December 2021 - Page 24 of 68

FreeBSD 13 — wget-devel — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — wget-devel — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wget — multiple HTTP client download filename vulnerability Related CVEs: CVE-2004-1487 CVE-2004-1488 CVE-2010-2252 Upstream summary: GNU Wget version 1.12 and earlier uses a server-provided filename instead of the original URL […]

Read more
Debian 11 — proxytunnel — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — proxytunnel — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-2440 Upstream summary: Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users. Table of contents […]

Read more
Debian 11 — cgit — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — cgit — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-1899 CVE-2016-1900 CVE-2016-1901 CVE-2018-14912 Upstream summary: CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP […]

Read more
Understanding the GraphQL Type System — step-by-step DevOps tutorial on Progressive Robot

Understanding the GraphQL Type System

GraphQL is a modern solution for facilitating the communication between a front end and a data source. In order to write a functioning GraphQL schema, you must understand the GraphQL Type System. In this article, you will learn about the five built-in scalar types, Enums, Object types (and the abstract types that work alongside them), and the List and Non-Null wrapping types. You will see examples for each type and learn how to use them to build a complete GraphQL schema.

Read more
Debian 11 — xli — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — xli — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2001-0775 CVE-2005-0638 CVE-2005-0639 CVE-2005-3178 Upstream summary: Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES […]

Read more
Debian 11 — node-mysql — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-mysql — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-9244 CVE-2019-14939 Upstream summary: Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection. Table of contents […]

Read more
Arch Linux — python-urllib3 — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — python-urllib3 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202106-25 Related CVEs: CVE-2021-33503 Upstream summary: Type: denial of service. Status: Fixed. Affected: 1.26.4-2. Fixed in: 1.26.5-1. Group: AVG-2038. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Ubuntu 20.04 — weechat — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — weechat — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 December 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5258-1 Related CVEs: CVE-2017-14727 CVE-2020-8955 CVE-2020-9759 CVE-2020-9760 CVE-2021-40516 Upstream summary: Stuart Nevans Locke discovered that WeeChat's relay plugin insecurely handled malformed websocket frames. A remote attacker in control of a […]

Read more
Oracle Linux 8 — nodejs:10 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — nodejs:10 — vulnerability — patch and remediation guide (ELSA-2021-0735)

🟠 High   ⏱ 15–60 min  Last verified: 21 December 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-0735 Related CVEs: CVE-2021-22884 CVE-2021-22883 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Build Apps Faster With an app platform — step-by-step DevOps tutorial on Progressive Robot

Build Apps Faster With an app platform

Introducing App Platform, a modern PaaS that makes it simpler for you to build, deploy, and scale apps. Plus get best practice tips on user research, hypothesis-driven development, design thinking, and agile/iterative methodologies.

Read more
CHAT