🔴 Critical ⏱ 15–90 min Last verified: 22 April 2022 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:1091-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-11365 CVE-2021-41054 CVE-2019-11366 CVE-2021-46671 Upstream summary: An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a […]
🟠 High ⏱ 15–60 min Last verified: 22 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: FreeBSD — EAP-pwd message reassembly issue with unexpected fragment Related CVEs: CVE-2015-1863 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 CVE-2015-5310 +12 more Upstream summary: Problem Description: EAP-pwd implementation in hostapd (EAP […]
🟢 Low ⏱ 5–15 min Last verified: 21 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]
Introduction This tutorial demonstrates how to Install OpenShift CLI on CentOS Stream 9 on CentOS Stream 9. It is written for administrators who want a repeatable, well-explained walkthrough that goes beyond a bare command list and explains each configuration choice. Every command is tested against a freshly registered CentOS Stream 9 system with the default […]
🟢 Low ⏱ 5–15 min Last verified: 21 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: spamass-milter — remote command execution vulnerability Related CVEs: CVE-2010-1132 Upstream summary: The spamassassin milter plugin contains a vulnerability that can allow remote attackers to execute commands on affected systems. The […]
🟢 Low ⏱ 5–15 min Last verified: 21 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4606 Upstream summary: Artsoft Entertainment Rocks'n'Diamonds (aka rocksndiamonds) 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home directory. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2020:1690 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 21 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: shtool — insecure temporary file creation Upstream summary: A Zataz advisory reports that shtool contains a security flaw which could allow a malicious local user to create or overwrite the […]
🟢 Low ⏱ 5–15 min Last verified: 21 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10870 Upstream summary: Zim through 0.72.1 creates temporary directories with predictable names. A malicious user could predict and create Zim's temporary directories and prevent other users from being […]
🟠 High ⏱ 15–60 min Last verified: 21 April 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-1093 Related CVEs: CVE-2021-26708 CVE-2021-3347 CVE-2021-27365 CVE-2021-27363 CVE-2021-27364 CVE-2020-27152 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
