February 2022 - Page 20 of 64

FreeBSD 13 — bogofilter-tc — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — bogofilter-tc — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bogofilter — heap corruption by invalid base64 input Related CVEs: CVE-2010-2494 CVE-2012-5468 Upstream summary: David Relson reports: Fix a heap corruption in base64 decoder on invalid input. Analysis and patch […]

Read more
How to Set Up Victoriametrics on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Set Up Victoriametrics on Debian 11

Introduction This guide explains how to Set Up Victoriametrics on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the standard […]

Read more
FreeBSD 12 — py36-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py36-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 February 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Django — multiple vulnerabilities Related CVEs: CVE-2017-12794 CVE-2017-7233 CVE-2017-7234 CVE-2018-16984 CVE-2018-6188 CVE-2019-11358 CVE-2019-12308 CVE-2019-12781  +12 more Upstream summary: Django Release reports: CVE-2021-31542:Potential directory-traversal via uploaded files. MultiPartParser, UploadedFile, and FieldFile […]

Read more
FreeBSD 13 — openwebmail — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — openwebmail — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: "Content-Type" XSS vulnerability affecting other webmail systems Related CVEs: CVE-2004-0519 Upstream summary: Roman Medina-Heigl Hernandez did a survey which other webmail systems where vulnerable to a bug he discovered in […]

Read more
Debian 11 — recon-ng — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — recon-ng — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-20752 Upstream summary: An issue was discovered in Recon-ng before 4.9.5. Lack of validation in the modules/reporting/csv.py file allows CSV injection. More specifically, when a Twitter user possesses […]

Read more
Debian 11 — swi-prolog — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — swi-prolog — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-6089 CVE-2012-6090 CVE-2017-17524 Upstream summary: Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause […]

Read more
openSUSE Tumbleweed — qtox — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — qtox — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:1640-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-44847 Upstream summary: A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper […]

Read more
Ubuntu 20.04 — xz-utils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — xz-utils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5378-2 Related CVEs: CVE-2022-1271 Upstream summary: Cleemy Desu Wayo discovered that XZ Utils incorrectly handled certain filenames. If a user or automated system were tricked into performing xzgrep operations with […]

Read more
How To Install Nginx on Rocky Linux 8 — step-by-step Linux tutorial on Progressive Robot

How To Install Nginx on Rocky Linux 8

Nginx is one of the most popular web servers in the world and is responsible for hosting some of the largest and highest-traffic sites on the internet. It is more resource-friendly than Apache in most cases and can be used as a web server or reverse proxy. In this guide, we’ll discuss how to install Nginx on a Rocky Linux 8 server.

Read more
How to Set Up BitLocker Network Unlock on Windows Server 2019 — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Set Up BitLocker Network Unlock on Windows Server 2019

Introduction to BitLocker Network Unlock on Windows Server 2019 BitLocker Network Unlock is a feature in Windows Server 2019 and Windows 10/11 Enterprise that allows BitLocker-encrypted drives to automatically unlock when a computer boots on the corporate network, without requiring user interaction to enter a PIN or insert a USB key. This is particularly useful […]

Read more
CHAT