Introduction This guide explains how to Install Java (OpenJDK 21) on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained […]
🟡 Medium ⏱ 10–30 min Last verified: 7 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xloadimage — buffer overflows in NIFF image title handling Related CVEs: CVE-2001-0775 CVE-2005-0638 CVE-2005-3178 Upstream summary: Ariel Berkman reports: Unlike most of the supported image formats in xloadimage, the NIFF […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-2658 Upstream summary: Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-5725 Upstream summary: Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via […]
🟠 High ⏱ 15–60 min Last verified: 7 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1516 CVE-2016-1517 CVE-2017-1000450 CVE-2017-12597 CVE-2017-12598 CVE-2017-12599 CVE-2017-12600 CVE-2017-12601 +12 more Upstream summary: OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8158-1 Related CVEs: CVE-2021-20179 Upstream summary: Fraser Tweedale and Geetika Kapoor discovered that Dogtag PKI could renew a certificate without proper authentication. An attacker could possibly use this to repeatedly […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4962-1 Related CVEs: CVE-2021-20095 Upstream summary: It was discovered that Babel incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2021 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5148-2 Related CVEs: CVE-2021-3504 Upstream summary: USN-5148-1 fixed a vulnerability in hivex. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It […]
🟡 Medium ⏱ 10–30 min Last verified: 7 October 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6825-1 Related CVEs: CVE-2016-4855 CVE-2016-7405 CVE-2021-3850 Upstream summary: It was discovered that the PDO driver in ADOdb was incorrectly handling string quotes. A remote attacker could possibly use this issue […]
🟢 Low ⏱ 5–15 min Last verified: 6 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-celery — command injection vulnerability Related CVEs: CVE-2021-23727 Upstream summary: Snyk reports: This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends […]
