February 2022 - Page 27 of 64

Ubuntu 16.04 — wheel — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — wheel — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5821-2 Related CVEs: CVE-2022-40898 Upstream summary: USN-5821-1 fixed a vulnerability in wheel. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Sebastian Chnelik discovered that wheel […]

Read more
Gentoo Linux — app-arch/unzip — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — app-arch/unzip — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202310-17 Related CVEs: CVE-2022-0529 CVE-2022-0530 CVE-2018-1000035 CVE-2019-13232 Upstream summary: Multiple vulnerabilities have been discovered in UnZip. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment […]

Read more
Ubuntu 16.04 — pcs — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — pcs — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7614-1 Related CVEs: CVE-2017-2661 CVE-2022-2735 CVE-2018-1086 CVE-2022-1049 Upstream summary: Cedric Buissart discovered that pcs did not correctly handle certain parameters. An attacker could possibly use this issue to leak sensitive […]

Read more
How to Configure a Python uWSGI Application Server on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Configure a Python uWSGI Application Server on Debian 11

Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up configure a python uwsgi application server on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each step […]

Read more
Arch Linux — prosody — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — prosody — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202105-11 Related CVEs: CVE-2021-32921 CVE-2021-32920 CVE-2021-32919 CVE-2021-32918 CVE-2021-32917 CVE-2021-37601 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 1:0.11.8-1. Fixed in: 1:0.11.9-1. Group: AVG-1955. Table of contents Symptom & Impact Environment […]

Read more
SLES 12 — fribidi — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — fribidi — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1844-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-25308 CVE-2022-25309 CVE-2022-25310 Upstream summary: A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially […]

Read more
Arch Linux — fossil — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — fossil — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202108-8 Related CVEs: CVE-2021-36377 Upstream summary: Type: certificate verification bypass. Status: Fixed. Affected: 2.15.1-1. Fixed in: 2.16-1. Group: AVG-2146. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
SLES 15 — bcel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — bcel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 February 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:4306-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-42920 CVE-2022-34169 Upstream summary: Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an […]

Read more
FreeBSD 12 — grafana — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — grafana — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 February 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Grafana — DingDing contact points exposed in Grafana Alerting Related CVEs: CVE-2018-558213 CVE-2021-39226 CVE-2021-41174 CVE-2021-41244 CVE-2021-43798 CVE-2021-43813 CVE-2021-43815 CVE-2022-21702  +12 more Upstream summary: Grafana Labs reports: An incident occurred where […]

Read more
Rocky Linux 8 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Rocky Linux 8

Rocky Linux 8 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read  •  Source: Rocky Linux RXSA RLSA-2026:7681 Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James […]

Read more
CHAT