October 2021 - Page 4 of 66

Debian 11 — ircii — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ircii — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0323 CVE-2021-29376 Upstream summary: Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via […]

Read more
Debian 11 — netperf — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — netperf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-1444 Upstream summary: netserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack on /tmp/netperf.debug. Table of contents Symptom & Impact Environment & […]

Read more
Debian 11 — fam — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — fam — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-0875 Upstream summary: Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group. […]

Read more
Arch Linux — ant — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — ant — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202012-5 Related CVEs: CVE-2020-11979 CVE-2020-1945 CVE-2021-36374 CVE-2021-36373 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 1.10.8-1. Fixed in: 1.10.9-1. Group: AVG-1312. Table of contents Symptom & Impact Environment & […]

Read more
Debian 11 — nip2 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — nip2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-17514 Upstream summary: boxes.c in nip2 8.4.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct […]

Read more
How To Set Up a GraphQL API Server in Node.js — step-by-step Javascript tutorial on Progressive Robot

How To Set Up a GraphQL API Server in Node.js

In this tutorial, you’ll make an Express API server in Node.js that serves up a GraphQL endpoint. You will also build a GraphQL schema based on the GraphQL type system, including operations such as queries and mutations, as well as resolver functions to generate responses for any requests. You will also use the GraphiQL integrated development environment (IDE) to explore and debug your schema and query the GraphQL API from a client.

Read more
Debian 11 — lame — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — lame — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-9099 CVE-2015-9100 CVE-2015-9101 CVE-2017-11720 CVE-2017-13712 CVE-2017-15018 CVE-2017-15019 CVE-2017-15045  +7 more Upstream summary: The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a […]

Read more
Debian 11 — node-set-value — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-set-value — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-10747 CVE-2021-23440 Upstream summary: set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype […]

Read more
Debian 11 — pcre3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pcre3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-2491 CVE-2005-4872 CVE-2006-7225 CVE-2006-7226 CVE-2006-7227 CVE-2006-7228 CVE-2006-7230 CVE-2007-1659  +12 more Upstream summary: Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple […]

Read more
How to Harden SSH on RHEL 7 — step-by-step RHEL 7 tutorial on Progressive Robot

How to Harden SSH on RHEL 7

How to Harden SSH on RHEL 7 SSH (Secure Shell) is the primary remote administration protocol for RHEL 7 servers, and by default its configuration leaves several attack vectors open. Brute-force attacks against exposed SSH ports are constant on any internet-facing host, making SSH hardening one of the first tasks every RHEL 7 administrator should […]

Read more
CHAT