🟢 Low ⏱ 5–15 min Last verified: 13 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-6519 Upstream summary: Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via […]
🟠 High ⏱ 15–60 min Last verified: 13 July 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2513 CVE-2011-2514 CVE-2011-3377 CVE-2012-3422 CVE-2012-3423 CVE-2012-4540 CVE-2013-1926 CVE-2013-1927 +7 more Upstream summary: The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and […]
🟢 Low ⏱ 5–15 min Last verified: 13 July 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7118-1 Related CVEs: CVE-2023-40889 CVE-2023-40890 Upstream summary: It was discovered that ZBar did not properly handle certain QR codes. If a user or automated system using ZBar were tricked into […]
Introduction How to Set Up LVM Logical Volume Management on Debian 12 is a fundamental operation for any administrator maintaining a Debian 12 Bookworm server. Debian 12 Bookworm ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from […]
🟡 Medium ⏱ 10–30 min Last verified: 13 July 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7966-2 Related CVEs: CVE-2022-29222 CVE-2022-29189 CVE-2022-29190 Upstream summary: USN-7966-1 fixed vulnerabilities in Snowflake. This update provides the corresponding updates for Telegraf. Original advisory details: It was discovered that Pion DTLS, […]
🟡 Medium ⏱ 10–30 min Last verified: 13 July 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6910-1 Related CVEs: CVE-2015-7559 CVE-2018-11775 CVE-2020-13920 CVE-2021-26117 CVE-2022-41678 CVE-2023-46604 Upstream summary: Chess Hazlett discovered that Apache ActiveMQ incorrectly handled certain commands. A remote attacker could possibly use this issue to […]
🟠 High ⏱ 15–60 min Last verified: 13 July 2023 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9773 Related CVEs: CVE-2022-31045 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
Nagios Core is a widely-used open-source infrastructure monitoring system that alerts administrators to host and service failures. On RHEL 9, Nagios Core must be compiled from source since no official RPM package is maintained for the current release. This guide walks you through building Nagios Core 4.x, installing the standard plugins, securing the web interface […]
🟡 Medium ⏱ 10–30 min Last verified: 13 July 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2022-6157 Related CVEs: CVE-2022-32208 CVE-2022-32207 CVE-2022-32206 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟠 High ⏱ 15–60 min Last verified: 13 July 2023 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2023:0005 Related CVEs: CVE-2022-42920 Upstream summary: The Byte Code Engineering Library (Apache Commons BCEL) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files […]
