🟡 Medium ⏱ 10–30 min Last verified: 16 February 2021 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4875-1 Related CVEs: CVE-2020-7247 CVE-2020-8793 CVE-2020-8794 Upstream summary: It was discovered that OpenSMTPD incorrectly verified the sender's or receiver's e-mail addresses under certain conditions. An attacker could possibly use this […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7211-1 Related CVEs: CVE-2020-11867 Upstream summary: Mike Salvatore discovered that Audacity incorrectly handled default permissions of temporary files created by the application. An attacker could possibly use this issue to […]
🟡 Medium ⏱ 10–30 min Last verified: 16 February 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5027-1 Related CVEs: CVE-2021-32610 CVE-2020-36193 CVE-2020-28948 CVE-2020-28949 Upstream summary: It was discovered that PEAR incorrectly handled symbolic links in archives. A remote attacker could possibly use this issue to execute […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202210-07 Related CVEs: CVE-2021-3427 Upstream summary: Deluge does not sufficiently sanitize crafted torrent file data, leading to the application interpreting untrusted data as HTML. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5169-1 Related CVEs: CVE-2020-10737 Upstream summary: Matthias Gerstner discovered that there was a race condition in the mkhomedir tool shipped with the oddjob package. An authenticated attacker could use this […]
🟡 Medium ⏱ 10–30 min Last verified: 16 February 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-3582 Related CVEs: CVE-2021-22923 CVE-2021-22922 CVE-2021-22924 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟠 High ⏱ 15–60 min Last verified: 15 February 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-5683 Related CVEs: CVE-2022-21541 CVE-2022-21540 CVE-2022-34169 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2020:2177-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-27818 Upstream summary: A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by […]
Introduction Oracle Linux 8 ships with a stable, security-hardened base that makes deploying manage users and groups on oracle linux 8 both straightforward and auditable. This tutorial covers the complete procedure for how to Manage Users and Groups on Oracle Linux 8, including dnf module streams where applicable, systemd unit management, and the firewalld rules […]
🟠 High ⏱ 15–60 min Last verified: 15 February 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: salt — multiple vulnerabilities in salt-master process Related CVEs: CVE-2016-1866 CVE-2016-3176 CVE-2017-12791 CVE-2017-14695 CVE-2017-14696 CVE-2018-15750 CVE-2018-15751 CVE-2019-17361 +2 more Upstream summary: F-Secure reports: CVE-2020-11651 – Authentication bypass vulnerabilities The ClearFuncs […]
