🟢 Low ⏱ 5–15 min Last verified: 3 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-28170 Upstream summary: In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were […]
🟢 Low ⏱ 5–15 min Last verified: 3 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-27799 Upstream summary: ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes […]
Introduction This guide explains how to Install and Configure Tomcat 9 on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with […]
🟢 Low ⏱ 5–15 min Last verified: 3 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10759 Upstream summary: A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature […]
🟠 High ⏱ 15–60 min Last verified: 3 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2156 CVE-2016-4970 CVE-2019-16869 CVE-2019-20444 CVE-2019-20445 CVE-2020-11612 CVE-2020-7238 CVE-2021-21290 +12 more Upstream summary: Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework […]
🟢 Low ⏱ 5–15 min Last verified: 3 October 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6169-1 Related CVEs: CVE-2022-2469 Upstream summary: It was discovered that GNU SASL's GSSAPI server could make an out-of-bounds reads if given specially crafted GSS-API authentication data. A remote attacker could […]
🟠 High ⏱ 30–90 min Last verified: 3 October 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2020-4668, IBM Support Bulletin CVE: CVE-2020-4668 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site request forgery which could allow an […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202312-01 Related CVEs: CVE-2017-18196 CVE-2018-7186 CVE-2018-7247 CVE-2018-7440 CVE-2018-7441 CVE-2018-7442 CVE-2022-38266 CVE-2020-36277 +4 more Upstream summary: Multiple vulnerabilities have been discovered in Leptonica. Please review the CVE identifiers referenced below for details. Table […]
🟠 High ⏱ 15–60 min Last verified: 3 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-0747 CVE-2006-1861 CVE-2006-2661 CVE-2006-3467 CVE-2007-1351 CVE-2007-2754 CVE-2007-3506 CVE-2008-1806 +12 more Upstream summary: Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) […]
🟢 Low ⏱ 5–15 min Last verified: 2 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: guile2 — multiple vulnerabilities Related CVEs: CVE-2016-8605 CVE-2016-8606 Upstream summary: Ludovic Courtès reports: The REPL server is vulnerable to the HTTP inter-protocol attack The ‘mkdir’ procedure of GNU Guile, an […]
