🟠 High ⏱ 15–60 min Last verified: 6 May 2023 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-3425 Related CVEs: CVE-2023-24805 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
Tumpukan “LAMP” adalah sekumpulan perangkat lunak sumber terbuka yang biasanya diinstal bersama untuk memungkinkan server menjadi hos dari situs web yang dinamis dan aplikasi web. Istilah ini sebenarnya merupakan singkatan yang mewakili sistem operasi Linux dengan server web Apache. Data situs disimpan di dalam basis data MySQL dan konten dinamis diolah dengan menggunakan PHP. Dalam panduan ini, kita akan menginstal tumpukan LAMP pada server Ubuntu 20.04.
🟠 High ⏱ 15–60 min Last verified: 6 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0974 CVE-2008-5718 CVE-2018-1160 CVE-2021-31439 CVE-2022-0194 CVE-2022-22995 CVE-2022-23121 CVE-2022-23122 +12 more Upstream summary: The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows […]
🟡 Medium ⏱ 10–30 min Last verified: 5 May 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-1576 Related CVEs: CVE-2023-28755 CVE-2023-28756 CVE-2023-36617 CVE-2021-33621 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟡 Medium ⏱ 10–30 min Last verified: 5 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7231 CVE-2019-3866 CVE-2022-0718 Upstream summary: The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask […]
🟠 High ⏱ 15–60 min Last verified: 5 May 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-5389 CVE-2019-10155 CVE-2019-12312 CVE-2020-1763 CVE-2022-23094 CVE-2023-23009 CVE-2023-30570 CVE-2023-38710 +3 more Upstream summary: The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. […]
🟡 Medium ⏱ 10–30 min Last verified: 5 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7146-1 Related CVEs: CVE-2017-7537 CVE-2020-25715 CVE-2022-2414 Upstream summary: Christina Fu discovered that Dogtag PKI accidentally enabled a mock authentication plugin by default. An attacker could potentially use this flaw to […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6226-1 Related CVEs: CVE-2023-25399 CVE-2023-29824 Upstream summary: It was discovered that SciPy did not properly manage memory operations during reference counting. An attacker could possibly use this issue to cause […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5446-2 Related CVEs: CVE-2022-1664 Upstream summary: USN-5446-1 fixed a vulnerability in dpkg. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Max Justicz discovered that dpkg […]
🟢 Low ⏱ 5–15 min Last verified: 5 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6569-1 Related CVEs: CVE-2022-30333 CVE-2023-40477 Upstream summary: it was discovered that libclamunrar incorrectly handled directories when extracting RAR archives. A remote attacker could possibly use this issue to overwrite arbitrary […]
