🟡 Medium ⏱ 10–30 min Last verified: 3 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3900 CVE-2012-2132 CVE-2014-3566 Upstream summary: Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to […]
🟠 High ⏱ 15–60 min Last verified: 3 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-5864 CVE-2010-2640 CVE-2010-2641 CVE-2010-2642 CVE-2010-2643 CVE-2011-0433 CVE-2011-5244 CVE-2013-3718 +6 more Upstream summary: Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier […]
🟠 High ⏱ 15–60 min Last verified: 3 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-0014 CVE-2010-2940 CVE-2010-4341 CVE-2012-3462 CVE-2013-0219 CVE-2013-0220 CVE-2014-0249 CVE-2015-5292 +9 more Upstream summary: System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC […]
🟠 High ⏱ 15–60 min Last verified: 3 February 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:3814-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-27291 CVE-2021-20270 Upstream summary: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14395-1 Related CVEs: CVE-2022-42003 Upstream summary: In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep […]
🟠 High ⏱ 30–90 min Last verified: 3 February 2022 Affected versions: IBM AIX 7.1 Affected: 7.1, 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2022-34356, IBM Support Bulletin CVE: CVE-2022-34356 NVD summary: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the […]
Introduction CentOS Stream 9 ships with a stable, security-hardened base that makes deploying configure drbd for high availability on centos stream 9 both straightforward and auditable. This tutorial covers the complete procedure for how to Configure DRBD for High Availability on CentOS Stream 9, including dnf module streams where applicable, systemd unit management, and the […]
🟡 Medium ⏱ 15–45 min Last verified: 2 February 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2011-4834, IBM PSIRT advisory page CVE: CVE-2011-4834 NVD summary: The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: iodined — authentication bypass Upstream summary: Erik Ekman of the iodine project reports: The client could bypass the password check by continuing after getting error from the server and guessing […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2022:2065 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
