🟠 High ⏱ 15–60 min Last verified: 17 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpurple/pidgin — multiple vulnerabilities Related CVEs: CVE-2009-1373 CVE-2009-1374 CVE-2009-1375 CVE-2009-1376 CVE-2009-2694 CVE-2010-0277 CVE-2010-0420 CVE-2010-0423 +5 more Upstream summary: The pidgin development team reports: . Table of contents Symptom & Impact […]
Introduction Deploying configure mysql primary-replica replication on freebsd 13 on a FreeBSD 13 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard […]
🟢 Low ⏱ 5–15 min Last verified: 17 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]
🟡 Medium ⏱ 10–30 min Last verified: 17 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-3920 CVE-2008-3969 CVE-2012-1187 CVE-2016-10188 CVE-2016-10189 CVE-2017-5668 Upstream summary: Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and "hijack" existing accounts via unspecified vectors. Table of […]
🟠 High ⏱ 15–60 min Last verified: 17 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8874 CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-5766 CVE-2016-5767 CVE-2016-5768 CVE-2016-5769 +12 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]
🟢 Low ⏱ 5–15 min Last verified: 17 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-2528 Upstream summary: kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a ' (single […]
🟢 Low ⏱ 5–15 min Last verified: 17 August 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4482-1 Related CVEs: CVE-2020-24654 CVE-2020-16116 Upstream summary: Fabian Vogt discovered that Ark incorrectly handled symbolic links in tar archive files. An attacker could use this to construct a malicious tar […]
🟠 High ⏱ 15–60 min Last verified: 17 August 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-4537 Related CVEs: CVE-2021-20325 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 17 August 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-15845 CVE-2020-10663 CVE-2021-28965 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟠 High ⏱ 15–60 min Last verified: 17 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-6321 CVE-2008-5619 CVE-2008-5620 CVE-2009-0413 CVE-2009-4076 CVE-2009-4077 CVE-2010-0464 CVE-2011-1491 +12 more Upstream summary: Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, […]
