–30 min Last verified: 26 March 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 26 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-36646 Upstream summary: A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::Date_From_Seconds_1970_Local of the file Source/ZenLib/Ztring.cpp. The manipulation […]
🟡 Medium ⏱ 10–30 min Last verified: 26 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6061 CVE-2009-0490 CVE-2009-3560 CVE-2009-3720 CVE-2016-2540 CVE-2016-2541 CVE-2020-11867 Upstream summary: Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which […]
🟠 High ⏱ 15–60 min Last verified: 26 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-12831 CVE-2022-26125 CVE-2022-26126 CVE-2022-26127 CVE-2022-26128 CVE-2022-26129 CVE-2022-36440 CVE-2022-37032 +12 more Upstream summary: An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the […]
🟠 High ⏱ 15–60 min Last verified: 26 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0657 CVE-2005-2496 CVE-2009-0021 CVE-2009-0159 CVE-2009-1252 CVE-2009-3563 CVE-2013-5211 CVE-2014-5209 +12 more Upstream summary: Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the […]
🟢 Low ⏱ 5–15 min Last verified: 25 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-0432 Upstream summary: Multiple SQL injection vulnerabilities in the get_userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow remote attackers to execute arbitrary SQL […]
🟢 Low ⏱ 5–15 min Last verified: 25 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0771 Upstream summary: Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the […]
