2022 - Page 665 of 828

Debian 11 — rtkit — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — rtkit — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-4326 Upstream summary: RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by […]

Read more
Ubuntu 20.04 — usbview — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — usbview — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5249-1 Related CVEs: CVE-2022-23220 Upstream summary: It was discovered that USBView allowed unprivileged users to run usbview as root. A local attacker could use this vulnerability to gain administrative privileges […]

Read more
Ubuntu 20.04 — ntfs-3g — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — ntfs-3g — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5711-1 Related CVEs: CVE-2022-40284 CVE-2021-46790 CVE-2022-30783 CVE-2022-30784 CVE-2022-30785 CVE-2022-30786 CVE-2022-30787 CVE-2022-30788  +2 more Upstream summary: Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A local […]

Read more
Ubuntu 18.04 — zabbix — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — zabbix — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 March 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6751-1 Related CVEs: CVE-2022-35229 CVE-2022-35230 CVE-2014-3005 CVE-2016-10134 CVE-2016-10742 CVE-2016-4338 CVE-2017-2824 CVE-2017-2825  +3 more Upstream summary: It was discovered that Zabbix incorrectly handled input data in the discovery and graphs pages. […]

Read more
Ubuntu 20.04 — abcm2ps — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — abcm2ps — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5961-1 Related CVEs: CVE-2018-10753 CVE-2018-10771 CVE-2019-1010069 CVE-2021-32434 CVE-2021-32435 CVE-2021-32436 Upstream summary: It was discovered that abcm2ps incorrectly handled memory when parsing specially crafted ABC files. An attacker could use this […]

Read more
CentOS Stream 9 — bzip2 — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — bzip2 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 March 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2025:0925 Related CVEs: CVE-2019-12900 Upstream summary: The bzip2 packages contain a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as well as a shared library for […]

Read more
Gentoo Linux — dev-libs/libgcrypt — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — dev-libs/libgcrypt — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202210-13 Related CVEs: CVE-2021-33560 CVE-2021-40528 CVE-2019-13627 Upstream summary: Multiple vulnerabilities have been discovered in libgcrypt. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment & […]

Read more
SLES 12 — python-paramiko — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — python-paramiko — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 15 March 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0174-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000805 CVE-2018-7750 CVE-2022-24302 CVE-2013-7459 Upstream summary: Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that […]

Read more
FreeBSD 13 — firefox-esr — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — firefox-esr — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox ESR — Other issue in the WebRTC component Related CVEs: CVE-2011-3079 CVE-2012-2808 CVE-2014-1492 CVE-2014-1493 CVE-2014-1494 CVE-2014-1496 CVE-2014-1497 CVE-2014-1498  +12 more Upstream summary: https://bugzilla.mozilla.org/show_bug.cgi?id=2035939 reports: Other issue in the WebRTC […]

Read more
How to Configure iptables Packet Filtering on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Configure iptables Packet Filtering on Debian 11

Introduction This guide explains how to Configure iptables Packet Filtering on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the […]

Read more
CHAT