🟢 Low ⏱ 5–15 min Last verified: 31 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-32076 Upstream summary: in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of […]
🟡 Medium ⏱ 10–30 min Last verified: 31 January 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6842-1 Related CVEs: CVE-2022-4285 CVE-2023-1972 CVE-2023-39128 CVE-2023-39129 CVE-2023-39130 Upstream summary: It was discovered that gdb incorrectly handled certain memory operations when parsing an ELF file. An attacker could possibly use […]
🟢 Low ⏱ 5–15 min Last verified: 31 January 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5821-1 Related CVEs: CVE-2022-40898 Upstream summary: Sebastian Chnelik discovered that wheel incorrectly handled certain file names when validated against a regex expression. An attacker could possibly use this issue to […]
Предыдущая версия данного обучающего руководства была написана Шоном Льюисом. Cron — это хронологический демон-планировщик задач, работающий в операционных системах типа Unix, включая дистрибутивы Linux. Cron запускается в фоновом режиме,…
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5029259 • MSRC update-guide entry Related CVEs: CVE-2023-36910 CVE-2023-36911 CVE-2023-35385 CVE-2023-35359 CVE-2023-36873 CVE-2023-36882 CVE-2023-36889 CVE-2023-36899 +12 more Affected components: Windows Server 2016 Microsoft .NET Framework 4.8 on Windows Server 2016 Table of […]
🟢 Low ⏱ 5–15 min Last verified: 31 January 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5378-4 Related CVEs: CVE-2022-1271 Upstream summary: USN-5378-1 fixed a vulnerability in Gzip. This update provides the corresponding update for Ubuntu 14.04 ESM and 16.04 ESM. Original advisory details: Cleemy Desu […]
🟠 High ⏱ 15–60 min Last verified: 31 January 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:4148-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-44638 Upstream summary: In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow […]
Elasticsearch is a platform for distributed search and analysis of data in real time. Its popularity is due to its ease of use, powerful features, and scalability. Elasticsearch is a free and open source software with a solid company behind it: Elastic. This combination makes it suitable for use in anywhere from personal testing to corporate integration. This article will introduce you to Elasticsearch and show you how to install, configure, secure, and start using it.
What Is PowerShell Desired State Configuration? PowerShell Desired State Configuration (DSC) is a declarative management platform built into Windows PowerShell and PowerShell 7. Instead of writing imperative scripts that execute a sequence of commands, DSC lets you describe the desired end state of a system — which Windows features should be installed, which services should […]
🟡 Medium ⏱ 5–30 min Last verified: 30 January 2023 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
