2022 - Page 386 of 828

Ubuntu 16.04 — check-mk — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — check-mk — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 July 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5527-2 Related CVEs: CVE-2017-14955 CVE-2017-9781 CVE-2021-36563 CVE-2022-24565 Upstream summary: USN-5527-1 fixed vulnerabilities in Checkmk. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered […]

Read more
SLES 15 — zstd — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — zstd — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 July 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1102-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4899 CVE-2021-24031 CVE-2021-24032 CVE-2019-11922 Upstream summary: A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the […]

Read more
How to Set Up LDAP with OpenLDAP on RHEL 8 — step-by-step RHEL 8 tutorial on Progressive Robot

How to Set Up LDAP with OpenLDAP on RHEL 8

LDAP (Lightweight Directory Access Protocol) is the industry-standard protocol for centralised identity management, used to store and query user accounts, groups, and organisational data. OpenLDAP is the most widely deployed open-source LDAP server and is available in RHEL 8’s default repositories. Rather than a flat configuration file, modern OpenLDAP uses the on-line configuration (OLC) backend, […]

Read more
IBM AIX 7.3 — CVE-1999-0092 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-1999-0092 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 14 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-1999-0092, IBM PSIRT advisory page CVE: CVE-1999-0092 NVD summary: Various vulnerabilities in the AIX portmir command allows local users to obtain root access. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE   exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom & […]

Read more
FreeBSD 13 — py37-httpie — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py37-httpie — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-httpie — exposure of sensitive information vulnerabilities Related CVEs: CVE-2022-0430 CVE-2022-24737 Upstream summary: Glyph reports: HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help […]

Read more
AlmaLinux 9 — squashfs-tools — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — squashfs-tools — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2024:2396 Related CVEs: CVE-2021-40153 CVE-2021-41072 Upstream summary: SquashFS is a highly compressed read-only file system for Linux. These packages contain the utilities for manipulating squashfs file systems. Security Fix(es): * squashfs-tools: unvalidated […]

Read more
FreeBSD 13 — coturn — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — coturn — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: coturn — information leakage Related CVEs: CVE-2020-4067 Upstream summary: Felix Dörre reports: The issue is that STUN/TURN response buffer is not initialized properly. (CWE 665) This is a leak of […]

Read more
CHAT