🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2022:2078 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
Introduction This guide explains how to Use Capsicum Sandboxing on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202406-05 Related CVEs: CVE-2020-6624 CVE-2020-6625 CVE-2021-34055 CVE-2022-28550 CVE-2022-41751 CVE-2019-1010301 CVE-2019-1010302 CVE-2019-19035 +5 more Upstream summary: Multiple vulnerabilities have been discovered in JHead. Please review the CVE identifiers referenced below for details. Table […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kdelibs — integer overflow in khtml Related CVEs: CVE-2006-4811 Upstream summary: Red Hat reports: An integer overflow flaw was found in the way Qt handled pixmap images. The KDE khtml […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ppxp — local root exploit Related CVEs: CVE-2005-0392 Upstream summary: A Debian Advisory reports: Jens Steube discovered that ppxp, yet another PPP program, does not release root privileges when opening […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:0940-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7747 CVE-2018-17095 CVE-2019-13147 CVE-2022-24599 CVE-2017-6828 CVE-2017-6830 CVE-2017-6832 CVE-2017-6834 +3 more Upstream summary: Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File […]
🟡 Medium ⏱ 10–30 min Last verified: 21 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15256 CVE-2021-23434 CVE-2021-3805 Upstream summary: A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerability is limited to the `includeInheritedProps` mode […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3999 Upstream summary: The Horde_Ldap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7208-1 Related CVEs: CVE-2022-42920 Upstream summary: Felix Wilhelm discovered that Apache Commons BCEL APIs incorrectly handled parameters due to a memory issue. An attacker supplying malicious input could exploit this […]
