🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-2045 Related CVEs: CVE-2021-33813 Upstream summary: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. (CVE-2021-33813) Table […]
🟡 Medium ⏱ 10–30 min Last verified: 17 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2139 CVE-2012-2140 CVE-2015-9097 Upstream summary: Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-3180 Upstream summary: Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:10144-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-2119 Upstream summary: OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM […]
🟡 Medium ⏱ 10–30 min Last verified: 17 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7323 CVE-2014-1927 CVE-2014-1928 CVE-2014-1929 CVE-2019-6690 Upstream summary: python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 17 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5821-2 Related CVEs: CVE-2022-40898 Upstream summary: USN-5821-1 fixed a vulnerability in wheel. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Sebastian Chnelik discovered that wheel […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202310-17 Related CVEs: CVE-2022-0529 CVE-2022-0530 CVE-2018-1000035 CVE-2019-13232 Upstream summary: Multiple vulnerabilities have been discovered in UnZip. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 17 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7614-1 Related CVEs: CVE-2017-2661 CVE-2022-2735 CVE-2018-1086 CVE-2022-1049 Upstream summary: Cedric Buissart discovered that pcs did not correctly handle certain parameters. An attacker could possibly use this issue to leak sensitive […]
Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up configure a python uwsgi application server on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each step […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-202105-11 Related CVEs: CVE-2021-32921 CVE-2021-32920 CVE-2021-32919 CVE-2021-32918 CVE-2021-32917 CVE-2021-37601 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 1:0.11.8-1. Fixed in: 1:0.11.9-1. Group: AVG-1955. Table of contents Symptom & Impact Environment […]
