🟢 Low ⏱ 5–15 min Last verified: 16 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vte — Classic terminal title set+query attack Related CVEs: CVE-2010-2713 Upstream summary: Kees Cook reports: Janne Snabb discovered that applications using VTE, such as gnome-terminal, did not correctly filter window […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.12.0-r0 📖 ~4 min read • Source: Alpine secdb entry — usbredir 0.12.0-r0 Related CVEs: CVE-2021-3700 Upstream summary: Alpine community repository for vedge ships usbredir 0.12.0-r0 which addresses CVE-2021-3700. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 16 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcp — remotely exploitable vulnerability Related CVEs: CVE-2018-5732 CVE-2018-5733 CVE-2021-25217 Upstream summary: Michael McNally reports: Program code used by the ISC DHCP package to read and parse stored leases has […]
Introduction Deploying configure static ip on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will need […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-21269 Upstream summary: checkpath in OpenRC through 0.42.1 might allow local users to take ownership of arbitrary files because a non-terminal path component can be a symlink. Table […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-3100 Upstream summary: kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.2.7-r0 📖 ~4 min read • Source: Alpine secdb entry — keepalived 2.2.7-r0 Related CVEs: CVE-2021-44225 CVE-2018-19044 CVE-2018-19045 CVE-2018-19046 Upstream summary: Alpine community repository for vedge ships keepalived 2.2.7-r0 which addresses CVE-2021-44225. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-7542 Upstream summary: A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates. Table of contents Symptom & Impact Environment & Reproduction […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202007-24 Related CVEs: CVE-2020-10108 CVE-2020-10109 CVE-2022-21712 CVE-2022-21716 CVE-2022-39348 Upstream summary: Multiple vulnerabilities have been discovered in Twisted. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5953-1 Related CVEs: CVE-2015-5607 CVE-2022-21699 Upstream summary: It was discovered that IPython incorrectly processed REST API POST requests. An attacker could possibly use this issue to launch a cross-site request […]
