🟢 Low ⏱ 5–15 min Last verified: 15 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-1522 CVE-2015-5723 Upstream summary: Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote attackers to execute arbitrary SQL […]
🟡 Medium ⏱ 10–30 min Last verified: 15 December 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8077-1 Related CVEs: CVE-2020-6816 CVE-2021-23980 CVE-2018-7753 CVE-2020-6802 CVE-2020-6817 Upstream summary: It was discovered that Bleach did not properly sanitize URI attributes containing character entities. An attacker could possibly use this […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALEA-2022:2014 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟠 High ⏱ 30–90 min Last verified: 15 December 2021 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2009-0370, IBM Support Bulletin CVE: CVE-2009-0370 NVD summary: Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to (1) rmsock and (2) […]
RabbitMQ is a robust open-source message broker that implements the AMQP protocol, enabling asynchronous communication between application components. It is widely used for task queuing, event streaming, and decoupling microservices. On RHEL 8, RabbitMQ requires a compatible version of Erlang that is best installed from the official RabbitMQ Cloudsmith repository rather than the default RHEL […]
Introduction CentOS Stream 9 ships with a stable, security-hardened base that makes deploying contribute to centos stream 9 development both straightforward and auditable. This tutorial covers the complete procedure for how to Contribute to CentOS Stream 9 Development, including dnf module streams where applicable, systemd unit management, and the firewalld rules required for network-facing services. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALEA-2019:3444 Upstream summary: GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the […]
🟡 Medium ⏱ 10–30 min Last verified: 14 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: cgit — directory traversal vulnerability Related CVEs: CVE-2016-1899 CVE-2016-1900 CVE-2016-1901 CVE-2018-14912 Upstream summary: Jann Horn reports: cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not […]
🟡 Medium ⏱ 10–30 min Last verified: 14 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-rails — multiple vulnerabilities Related CVEs: CVE-2015-1840 CVE-2015-3224 CVE-2015-3225 CVE-2015-3226 CVE-2015-3227 Upstream summary: Ruby on Rails blog: Rails 3.2.22, 4.1.11 and 4.2.2 have been released, along with web console and […]
🟢 Low ⏱ 5–15 min Last verified: 14 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gdk-pixbuf — multiple vulnerabilities Related CVEs: CVE-2017-2862 CVE-2017-2870 Upstream summary: TALOS reports: An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality. An exploitable heap-overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment […]
