Introduction Deploying install jaeger for distributed tracing on freebsd 13 on a FreeBSD 13 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the […]
🟢 Low ⏱ 5–15 min Last verified: 10 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-sqlalchemy12 — multiple SQL Injection vulnerabilities Related CVEs: CVE-2019-7164 CVE-2019-7548 Upstream summary: 21k reports: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter. nosecurity reports: […]
🟡 Medium ⏱ 10–30 min Last verified: 10 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: qmail — 64 bit integer overflows with possible remote code execution on large SMTP requests Related CVEs: CVE-2005-1513 CVE-2005-1514 CVE-2005-1515 Upstream summary: Georgi Guninski writes: There are several issues with […]
🟡 Medium ⏱ 10–30 min Last verified: 10 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vlc — arbitrary code execution in the RealMedia processor Related CVEs: CVE-2008-5032 CVE-2008-5036 CVE-2008-5276 Upstream summary: Tobias Klein from TrapKit reports: The VLC media player contains an integer overflow vulnerability […]
🟢 Low ⏱ 5–15 min Last verified: 10 October 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-38165 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2020:4451 Related CVEs: CVE-2019-8625 CVE-2019-8710 CVE-2019-8720 CVE-2019-8743 CVE-2019-8764 CVE-2019-8766 CVE-2019-8769 CVE-2019-8771 +12 more Upstream summary: GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later […]
🟡 Medium ⏱ 10–30 min Last verified: 10 October 2021 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:3214-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-40812 CVE-2016-10166 CVE-2016-10168 CVE-2016-5116 CVE-2016-5766 CVE-2016-6128 CVE-2016-6132 CVE-2016-6207 +12 more Upstream summary: The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-31997 CVE-2021-40347 Upstream summary: A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from users […]
🟠 High ⏱ 15–60 min Last verified: 10 October 2021 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:0145-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45417 Upstream summary: AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), […]
🟡 Medium ⏱ 10–30 min Last verified: 9 October 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-1898 Related CVEs: CVE-2022-1117 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
