Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up install lighttpd on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each step carefully and the resulting […]
🟡 Medium ⏱ 10–30 min Last verified: 30 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: YUI JavaScript library — JavaScript injection exploits in Flash components Related CVEs: CVE-2010-4207 CVE-2010-4208 CVE-2010-4209 CVE-2012-5881 CVE-2012-5882 Upstream summary: The YUI team reports: Vulnerability in YUI 2.4.0 through YUI 2.9.0 […]
🟢 Low ⏱ 5–15 min Last verified: 30 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-rsa — Bleichenbacher'06 signature forgery vulnerability Related CVEs: CVE-2016-1494 Upstream summary: Filippo Valsorda reports: python-rsa is vulnerable to a straightforward variant of the Bleichenbacher'06 attack against RSA signature verification with […]
🟢 Low ⏱ 5–15 min Last verified: 30 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnupg — attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output Related CVEs: CVE-2016-6313 Upstream summary: Werner Koch reports: There was a […]
🟢 Low ⏱ 5–15 min Last verified: 30 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: james — multiple vulnerabilities Related CVEs: CVE-2015-7611 Upstream summary: The Apache James Project reports: This release has many enhancements and bug fixes over the previous release. See the Release Notes […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2021:1881 Related CVEs: CVE-2020-27778 Upstream summary: Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. The evince packages provide a simple multi-page document viewer for Portable […]
🟢 Low ⏱ 5–15 min Last verified: 30 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pango — integer overflow Related CVEs: CVE-2009-1194 Upstream summary: oCERT reports: Pango suffers from a multiplicative integer overflow which may lead to a potentially exploitable, heap overflow depending on the […]
🟢 Low ⏱ 5–15 min Last verified: 30 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Postfix — memory corruption vulnerability Related CVEs: CVE-2011-0411 CVE-2011-1720 Upstream summary: The Postfix SMTP server has a memory corruption error, when the Cyrus SASL library is used with authentication mechanisms […]
🟡 Medium ⏱ 10–30 min Last verified: 30 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: patch — multiple vulnerabilities Related CVEs: CVE-2018-1000156 CVE-2018-6951 CVE-2018-6952 Upstream summary: NVD reports: An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a […]
🟢 Low ⏱ 5–15 min Last verified: 30 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7663 Upstream summary: websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header […]
