February 2022 - Page 62 of 65

Oracle Linux 8 — opensc security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — opensc security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2021-1600)

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-1600 Related CVEs: CVE-2020-26572 CVE-2020-26571 CVE-2020-26570 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
FreeBSD 13 — wzdftpd — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — wzdftpd — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wzdftpd — remote DoS Upstream summary: wzdftpd contains a potential remote Denial-of-Service. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]

Read more
FreeBSD 13 — tnftp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — tnftp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tnftp — mget does not check for directory escapes Related CVEs: CVE-2004-1294 Upstream summary: When downloading a batch of files from an FTP server the mget command does not check […]

Read more
How to Configure Swap Space on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Configure Swap Space on Debian 11

Introduction How to Configure Swap Space on Debian 11 is a fundamental operation for any administrator maintaining a Debian 11 Bullseye server. Debian 11 Bullseye ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian 11. This […]

Read more
Debian 11 — node-xmlhttprequest — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-xmlhttprequest — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-28502 Upstream summary: This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (async=False on xhr.open), malicious user input flowing into […]

Read more
FreeBSD 13 — ilohamail — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ilohamail — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: "Content-Type" XSS vulnerability affecting other webmail systems Related CVEs: CVE-2004-0519 Upstream summary: Roman Medina-Heigl Hernandez did a survey which other webmail systems where vulnerable to a bug he discovered in […]

Read more
FreeBSD 13 — bogofilter-tdb — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — bogofilter-tdb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bogofilter — RFC 2047 decoder denial-of-service vulnerability Related CVEs: CVE-2004-1007 Upstream summary: The bogofilter team has been provided with a test case of a malformatted (non-conformant) RFC-2047 encoded word that […]

Read more
Debian 11 — mathjax — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — mathjax — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1999024 Upstream summary: MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability in the \unicode{} macro that can result in Potentially untrusted Javascript running […]

Read more
Ubuntu 18.04 — atftp — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — atftp — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6334-1 Related CVEs: CVE-2020-6097 CVE-2021-41054 CVE-2021-46671 CVE-2019-11365 CVE-2019-11366 Upstream summary: Peter Wang discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp […]

Read more
CHAT