chris

FreeBSD 13 — rubygem-activejob — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — rubygem-activejob — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Rails — Active Job vulnerability Related CVEs: CVE-2018-16476 Upstream summary: Ruby on Rails blog: Rails 4.2.11, 5.0.7.1, 5.1.6.1 and 5.2.1.1 have been released! These contain the following important security fixes, […]

Read more
FreeBSD 13 — xmms — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xmms — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xmms — Integer Overflow And Underflow Vulnerabilities Related CVEs: CVE-2007-0653 CVE-2007-0654 Upstream summary: Secunia reports: Secunia Research has discovered two vulnerabilities in XMMS, which can be exploited by malicious people […]

Read more
FreeBSD 13 — ghostscript9-x — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ghostscript9-x — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]

Read more
How to Configure Infrastructure as Code on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Configure Infrastructure as Code on FreeBSD 13

Introduction FreeBSD 13 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up configure infrastructure as code on freebsd 13 on FreeBSD 13 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux […]

Read more
FreeBSD 13 — php70-mcrypt — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php70-mcrypt — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292  +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

Read more
FreeBSD 13 — apache22-peruser-mpm — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — apache22-peruser-mpm — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache22 — chunk header parsing defect Related CVEs: CVE-2012-0833 CVE-2012-2687 CVE-2012-3499 CVE-2012-4558 CVE-2013-1862 CVE-2013-1896 CVE-2013-5704 CVE-2013-6438  +5 more Upstream summary: Apache Foundation reports: CVE-2015-3183 core: Fix chunk header parsing defect. […]

Read more
Debian 11 — xotcl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — xotcl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3720 Upstream summary: The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a […]

Read more
Common Problems 125163

Oracle Linux 8 – Common Problem 020 – Diagnosis and Fix

🟠 High   ⏱ 5–30 min  Last verified: 12 November 2021 Affected versions: Oracle Linux 8 📖 ~3 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Debian 11 — xapian-omega — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — xapian-omega — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-2947 Upstream summary: Cross-site scripting (XSS) vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI parameter values, which […]

Read more
Debian 11 — libcrypt-openssl-dsa-perl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libcrypt-openssl-dsa-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-0129 Upstream summary: libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the […]

Read more
CHAT