🟠 High ⏱ 15–60 min Last verified: 3 February 2022 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:3814-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-27291 CVE-2021-20270 Upstream summary: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14395-1 Related CVEs: CVE-2022-42003 Upstream summary: In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep […]
🟠 High ⏱ 30–90 min Last verified: 3 February 2022 Affected versions: IBM AIX 7.1 Affected: 7.1, 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2022-34356, IBM Support Bulletin CVE: CVE-2022-34356 NVD summary: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the […]
Introduction CentOS Stream 9 ships with a stable, security-hardened base that makes deploying configure drbd for high availability on centos stream 9 both straightforward and auditable. This tutorial covers the complete procedure for how to Configure DRBD for High Availability on CentOS Stream 9, including dnf module streams where applicable, systemd unit management, and the […]
🟡 Medium ⏱ 15–45 min Last verified: 2 February 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2011-4834, IBM PSIRT advisory page CVE: CVE-2011-4834 NVD summary: The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: iodined — authentication bypass Upstream summary: Erik Ekman of the iodine project reports: The client could bypass the password check by continuing after getting error from the server and guessing […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2022:2065 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 10–30 min Last verified: 2 February 2022 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-1600 Related CVEs: CVE-2020-26572 CVE-2020-26571 CVE-2020-26570 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wzdftpd — remote DoS Upstream summary: wzdftpd contains a potential remote Denial-of-Service. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
🟢 Low ⏱ 5–15 min Last verified: 2 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tnftp — mget does not check for directory escapes Related CVEs: CVE-2004-1294 Upstream summary: When downloading a batch of files from an FTP server the mget command does not check […]
