🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2020:2177-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-27818 Upstream summary: A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by […]
🟠 High ⏱ 5–30 min Last verified: 15 February 2021 Affected versions: RHEL 7 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
Introduction Oracle Linux 8 ships with a stable, security-hardened base that makes deploying manage users and groups on oracle linux 8 both straightforward and auditable. This tutorial covers the complete procedure for how to Manage Users and Groups on Oracle Linux 8, including dnf module streams where applicable, systemd unit management, and the firewalld rules […]
🟠 High ⏱ 15–60 min Last verified: 15 February 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: salt — multiple vulnerabilities in salt-master process Related CVEs: CVE-2016-1866 CVE-2016-3176 CVE-2017-12791 CVE-2017-14695 CVE-2017-14696 CVE-2018-15750 CVE-2018-15751 CVE-2019-17361 +2 more Upstream summary: F-Secure reports: CVE-2020-11651 – Authentication bypass vulnerabilities The ClearFuncs […]
Introduction A multi-site Active Directory deployment on Windows Server 2016 maps your physical network topology onto AD Sites and Services, ensuring that domain controllers authenticate users with the nearest DC rather than sending login traffic across slow WAN links. AD Sites control replication traffic, Kerberos referrals, and Group Policy application. This guide covers designing and […]
🟡 Medium ⏱ 10–30 min Last verified: 15 February 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4624-1 Related CVEs: CVE-2020-0452 CVE-2020-0093 CVE-2020-0182 CVE-2020-0198 CVE-2020-13112 CVE-2020-13113 CVE-2020-13114 CVE-2018-20030 +1 more Upstream summary: It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5230-1 Related CVEs: CVE-2020-16154 Upstream summary: It was discovered that App::cpanminus did not properly verify CHECKSUMS files. An attacker could possibly use this issue to bypass signature verification, gaining access […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2020-1442 Related CVEs: CVE-2020-12762 Upstream summary: json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. (CVE-2020-12762) Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 15 February 2021 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-FU-2022:0444-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-13132 CVE-2019-6250 CVE-2020-15166 CVE-2014-7202 CVE-2014-7203 CVE-2014-9721 Upstream summary: In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting […]
🟠 High ⏱ 15–60 min Last verified: 15 February 2021 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:1886-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-43331 CVE-2021-43332 CVE-2021-44227 CVE-2021-42096 CVE-2019-3693 CVE-2020-12108 CVE-2020-12137 CVE-2020-15011 +6 more Upstream summary: In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options […]
