🟡 Medium ⏱ 10–30 min Last verified: 22 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1832 CVE-2018-1313 CVE-2022-46337 Upstream summary: XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, […]
🟠 High ⏱ 15–60 min Last verified: 22 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-6441 CVE-2015-1331 CVE-2015-1334 CVE-2015-1335 CVE-2016-10124 CVE-2016-8649 CVE-2017-18641 CVE-2017-5985 +4 more Upstream summary: The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows […]
Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to configure parallel environment (pe) mpi on IBM AIX 7.3 […]
🟢 Low ⏱ 5–15 min Last verified: 22 December 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5425-1 Related CVEs: CVE-2019-20838 CVE-2020-14155 Upstream summary: Yunho Kim discovered that PCRE incorrectly handled memory when handling certain regular expressions. An attacker could possibly use this issue to cause applications […]
🟡 Medium ⏱ 10–30 min Last verified: 22 December 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5547-1 Related CVEs: CVE-2022-31607 CVE-2022-31608 CVE-2022-31615 Upstream summary: Le Wu discovered that the NVIDIA graphics drivers did not properly perform input validation in some situations. A local user could use […]
🟠 High ⏱ 15–60 min Last verified: 22 December 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9649 Related CVEs: CVE-2022-34169 CVE-2022-21549 CVE-2022-21541 CVE-2022-25647 CVE-2022-21540 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 15–60 min Last verified: 22 December 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-9949 Related CVEs: CVE-2022-21619 CVE-2022-21618 CVE-2022-32212 CVE-2022-21628 CVE-2022-32214 CVE-2022-32215 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 15–45 min Last verified: 21 December 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2004-0243, IBM PSIRT advisory page CVE: CVE-2004-0243 NVD summary: AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote […]
Introduction IBM AIX 7.2 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.2 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to use suma to automate fix downloads on ibm aix […]
🟡 Medium ⏱ 15–45 min Last verified: 21 December 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2008-1594, IBM Support Bulletin CVE: CVE-2008-1594 NVD summary: The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which […]
