🟡 Medium ⏱ 10–30 min Last verified: 21 June 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6629-1 Related CVEs: CVE-2021-45958 CVE-2022-31116 CVE-2022-31117 Upstream summary: It was discovered that UltraJSON incorrectly handled certain input with a large amount of indentation. An attacker could possibly use this issue […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:10017-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-2061 Upstream summary: Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟡 Medium ⏱ 10–30 min Last verified: 21 June 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5067-1 Related CVEs: CVE-2018-10852 CVE-2018-16838 CVE-2019-3811 CVE-2021-3621 Upstream summary: Jakub Hrozek discovered that SSSD incorrectly handled file permissions. A local attacker could possibly use this issue to read the sudo […]
🟠 High ⏱ 15–60 min Last verified: 21 June 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-4135 Related CVEs: CVE-2021-35567 CVE-2021-35603 CVE-2021-35556 CVE-2021-35586 CVE-2021-35578 CVE-2021-35559 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 21 June 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-0842 Related CVEs: CVE-2022-48303 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14858-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24439 Upstream summary: All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible […]
🟠 High ⏱ 30–90 min Last verified: 21 June 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-29736, IBM Support Bulletin CVE: CVE-2021-29736 NVD summary: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote user to gain elevated privileges on the system. IBM X-Force ID: […]
🟠 High ⏱ 30–90 min Last verified: 21 June 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2009-4361, IBM Support Bulletin CVE: CVE-2009-4361 NVD summary: Multiple buffer overflows in qoslist in IBM AIX 6.1 allow local users to cause a denial of service (application crash) or possibly gain privileges […]
🟢 Low ⏱ 5–15 min Last verified: 21 June 2022 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-15892 CVE-2021-36740 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
Introduction Deploying set up open-iscsi on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will need […]
