🟢 Low ⏱ 5–15 min Last verified: 25 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: qpress — directory traversal Related CVEs: CVE-2022-45866 Upstream summary: [email protected] reports: qpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup and other products, allows directory traversal […]
🟡 Medium ⏱ 10–30 min Last verified: 25 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10773 CVE-2018-10774 CVE-2018-10775 Upstream summary: NULL pointer deference in the addsn function in serialno.c in libbibcore.a in bibutils through 6.2 allows remote attackers to cause a denial of […]
🟢 Low ⏱ 5–15 min Last verified: 25 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-2055 Upstream summary: SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of […]
🟢 Low ⏱ 5–15 min Last verified: 25 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3618 CVE-2017-16844 Upstream summary: Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 25 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2845 CVE-2021-27815 Upstream summary: Integer overflow in the jpeg_data_load_data function in jpeg-data.c in libjpeg in exif 0.6.20 allows remote attackers to cause a denial of service (buffer over-read […]
🟢 Low ⏱ 5–15 min Last verified: 25 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4356 CVE-2021-23727 Upstream summary: Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing […]
Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to set up rsyslog via aix toolbox on IBM AIX […]
🟡 Medium ⏱ 10–30 min Last verified: 25 October 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6117-1 Related CVEs: CVE-2019-17566 CVE-2020-11987 CVE-2022-38398 CVE-2022-38648 CVE-2022-40146 CVE-2022-41704 CVE-2022-42890 Upstream summary: It was discovered that Apache Batik incorrectly handled certain inputs. An attacker could possibly use this to perform […]
🟠 High ⏱ 15–60 min Last verified: 25 October 2022 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3823-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41853 Upstream summary: Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. […]
Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up set up two-factor authentication with google authenticator on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each […]
