🟢 Low ⏱ 5–15 min Last verified: 11 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lxr — multiple XSS vulnerabilities Related CVEs: CVE-2009-4497 Upstream summary: Dan Rosenberg reports: There are several cross-site scripting vulnerabilities in LXR. These vulnerabilities could allow an attacker to execute scripts […]
Introduction How to Set Up csh and tcsh Aliases on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf […]
🟢 Low ⏱ 5–15 min Last verified: 11 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3386 Upstream summary: usttrace in LTTng Userspace Tracer (aka UST) 0.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a […]
🟠 High ⏱ 15–60 min Last verified: 11 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0107 CVE-2004-0797 CVE-2005-1849 CVE-2005-2096 CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 +5 more Upstream summary: Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2021:4266 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟠 High ⏱ 15–60 min Last verified: 11 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1227 CVE-2005-2977 CVE-2009-0579 CVE-2009-0887 CVE-2009-3232 CVE-2010-3316 CVE-2010-3430 CVE-2010-3431 +12 more Upstream summary: PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows […]
🟢 Low ⏱ 5–15 min Last verified: 11 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-0283 CVE-2021-3480 Upstream summary: The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 11 October 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7969-1 Related CVEs: CVE-2020-11722 Upstream summary: David Mendenhall discovered that Dungeon Crawl Stone Soup was incorrectly handling Lua bytecode embedded in an uploaded .crawlrc file. An attacker could possibly use […]
🟡 Medium ⏱ 10–30 min Last verified: 11 October 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-4649 Related CVEs: CVE-2021-42574 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 11 October 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-16738 CVE-2019-19709 CVE-2020-10960 CVE-2020-15005 CVE-2020-35475 CVE-2021-20270 CVE-2021-35197 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]
