🟢 Low ⏱ 5–15 min Last verified: 8 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-11020 CVE-2020-15134 Upstream summary: Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1.3 and 1.2.5, has the potential for authentication bypass in the extension system. The […]
How to Set Up a DHCP Server with ISC DHCP on RHEL 7 The ISC DHCP server is the most widely deployed DHCP implementation in enterprise Linux environments. Running your own DHCP server on RHEL 7 gives you full control over IP address assignment, lease times, gateway and DNS options, and fixed-address reservations for servers […]
🟢 Low ⏱ 5–15 min Last verified: 8 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8872 CVE-2016-4804 Upstream summary: The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:2044-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-25647 Upstream summary: The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead […]
🟢 Low ⏱ 5–15 min Last verified: 8 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-0061 Upstream summary: The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 […]
🟠 High ⏱ 15–60 min Last verified: 8 February 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9691 Related CVEs: CVE-2022-2588 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3397-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 CVE-2017-18640 CVE-2022-25857 Upstream summary: Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If […]
Two-factor authentication (2FA) adds a second layer of security to SSH logins by requiring both something you know (a password or private key) and something you have (a time-based one-time password generated by an authenticator app). On RHEL 8, the Google Authenticator PAM module is available through EPEL and integrates with OpenSSH via PAM and […]
Introduction CentOS Stream 9 ships with a stable, security-hardened base that makes deploying configure jaeger distributed tracing on centos stream 9 both straightforward and auditable. This tutorial covers the complete procedure for how to Configure Jaeger Distributed Tracing on CentOS Stream 9, including dnf module streams where applicable, systemd unit management, and the firewalld rules […]
🟡 Medium ⏱ 15–45 min Last verified: 7 February 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2022-34361, IBM Support Bulletin CVE: CVE-2022-34361 NVD summary: IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: […]
