🟢 Low ⏱ 5–15 min Last verified: 30 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mupdf — multiple vulnerabilities Related CVEs: CVE-2016-6265 CVE-2016-6525 Upstream summary: Tobias Kortkamp reports: Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a […]
🟠 High ⏱ 5–30 min Last verified: 30 June 2021 Affected versions: Debian 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 30 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: librsync — collision vulnerability Related CVEs: CVE-2014-8242 Upstream summary: Michael Samuel reports: librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers […]
Introduction This guide explains how to Configure Prometheus AlertManager on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege […]
🟡 Medium ⏱ 10–30 min Last verified: 30 June 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7398-1 Related CVEs: CVE-2021-33643 CVE-2021-33644 CVE-2021-33645 CVE-2021-33646 Upstream summary: It was discovered that libtar may perform out-of-bounds reads when processing specially crafted tar files. An attacker could possibly use this […]
🟡 Medium ⏱ 10–30 min Last verified: 30 June 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4990-1 Related CVEs: CVE-2018-16869 CVE-2021-3580 CVE-2021-20305 Upstream summary: It was discovered that Nettle incorrectly handled RSA decryption. A remote attacker could possibly use this issue to cause Nettle to crash, […]
🟡 Medium ⏱ 10–30 min Last verified: 30 June 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5036-1 Related CVEs: CVE-2019-8955 CVE-2021-28089 CVE-2021-28090 CVE-2021-34548 CVE-2021-34549 CVE-2021-34550 CVE-2021-38385 Upstream summary: It was discovered that Tor incorrectly handled certain memory operations. A remote attacker could use this issue to […]
🟠 High ⏱ 15–60 min Last verified: 30 June 2021 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3198-1 Related CVEs: CVE-2021-32610 Upstream summary: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. Table of contents Symptom & Impact Environment […]
Introduction FreeBSD 13 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up monitor docker with cadvisor on freebsd 13 on FreeBSD 13 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux […]
🟠 High ⏱ 15–60 min Last verified: 30 June 2021 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:1174-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36430 CVE-2020-26682 CVE-2020-24994 CVE-2016-7969 CVE-2016-7970 CVE-2016-7972 Upstream summary: libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because […]
