🟡 Medium ⏱ 10–30 min Last verified: 6 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: security/trousers — several vulnerabilities Related CVEs: CVE-2020-24330 CVE-2020-24331 CVE-2020-24332 Upstream summary: the TrouSerS project reports reports: If the tcsd daemon is started with root privileges, it fails to drop the […]
🟢 Low ⏱ 5–15 min Last verified: 6 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5375 Upstream summary: cmus-status-display in cmus 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cmus-status temporary file. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2022:2053 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
Introduction Deploying use podman on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base + […]
🟡 Medium ⏱ 10–30 min Last verified: 6 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-4484 CVE-2020-14382 CVE-2021-4122 Upstream summary: The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in […]
🟡 Medium ⏱ 10–30 min Last verified: 6 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-3601 CVE-2011-3602 CVE-2011-3604 CVE-2011-3605 Upstream summary: Buffer overflow in the process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to execute arbitrary code or […]
🟢 Low ⏱ 5–15 min Last verified: 6 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4760-1 Related CVEs: CVE-2021-24031 CVE-2021-24032 Upstream summary: It was discovered that libzstd incorrectly handled file permissions. A local attacker could possibly use this issue to access certain files, contrary to […]
🟠 High ⏱ 15–60 min Last verified: 6 April 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5483-1 Related CVEs: CVE-2018-12648 CVE-2021-36045 CVE-2021-36046 CVE-2021-36047 CVE-2021-36048 CVE-2021-36050 CVE-2021-36051 CVE-2021-36052 +12 more Upstream summary: It was discovered that Exempi incorrectly handled certain media files. If a user or automated […]
Introduction This guide explains how to Set Up WireGuard VPN on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the […]
🟠 High ⏱ 15–60 min Last verified: 6 April 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3707-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41973 CVE-2022-41974 Upstream summary: multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users […]
