🟢 Low ⏱ 5–15 min Last verified: 14 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-date — Regular Expression Denial of Service Vunlerability of Date Parsing Methods Related CVEs: CVE-2021-41817 Upstream summary: Stanislav Valkanov reports: Date's parsing methods including Date.parse are using Regexps internally, some […]
Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up set up nginx as a reverse proxy on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each […]
🟡 Medium ⏱ 5–30 min Last verified: 14 April 2022 Affected versions: Windows Server 2016 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xlockmore — local exploit Related CVEs: CVE-2012-4524 Upstream summary: Ignatios Souvatzis of NetBSD reports: Due to an error in the dclock screensaver in xlockmore, users who explicitly use this screensaver […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.44.6-r1 📖 ~4 min read • Source: Alpine secdb entry — openrc 0.44.6-r1 Related CVEs: CVE-2021-42341 Upstream summary: Alpine main repository for vedge ships openrc 0.44.6-r1 which addresses CVE-2021-42341. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 14 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Perl — heap buffer overflow when transliterating non-ASCII bytes Related CVEs: CVE-2004-0452 CVE-2005-0155 CVE-2005-0156 CVE-2005-0448 CVE-2005-3912 CVE-2005-3962 CVE-2007-5116 CVE-2013-1667 +11 more Upstream summary: 9b29abf9-4ab0-4765-b253-1875cd9b441e reports: A heap buffer overflow vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 3.0.33-r0 📖 ~4 min read • Source: Alpine secdb entry — privoxy 3.0.33-r0 Related CVEs: CVE-2021-44540 CVE-2021-44541 CVE-2021-44542 CVE-2021-44543 CVE-2021-20272 CVE-2021-20273 CVE-2021-20274 CVE-2021-20275 +9 more Upstream summary: Alpine main repository for vedge ships privoxy 3.0.33-r0 which […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1884 Upstream summary: Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 14 April 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-treq — sensitive information leak vulnerability Related CVEs: CVE-2022-23607 Upstream summary: Treq's request methods (`treq.get`, `treq.post`, `HTTPClient.request`, `HTTPClient.get`, etc.) accept cookies as a dictionary. Such cookies are not bound to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-202107-53 Related CVEs: CVE-2021-2388 CVE-2021-2369 CVE-2021-2341 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 11.0.11.u9-1. Fixed in: 11.0.12.u7-1. Group: AVG-2189. Table of contents Symptom & Impact Environment & Reproduction Root […]
