February 2022 - Page 27 of 65

openSUSE Tumbleweed — orthanc — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — orthanc — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:10144-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-2119 Upstream summary: OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM […]

Read more
Gentoo Linux — app-arch/unzip — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — app-arch/unzip — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202310-17 Related CVEs: CVE-2022-0529 CVE-2022-0530 CVE-2018-1000035 CVE-2019-13232 Upstream summary: Multiple vulnerabilities have been discovered in UnZip. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment […]

Read more
How to Configure Concourse CI on CentOS Stream 9 — step-by-step CentOS Stream 9 tutorial on Progressive Robot

How to Configure Concourse CI on CentOS Stream 9

Introduction This tutorial demonstrates how to Configure Concourse CI on CentOS Stream 9 on CentOS Stream 9. It is written for administrators who want a repeatable, well-explained walkthrough that goes beyond a bare command list and explains each configuration choice. Every command is tested against a freshly registered CentOS Stream 9 system with the default […]

Read more
Arch Linux — prosody — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — prosody — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202105-11 Related CVEs: CVE-2021-32921 CVE-2021-32920 CVE-2021-32919 CVE-2021-32918 CVE-2021-32917 CVE-2021-37601 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 1:0.11.8-1. Fixed in: 1:0.11.9-1. Group: AVG-1955. Table of contents Symptom & Impact Environment […]

Read more
Arch Linux — fossil — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — fossil — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202108-8 Related CVEs: CVE-2021-36377 Upstream summary: Type: certificate verification bypass. Status: Fixed. Affected: 2.15.1-1. Fixed in: 2.16-1. Group: AVG-2146. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Rocky Linux 8 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Rocky Linux 8

Rocky Linux 8 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read  •  Source: Rocky Linux RXSA RLSA-2026:7681 Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James […]

Read more
FreeBSD 13 — py37-buildbot — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py37-buildbot — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: buildbot — OAuth Authentication Vulnerability Related CVEs: CVE-2019-12300 CVE-2019-7313 Upstream summary: Buildbot accepted user-submitted authorization token from OAuth and used it to authenticate user. The vulnerability can lead to malicious […]

Read more
Debian 11 — nfs-utils — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — nfs-utils — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0252 CVE-2004-0154 CVE-2004-1014 CVE-2008-4552 CVE-2011-1749 CVE-2011-2500 CVE-2013-1923 CVE-2019-3689  +1 more Upstream summary: Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before […]

Read more
How to Set Up Consul on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Set Up Consul on SLES 12

Introduction This tutorial covers How to Set Up Consul on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper refresh […]

Read more
Debian 11 — ruby-mail — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ruby-mail — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-2139 CVE-2012-2140 CVE-2015-9097 Upstream summary: Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. […]

Read more
CHAT