🟠 High ⏱ 15–60 min Last verified: 20 March 2023 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-6252 CVE-2013-4235 CVE-2023-29383 CVE-2017-12424 CVE-2018-7169 CVE-2023-4641 Upstream summary: Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 20 March 2023 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3897-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-3623 CVE-2021-4159 Upstream summary: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function follow_page_pte […]
🟡 Medium ⏱ 10–30 min Last verified: 20 March 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-2193 Related CVEs: CVE-2023-45287 CVE-2023-39326 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 10–30 min Last verified: 20 March 2023 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2024-2353 Related CVEs: CVE-2023-1579 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
How to Install pgAdmin 4 on RHEL 7 pgAdmin 4 is the leading open-source administration and management tool for PostgreSQL databases. It provides a feature-rich web-based interface for browsing database objects, running SQL queries, monitoring server activity, managing roles and tablespaces, and much more. Unlike pgAdmin 3 which was a native desktop application, pgAdmin 4 […]
Let’s Encrypt — это центр сертификации (ЦС), позволяющий легко получать и устанавливать бесплатные сертификаты TLS/SSL, что позволяет использовать на…
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-10751 CVE-2022-0430 CVE-2022-24737 Upstream summary: All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary […]
🟡 Medium ⏱ 5–30 min Last verified: 19 March 2023 Affected versions: Oracle Linux 9 📖 ~3 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟡 Medium ⏱ 10–30 min Last verified: 19 March 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28599 CVE-2020-28600 CVE-2022-0496 CVE-2022-0497 Upstream summary: A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6643-1 Related CVEs: CVE-2023-42282 Upstream summary: Emre Durmaz discovered that NPM IP package incorrectly distinguished between private and public IP addresses. A remote attacker could possibly use this issue to […]
