🟢 Low ⏱ 5–15 min Last verified: 12 May 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6232-1 Related CVEs: CVE-2020-21365 Upstream summary: It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or automated system using […]
Introduction Setting up configure ssl/tls with openssl on oracle linux 8 on a Oracle Linux 8 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Configure SSL/TLS with OpenSSL on Oracle Linux 8, with all the commands you need, the SELinux and firewalld considerations to […]
🟢 Low ⏱ 5–15 min Last verified: 12 May 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7160-1 Related CVEs: CVE-2021-29063 Upstream summary: It was discovered Mpmath incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause Mpmath to consume resources, leading to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2018-5773 CVE-2021-26813 Upstream summary: An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode feature, which is supposed to sanitize user input against XSS, is flawed and […]
🟡 Medium ⏱ 10–30 min Last verified: 12 May 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5036-1 Related CVEs: CVE-2019-8955 CVE-2021-28089 CVE-2021-28090 CVE-2021-34548 CVE-2021-34549 CVE-2021-34550 CVE-2021-38385 Upstream summary: It was discovered that Tor incorrectly handled certain memory operations. A remote attacker could use this issue to […]
🟠 High ⏱ 15–60 min Last verified: 12 May 2021 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3320-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3618 CVE-2015-1419 Upstream summary: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as […]
🟠 High ⏱ 15–60 min Last verified: 12 May 2021 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2021:494-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-3702 CVE-2021-3752 CVE-2021-3744 CVE-2021-3764 CVE-2021-40490 CVE-2021-3669 Upstream summary: u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper […]
🔴 Critical ⏱ 15–90 min Last verified: 12 May 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2020-2031 Related CVEs: CVE-2020-12387 CVE-2020-12395 CVE-2020-6831 CVE-2020-12392 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-201703-16 Related CVEs: CVE-2017-2784 CVE-2020-16150 CVE-2019-18222 CVE-2018-0488 CVE-2018-0487 CVE-2021-24119 CVE-2020-10932 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 2.4.0-1. Fixed in: 2.4.2-1. Group: AVG-198. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 12 May 2021 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14818 CVE-2020-10722 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]
