March 2022 - Page 18 of 70

FreeBSD 13 — scponly — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — scponly — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: scponly — local privilege escalation exploits Upstream summary: Max Vozeler reports: If ALL the following conditions are true, administrators using scponly-4.1 or older may be at risk of a local […]

Read more
FreeBSD 13 — fr-wordpress — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — fr-wordpress — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wordpress — multiple issues Upstream summary: wordpress developers reports: This security and maintenance release features 1 bug fix in addition to 3 security fixes. Because this is a security release, […]

Read more
FreeBSD 13 — py37-tensorflow — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py37-tensorflow — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-tensorflow — denial of service vulnerability Related CVEs: CVE-2022-35935 CVE-2022-35941 CVE-2022-35991 Upstream summary: Kang Hong Jin, Neophytos Christou, 刘力源 and Pattarakrit Rattankul report: Another instance of CVE-2022-35935, where `SobolSample` is […]

Read more
Debian 11 — godot — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — godot — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-10069 CVE-2021-26825 CVE-2021-26826 Upstream summary: In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly. Table of contents Symptom & […]

Read more
How to Install Debian 11 Bullseye on a Server — step-by-step Debian 11 tutorial on Progressive Robot

How to Install Debian 11 Bullseye on a Server

Introduction Deploying install debian 11 bullseye on a server on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Before you […]

Read more
Debian 11 — r-cran-haven — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — r-cran-haven — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-11364 CVE-2018-11365 CVE-2018-5698 Upstream summary: sav_parse_machine_integer_info_record in spss/readstat_sav_read.c in libreadstat.a in ReadStat 0.1.1 has a memory leak related to an iconv_open call. Table of contents Symptom & Impact […]

Read more
Alpine Linux edge — libmodbus — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — libmodbus — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 3.1.8-r0 📖 ~4 min read  •  Source: Alpine secdb entry — libmodbus 3.1.8-r0 Related CVEs: CVE-2022-0367 Upstream summary: Alpine community repository for vedge ships libmodbus 3.1.8-r0 which addresses CVE-2022-0367. Table of contents Symptom & Impact Environment […]

Read more
Oracle Linux 8 — python3 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — python3 — vulnerability — patch and remediation guide (ELSA-2021-9100)

🟠 High   ⏱ 15–60 min  Last verified: 24 March 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-9100 Related CVEs: CVE-2021-3177 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 8 — libtar — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — libtar — vulnerability — patch and remediation guide (ELSA-2023-2898)

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-2898 Related CVEs: CVE-2021-33643 CVE-2021-33645 CVE-2021-33644 CVE-2021-33646 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more
CHAT