🟢 Low ⏱ 5–15 min Last verified: 4 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Open DC Hub — remote buffer overflow vulnerability Upstream summary: Donato Ferrante reported an exploitable buffer overflow in this software package. Any user that can login with 'admin' privileges can […]
Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to configure aix as an nis server on IBM AIX […]
🟡 Medium ⏱ 10–30 min Last verified: 4 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php5 — multiple vulnerabilities Related CVEs: CVE-2015-6831 CVE-2015-6832 CVE-2015-6833 Upstream summary: The PHP project reports: Core: Fixed bug #69793 (Remotely triggerable stack exhaustion via recursive method calls). Fixed bug #70121 […]
🟢 Low ⏱ 5–15 min Last verified: 4 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bidwatcher — format string vulnerability Related CVEs: CVE-2005-0158 Upstream summary: A Debian Security Advisory reports: Ulf Härnhammer from the Debian Security Audit Project discovered a format string vulnerability in bidwatcher, […]
🟡 Medium ⏱ 10–30 min Last verified: 4 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-8825 CVE-2020-15953 CVE-2022-4121 Upstream summary: A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. […]
🟡 Medium ⏱ 10–30 min Last verified: 4 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-11922 CVE-2021-24031 CVE-2021-24032 CVE-2022-4899 Upstream summary: A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out […]
🟢 Low ⏱ 5–15 min Last verified: 4 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2142 CVE-2016-5104 Upstream summary: userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) […]
🟡 Medium ⏱ 10–30 min Last verified: 4 July 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4935-1 Related CVEs: CVE-2021-1076 CVE-2021-1077 CVE-2021-1052 CVE-2021-1053 CVE-2021-1056 Upstream summary: It was discovered that the NVIDIA GPU display driver for the Linux kernel incorrectly performed access control. A local attacker […]
Introduction This tutorial covers How to Configure SLES 12 for Container Workloads on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper refresh […]
🟢 Low ⏱ 5–15 min Last verified: 4 July 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5731-1 Related CVEs: CVE-2022-41973 CVE-2022-41974 Upstream summary: It was discovered that multipath-tools incorrectly handled symlinks. A local attacker could possibly use this issue, in combination with other issues, to escalate […]
