🟡 Medium ⏱ 10–30 min Last verified: 21 February 2023 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: h2o — HTTP/2 Rapid Reset attack vulnerability Related CVEs: CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 CVE-2021-43848 CVE-2023-30847 CVE-2023-44487 Upstream summary: Kazuo Okuhu reports: H2O is vulnerable to the HTTP/2 Rapid Reset attack. An […]
🟠 High ⏱ 5–30 min Last verified: 21 February 2023 Affected versions: Windows Server 2022 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟡 Medium ⏱ 10–30 min Last verified: 21 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-5026 CVE-2018-19960 CVE-2021-41868 CVE-2022-21689 CVE-2022-21690 CVE-2022-21694 Upstream summary: hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 21 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-42906 Upstream summary: powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary […]
Introduction Setting up set up spinnaker on oracle linux 9 on a Oracle Linux 9 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Set Up Spinnaker on Oracle Linux 9, with all the commands you need, the SELinux and firewalld considerations to keep in […]
🟠 High ⏱ 15–60 min Last verified: 21 February 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6432-1 Related CVEs: CVE-2023-41358 CVE-2023-41360 CVE-2018-5378 CVE-2018-5379 CVE-2018-5380 CVE-2018-5381 CVE-2017-16227 CVE-2017-5495 +3 more Upstream summary: It was discovered that the Quagga BGP daemon did not properly check the attribute length […]
Atualmente, a automação de servidores desempenha um papel fundamental na administração dos sistemas, devido à natureza descartável dos ambientes dos aplicativos modernos. Normalmente, as ferramentas de [gerenciamento de…
🟢 Low ⏱ 5–15 min Last verified: 21 February 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8195-1 Related CVEs: https://launchpad.net/bugs/2149908 Upstream summary: It was discovered that PackageKit incorrectly handled certain transactions. A local attacker could use this issue to install arbitrary packages as root, possibly resulting […]
🟡 Medium ⏱ 10–30 min Last verified: 21 February 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2024:2337 Related CVEs: CVE-2023-49083 Upstream summary: The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers. Security Fix(es): * python-cryptography: NULL-dereference […]
При запуске разнообразных служб и приложений в кластере Kubernetes централизованный комплекс регистрации данных кластерного уровня поможет быстро сортировать и анализировать большие объемы данных журналов подов. В числе популярных централизованных решений регистрации данных нельзя…
