Introduction Setting up set up cockpit web console on oracle linux 8 on a Oracle Linux 8 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Set Up Cockpit Web Console on Oracle Linux 8, with all the commands you need, the SELinux and firewalld […]
🟢 Low ⏱ 5–15 min Last verified: 5 March 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5997-1 Related CVEs: CVE-2020-5208 Upstream summary: It was discovered that IPMItool was not properly checking the data received from a remote LAN party. A remote attacker could possibly use this […]
🟠 High ⏱ 15–60 min Last verified: 5 March 2021 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3259-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14001 Upstream summary: The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such […]
Introduction IBM AIX 7.2 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.2 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to configure ibm powerha systemmirror on ibm aix 7.2 on […]
🟠 High ⏱ 15–60 min Last verified: 5 March 2021 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3093-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-21241 CVE-2021-23385 Upstream summary: The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is a independently maintained […]
Introduction IBM AIX 7.2 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.2 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to monitor power system hardware faults on ibm aix 7.2 […]
🟠 High ⏱ 30–90 min Last verified: 5 March 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2020-4135, IBM Support Bulletin CVE: CVE-2020-4135 NVD summary: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated user to send […]
🟡 Medium ⏱ 10–30 min Last verified: 4 March 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2020-1708 Related CVEs: CVE-2018-11685 CVE-2018-11684 CVE-2018-11577 CVE-2018-12085 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟡 Medium ⏱ 5–30 min Last verified: 4 March 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟢 Low ⏱ 5–15 min Last verified: 4 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-yaml — FullLoader (still) exploitable for arbitrary command execution Related CVEs: CVE-2017-18342 CVE-2020-1747 Upstream summary: Riccardo Schirone (https://github.com/ret2libc) reports: In FullLoader python/object/new constructor, implemented by construct_python_object_apply, has support for setting […]
