🟢 Low ⏱ 5–15 min Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-5076 Upstream summary: htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7774 Upstream summary: The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: picasm — buffer overflow vulnerability Related CVEs: CVE-2005-1679 Upstream summary: Shaun Colley reports: When generating error and warning messages, picasm copies strings into fixed length buffers without bounds checking. If […]
🟠 High ⏱ 15–60 min Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-44492 CVE-2021-44493 CVE-2021-44494 CVE-2021-44495 CVE-2021-44496 CVE-2021-44497 CVE-2021-44498 CVE-2021-44499 +11 more Upstream summary: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using […]
Introduction Deploying configure openscap security compliance on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Before you […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-3433 Upstream summary: The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision […]
🟢 Low ⏱ 5–15 min Last verified: 14 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8110-1 Related CVEs: CVE-2021-4456 Upstream summary: Dave Rolsky discovered that Net-CIDR did not properly sanitize IP addresses. An attacker could possibly use this to bypass IP-based restrictions. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 14 March 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-0543 Related CVEs: CVE-2021-32066 CVE-2021-31799 CVE-2021-41817 CVE-2020-36327 CVE-2021-41819 CVE-2021-31810 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 30–90 min Last verified: 14 March 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-29722, IBM Support Bulletin CVE: CVE-2021-29722 NVD summary: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2022:1961 Related CVEs: CVE-2020-35492 Upstream summary: Cairo is a 2D graphics library designed to provide high-quality display and print output. Pixman is a pixel manipulation library for the X Window System and […]
