🟡 Medium ⏱ 10–30 min Last verified: 2 June 2022 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:2912-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3639 Upstream summary: A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker […]
🟠 High ⏱ 15–60 min Last verified: 2 June 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9930 Related CVEs: CVE-2022-3028 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
SELinux (Security-Enhanced Linux) is a mandatory access control (MAC) framework built into the Linux kernel, developed by the NSA and now maintained as a core part of RHEL. Unlike traditional discretionary access control (DAC) where file permissions determine access, SELinux enforces policies that confine every process to the minimum resources it legitimately needs — even […]
🟡 Medium ⏱ 5–30 min Last verified: 2 June 2022 Affected versions: Ubuntu 22.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:0500-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-23437 Upstream summary: There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2021:4350 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 10–30 min Last verified: 1 June 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-3590 Related CVEs: CVE-2020-14794 CVE-2020-14800 CVE-2020-14836 CVE-2021-2032 CVE-2021-2055 CVE-2021-2087 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟢 Low ⏱ 5–15 min Last verified: 1 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0256 CVE-2009-3736 Upstream summary: GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 1 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14731 CVE-2017-2816 CVE-2019-9656 Upstream summary: ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a […]
🟢 Low ⏱ 5–15 min Last verified: 1 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-15605 CVE-2020-8287 Upstream summary: HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed Table of contents Symptom & Impact Environment […]
