2021 - Page 272 of 759

Oracle Linux 8 — firefox — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — firefox — vulnerability — patch and remediation guide (ELSA-2021-3157)

🟠 High   ⏱ 15–60 min  Last verified: 26 August 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-3157 Related CVEs: CVE-2021-29984 CVE-2021-29988 CVE-2021-29980 CVE-2021-29985 CVE-2021-29986 CVE-2021-29989 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Debian 11 — poppler — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — poppler — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-2097 CVE-2005-3191 CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627  +12 more Upstream summary: xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local […]

Read more
How to Set Up Nginx with PHP-FPM on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Set Up Nginx with PHP-FPM on Debian 9

Introduction Debian 9 Stretch is built around the ethos of stability and free software. Setting up set up nginx with php-fpm on debian 9 on Stretch leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Stretch freeze. Follow each step carefully […]

Read more
Oracle Linux 8 — .NET 6.0 security and bugfix update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — .NET 6.0 security and bugfix update (ELSA-2022-0496)

🟠 High   ⏱ 15–60 min  Last verified: 25 August 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-0496 Related CVEs: CVE-2022-21986 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 13 — icecast — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — icecast — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: icecast — Cross-Site Scripting Vulnerability Related CVEs: CVE-2001-0784 CVE-2001-1083 CVE-2001-1229 CVE-2001-1230 CVE-2002-0177 CVE-2004-0781 Upstream summary: Caused by improper filtering of HTML code in the status display, it is possible for […]

Read more
How to Install Prometheus on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Install Prometheus on FreeBSD 13

Introduction Deploying install prometheus on freebsd 13 on a FreeBSD 13 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base + […]

Read more
FreeBSD 13 — openarena — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — openarena — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: id Tech 3 — remote code execution vulnerability Related CVEs: CVE-2017-6903 Upstream summary: The content auto-download of id Tech 3 can be used to deliver maliciously crafted content, that triggers […]

Read more
CHAT