🟢 Low ⏱ 5–15 min Last verified: 5 April 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4539-1 Related CVEs: CVE-2020-11728 Upstream summary: Andrew Bartlett discovered that DAViCal Andrew's Web Libraries (AWL) did not properly manage session keys. An attacker could possibly use this issue to impersonate […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 4.1.0-r0 📖 ~4 min read • Source: Alpine secdb entry — newlib 4.1.0-r0 Related CVEs: CVE-2021-3420 Upstream summary: Alpine community repository for vedge ships newlib 4.1.0-r0 which addresses CVE-2021-3420. Table of contents Symptom & Impact Environment […]
🟠 High ⏱ 15–60 min Last verified: 5 April 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6948-1 Related CVEs: CVE-2020-16846 CVE-2020-17490 CVE-2020-25592 CVE-2020-28243 CVE-2020-28972 CVE-2020-35662 CVE-2021-25281 CVE-2021-25282 +9 more Upstream summary: It was discovered that Salt incorrectly handled crafted web requests. A remote attacker could possibly […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202012-18 Related CVEs: CVE-2020-17482 Upstream summary: It was discovered that PowerDNS did not properly handle certain unknown records. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟢 Low ⏱ 5–15 min Last verified: 5 April 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5160-1 Related CVEs: CVE-2021-36370 Upstream summary: It was discovered that Midnight Commander would not check server fingerprints when establishing an SFTP connection. If a remote attacker were able to intercept […]
🟠 High ⏱ 15–60 min Last verified: 5 April 2021 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2021:0772-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-20230 CVE-2013-1762 CVE-2011-2940 CVE-2014-0016 CVE-2015-3644 Upstream summary: A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-33388 CVE-2021-33390 CVE-2021-32420 CVE-2021-32421 CVE-2021-32422 Upstream summary: dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 4 April 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-1686 Related CVEs: CVE-2021-0326 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALEA-2020:4742 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
Introduction This tutorial covers How to Automate SLES 12 Deployment with AutoYaST on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Launch YaST yast Step 2 — Use YaST from […]
