🟡 Medium ⏱ 15–45 min Last verified: 24 January 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2020-4832, IBM Support Bulletin CVE: CVE-2020-4832 NVD summary: IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. IBM X-Force ID: 189969. […]
🟢 Low ⏱ 5–15 min Last verified: 24 January 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5983-1 Related CVEs: CVE-2020-15227 Upstream summary: Cyku Hong discovered that Nette was not properly handling and validating data used for code generation. A remote attacker could possibly use this issue […]
🟠 High ⏱ 15–60 min Last verified: 24 January 2021 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7713-1 Related CVEs: CVE-2021-27212 CVE-2020-36229 CVE-2020-36230 CVE-2020-36226 CVE-2020-36221 CVE-2020-36224 CVE-2020-36228 CVE-2020-36227 +12 more Upstream summary: It was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A remote attacker could possibly […]
🟠 High ⏱ 15–60 min Last verified: 24 January 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8080-1 Related CVEs: CVE-2018-19976 CVE-2017-9304 CVE-2018-19974 CVE-2017-8294 CVE-2018-12034 CVE-2017-8929 CVE-2021-45429 CVE-2017-11328 +9 more Upstream summary: Kamil Frankowicz discovered that a number of YARA's functions generated memory exceptions when processing specially […]
How to Deploy a Flask Application with Gunicorn and Nginx on RHEL 7 Flask is a lightweight Python web framework ideal for building APIs and web applications. While Flask’s built-in development server is useful for testing, it is not suitable for production workloads. The standard production stack on RHEL 7 combines Gunicorn as a WSGI […]
🟠 High ⏱ 15–60 min Last verified: 23 January 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-0830 Related CVEs: CVE-2022-24464 CVE-2022-24512 CVE-2020-8927 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟡 Medium ⏱ 10–30 min Last verified: 23 January 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Pillow — Multiple vulnerabilities Related CVEs: CVE-2019-16865 CVE-2019-19911 CVE-2020-5310 CVE-2020-5311 CVE-2020-5312 CVE-2020-5313 Upstream summary: Pillow developers report: This release addresses several security problems, as well as addressing CVE-2019-19911. CVE-2019-19911 is […]
Introduction IBM AIX 7.1 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.1 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to install nginx via aix toolbox on ibm aix 7.1 […]
🟢 Low ⏱ 5–15 min Last verified: 23 January 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5245-1 Related CVEs: CVE-2021-26291 Upstream summary: It was discovered that Apache Maven followed repositories that are defined in a dependency's Project Object Model (pom) even if the repositories weren't encrypted […]
🟢 Low ⏱ 5–15 min Last verified: 23 January 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5026-1 Related CVEs: CVE-2018-18020 CVE-2021-36978 Upstream summary: It was discovered that QPDF incorrectly handled certain malformed PDF files. A remote attacker could use this issue to cause QPDF to consume […]
