April 2022 - Page 19 of 70

Ubuntu 18.04 — node-object-path — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — node-object-path — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5967-1 Related CVEs: CVE-2020-15256 CVE-2021-23434 CVE-2021-3805 Upstream summary: It was discovered that the set() method in object-path could be corrupted as a result of prototype pollution by sending a message […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide (ELSA-2022-9533)

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-9533 Related CVEs: CVE-2022-1263 CVE-2021-4095 CVE-2022-29582 CVE-2022-1015 CVE-2022-28390 CVE-2022-28388 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
FreeBSD 13 — cups-base — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — cups-base — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cups — multiple vulnerabilities Related CVEs: CVE-2004-0558 CVE-2004-0888 CVE-2004-0889 CVE-2004-0923 CVE-2004-1125 CVE-2004-1267 CVE-2005-0064 CVE-2005-2097  +12 more Upstream summary: CUPS development team reports: The new release addresses two security vulnerabilities, add […]

Read more
How to Set Up Pacemaker and Corosync for High Availability on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Set Up Pacemaker and Corosync for High Availability on RHEL 8

Pacemaker and Corosync together form the de facto high-availability (HA) cluster stack for Linux. Corosync provides the cluster messaging and quorum layer, while Pacemaker manages resources — ensuring that services like virtual IP addresses and web servers start, stop, and migrate between nodes according to defined constraints. On RHEL 8, both packages are available through […]

Read more
AlmaLinux 8 — exempi — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — exempi — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2024:3066 Related CVEs: CVE-2020-18651 CVE-2020-18652 Upstream summary: Exempi provides a library for easy parsing of XMP metadata. Security Fix(es): * exempi: denial of service via opening of crafted audio file with ID3V2 […]

Read more
AlmaLinux 8 — oci-systemd-hook — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — oci-systemd-hook — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2021:0705 Related CVEs: CVE-2021-20188 CVE-2020-10696 CVE-2020-7039 CVE-2019-16884 CVE-2019-18466 CVE-2019-9512 CVE-2019-9514 CVE-2019-10214  +3 more Upstream summary: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): […]

Read more
openSUSE Tumbleweed — python39-py — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — python39-py — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:338-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-42969 Upstream summary: The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a […]

Read more
openSUSE Tumbleweed — kpartx — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — kpartx — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3707-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41973 Upstream summary: multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able […]

Read more
CHAT