🟢 Low ⏱ 5–15 min Last verified: 7 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-5725 Upstream summary: Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via […]
Flexible and scalable data storage is a baseline requirement for most applications and services being developed today. With today’s complex deployments, containers, and ephemeral infrastructure, the days of simply saving files to disk on a single server are gone. Cloud providers have developed services to fill the storage needs of modern application deployments, and they mostly fit into two categories: object storage, and block storage.
🟠 High ⏱ 15–60 min Last verified: 7 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1516 CVE-2016-1517 CVE-2017-1000450 CVE-2017-12597 CVE-2017-12598 CVE-2017-12599 CVE-2017-12600 CVE-2017-12601 +12 more Upstream summary: OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8158-1 Related CVEs: CVE-2021-20179 Upstream summary: Fraser Tweedale and Geetika Kapoor discovered that Dogtag PKI could renew a certificate without proper authentication. An attacker could possibly use this to repeatedly […]
How to Set Up Windows Server 2016 Dynamic Access Control Dynamic Access Control (DAC) is an advanced authorization framework in Windows Server 2016 that allows administrators to apply access control policies based on user attributes, device attributes, and data classification, rather than relying solely on traditional group membership and share permissions. With DAC, you can […]
Die Autorin wählte den Open Internet/Free Speech Fund, um eine Spende im Rahmen des Programms Write for DOnations zu erhalten. Testen ist ein integraler Bestandteil der…
🟢 Low ⏱ 5–15 min Last verified: 7 October 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4962-1 Related CVEs: CVE-2021-20095 Upstream summary: It was discovered that Babel incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 7 October 2021 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5148-2 Related CVEs: CVE-2021-3504 Upstream summary: USN-5148-1 fixed a vulnerability in hivex. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It […]
L’auteur a choisi le Open Internet/Free Speech Fund pour recevoir un don dans le cadre du programme Write for Donations. En tant qu’administrateur de systèmes, il est préférable de…
🟡 Medium ⏱ 10–30 min Last verified: 7 October 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6825-1 Related CVEs: CVE-2016-4855 CVE-2016-7405 CVE-2021-3850 Upstream summary: It was discovered that the PDO driver in ADOdb was incorrectly handling string quotes. A remote attacker could possibly use this issue […]
