🟢 Low ⏱ 5–15 min Last verified: 1 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isolate — local root exploit Upstream summary: Isolate currently suffers from some bad security bugs! These are local root privilege escalation bugs. Thanks to the helpful person who reported them […]
Introduction Deploying build docker images with multi-stage builds on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within […]
🟢 Low ⏱ 5–15 min Last verified: 1 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-mbstring — php mbstring buffer overflow vulnerability Related CVEs: CVE-2008-5557 Upstream summary: SecurityFocus reports: PHP is prone to a buffer-overflow vulnerability because it fails to perform boundary checks before copying […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2021:4060 Related CVEs: CVE-2021-33928 CVE-2021-33929 CVE-2021-33930 CVE-2021-33938 CVE-2021-3200 Upstream summary: The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): * libsolv: heap-based buffer overflow in […]
🟢 Low ⏱ 5–15 min Last verified: 1 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-Scrapy — DoS vulnerability Related CVEs: CVE-2017-14158 CVE-2022-0577 Upstream summary: kmike and nramirezuy report: Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files […]
🟡 Medium ⏱ 10–30 min Last verified: 1 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcp — Multiple vulnerabilities Related CVEs: CVE-2015-8605 CVE-2018-5732 CVE-2018-5733 Upstream summary: ISC reports: Failure to properly bounds check a buffer used for processing DHCP options allows a malicious server (or […]
🟡 Medium ⏱ 10–30 min Last verified: 1 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15690 CVE-2020-15692 CVE-2020-15693 CVE-2020-15694 CVE-2021-21372 CVE-2021-21373 CVE-2021-21374 CVE-2021-29495 +1 more Upstream summary: In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains […]
🟢 Low ⏱ 5–15 min Last verified: 1 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-20795 Upstream summary: iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a […]
Introduction This guide explains how to Set Up IPv6 on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the standard […]
🟡 Medium ⏱ 10–30 min Last verified: 1 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-45907 CVE-2021-45908 CVE-2021-45909 CVE-2021-45910 CVE-2021-45911 Upstream summary: An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has little […]
