🟠 High ⏱ 15–60 min Last verified: 5 March 2021 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3093-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-21241 CVE-2021-23385 Upstream summary: The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is a independently maintained […]
Introduction IBM AIX 7.2 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.2 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to monitor power system hardware faults on ibm aix 7.2 […]
🟠 High ⏱ 30–90 min Last verified: 5 March 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2020-4135, IBM Support Bulletin CVE: CVE-2020-4135 NVD summary: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated user to send […]
How to Set Up Windows Server 2016 Active Directory Federation Services Active Directory Federation Services (AD FS) is a Microsoft identity solution that provides single sign-on (SSO) and claims-based authentication across organizational boundaries. It enables users to authenticate once with their corporate credentials and access applications hosted in other organizations, cloud services like Microsoft 365, […]
🟡 Medium ⏱ 10–30 min Last verified: 4 March 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2020-1708 Related CVEs: CVE-2018-11685 CVE-2018-11684 CVE-2018-11577 CVE-2018-12085 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟡 Medium ⏱ 5–30 min Last verified: 4 March 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟢 Low ⏱ 5–15 min Last verified: 4 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-yaml — FullLoader (still) exploitable for arbitrary command execution Related CVEs: CVE-2017-18342 CVE-2020-1747 Upstream summary: Riccardo Schirone (https://github.com/ret2libc) reports: In FullLoader python/object/new constructor, implemented by construct_python_object_apply, has support for setting […]
🟡 Medium ⏱ 5–30 min Last verified: 4 March 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
Introduction Setting up set up vlans on oracle linux 8 on a Oracle Linux 8 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Set Up VLANs on Oracle Linux 8, with all the commands you need, the SELinux and firewalld considerations to keep in […]
🟠 High ⏱ 15–60 min Last verified: 4 March 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4713-2 Related CVEs: CVE-2020-28374 CVE-2020-16119 CVE-2020-16120 CVE-2020-14386 CVE-2020-12771 CVE-2019-12380 CVE-2019-16089 CVE-2019-19036 +12 more Upstream summary: It was discovered that the LIO SCSI target implementation in the Linux kernel performed insufficient […]
