🟢 Low ⏱ 5–15 min Last verified: 14 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24803 Upstream summary: Asciidoctor-include-ext is Asciidoctor’s standard include processor reimplemented as an extension. Versions prior to 0.4.0, when used to render user-supplied input in AsciiDoc markup, may allow […]
🟠 High ⏱ 5–30 min Last verified: 14 August 2022 Affected versions: Ubuntu 22.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
🟡 Medium ⏱ 10–30 min Last verified: 14 August 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6851-2 Related CVEs: https://launchpad.net/bugs/2071333 CVE-2022-4968 https://launchpad.net/bugs/2066258 https://launchpad.net/bugs/1987842 https://launchpad.net/bugs/2065738 Upstream summary: USN-6851-1 fixed vulnerabilities in Netplan. The update lead to the discovery of a regression in netplan which caused systemctl enable […]
🟠 High ⏱ 15–60 min Last verified: 14 August 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2022:2741-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-10696 CVE-2022-2990 CVE-2022-27651 Upstream summary: A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a […]
🟠 High ⏱ 15–60 min Last verified: 14 August 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-6775 Related CVEs: CVE-2022-41318 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 14 August 2022 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2023-12679 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]
🟠 High ⏱ 30–90 min Last verified: 13 August 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-1999-1589, IBM PSIRT advisory page CVE: CVE-1999-1589 NVD summary: Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors. References: www.cert.org/advisories/CA-1992-10.html www.securityfocus.com/bid/357 […]
🟡 Medium ⏱ 10–30 min Last verified: 13 August 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-0192 Related CVEs: CVE-2023-21843 CVE-2023-21835 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
🟡 Medium ⏱ 10–30 min Last verified: 13 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2020-10744 CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive […]
🟢 Low ⏱ 5–15 min Last verified: 13 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Wagtail — potential timing attack vulnerability Related CVEs: CVE-2020-11001 CVE-2020-11037 Upstream summary: Wagtail release notes: CVE-2020-11037: Potential timing attack on password-protected private pages This release addresses a potential timing attack […]
