🟡 Medium ⏱ 10–30 min Last verified: 22 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5969-1 Related CVEs: CVE-2021-45909 CVE-2021-45910 CVE-2021-45911 Upstream summary: It was discovered that gif2apng contained multiple heap-base overflows. An attacker could potentially exploit this to cause a denial of service (system […]
Securing your Apache web server with a free SSL/TLS certificate from Let’s Encrypt is one of the most important steps you can take to protect your visitors and improve your site’s trustworthiness. Certbot, the official Let’s Encrypt client, automates the entire certificate issuance and renewal process. On RHEL 8, Certbot is available through the EPEL […]
🟠 High ⏱ 15–60 min Last verified: 22 February 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-7500 CVE-2021-3521 CVE-2021-3421 CVE-2021-20266 CVE-2021-20271 Upstream summary: It was found that rpm did not properly handle RPM installations when a destination path was a symbolic […]
🟠 High ⏱ 15–60 min Last verified: 22 February 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-0288 Related CVEs: CVE-2021-23964 CVE-2021-23953 CVE-2021-23954 CVE-2021-23960 CVE-2020-26976 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 30–90 min Last verified: 22 February 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2005-2237, IBM PSIRT advisory page CVE: CVE-2005-2237 NVD summary: Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code […]
🟠 High ⏱ 15–60 min Last verified: 22 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wordpress — multiple issues Related CVEs: CVE-2013-0235 CVE-2013-0236 CVE-2013-0237 CVE-2013-2199 CVE-2013-2200 CVE-2013-2201 CVE-2013-2202 CVE-2013-2203 +12 more Upstream summary: wordpress developers reports: This security and maintenance release features 1 bug fix […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14697-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-23476 Upstream summary: Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the […]
🟡 Medium ⏱ 15–45 min Last verified: 21 February 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-29681, IBM Support Bulletin CVE: CVE-2021-29681 NVD summary: IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters into an HTML query. This information could be […]
🟡 Medium ⏱ 15–45 min Last verified: 21 February 2022 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-38981, IBM Support Bulletin CVE: CVE-2021-38981 NVD summary: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2022:1848 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
