🟢 Low ⏱ 5–15 min Last verified: 12 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: oops — format string vulnerability Related CVEs: CVE-2005-1121 Upstream summary: A RST/GHC Advisory reports that there is an format string vulnerability in oops. The vulnerability can be found in the […]
🟡 Medium ⏱ 10–30 min Last verified: 12 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-cgi — HTTP response splitting vulnerability Related CVEs: CVE-2021-33621 CVE-2021-41816 CVE-2021-41819 Upstream summary: Hiroshi Tokumaru reports: If an application that generates HTTP responses using the cgi gem with untrusted user […]
Introduction How to Take ZFS Snapshots on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet filtering, […]
🟢 Low ⏱ 5–15 min Last verified: 12 January 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Bacula-Web — Multiple Vulnerabilities Related CVEs: CVE-2021-26119 CVE-2021-26120 Upstream summary: Bacula-Web reports: Address Smarty CVE Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2018:0473-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-5379 CVE-2021-44038 CVE-2018-5381 CVE-2006-2223 CVE-2007-1995 CVE-2013-2236 CVE-2016-1245 CVE-2016-2342 +11 more Upstream summary: The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when […]
🟡 Medium ⏱ 10–30 min Last verified: 12 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-2093 CVE-2014-2094 CVE-2014-2095 CVE-2014-2096 Upstream summary: Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current […]
🟢 Low ⏱ 5–15 min Last verified: 12 January 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5141-1 Related CVEs: CVE-2021-26910 Upstream summary: Roman Fiedler discovered that a race condition existed in Firejail when using OverlayFS to prevent writes to the underlying file system. A local attacker […]
Introduction CentOS Stream 9 ships with a stable, security-hardened base that makes deploying configure automatic security updates on centos stream 9 both straightforward and auditable. This tutorial covers the complete procedure for how to Configure Automatic Security Updates on CentOS Stream 9, including dnf module streams where applicable, systemd unit management, and the firewalld rules […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2020:4738 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 15–45 min Last verified: 11 January 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2004-2634, IBM Support Bulletin CVE: CVE-2004-2634 NVD summary: The (1) bos.rte.serv_aid or (2) bos.rte.console filesets in IBM AIX 5.1 and 5.2 allow local users to overwrite arbitrary files via a symlink attack […]
