Linux

Debian 12 — python-gnupg — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — python-gnupg — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-7323 CVE-2014-1927 CVE-2014-1928 CVE-2014-1929 CVE-2019-6690 Upstream summary: python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Table of contents Symptom & […]

Read more
Debian 11 — ruby-commonmarker — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ruby-commonmarker — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 August 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-5238 CVE-2022-24724 CVE-2022-39209 CVE-2023-22483 CVE-2023-22484 CVE-2023-22485 CVE-2023-22486 CVE-2023-24824  +3 more Upstream summary: The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to […]

Read more
Debian 12 — svgpp — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — svgpp — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 August 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-6245 CVE-2019-6246 CVE-2019-6247 CVE-2021-44960 Upstream summary: An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. In the function agg::cell_aa::not_equal, dx is […]

Read more
Ubuntu 22.04 — mplayer — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — mplayer — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 August 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5895-1 Related CVEs: CVE-2022-38850 CVE-2022-38851 CVE-2022-38855 CVE-2022-38858 CVE-2022-38860 CVE-2022-38861 CVE-2022-38863 CVE-2022-38864  +2 more Upstream summary: It was discovered that MPlayer could be made to divide by zero when processing certain […]

Read more
Ubuntu 20.04にAptを使用してJavaをインストールする方法 — step-by-step Linux tutorial on Progressive Robot

Ubuntu 20.04にAptを使用してJavaをインストールする方法

このガイドでは、`apt`を使用して、Java Runtime Environment (JRE)と Java Developer Kit (JDK)のさまざまなバージョンをUbuntu 18.04にインストールします。OpenJDKとOracleの公式JDKをインストールします。次にプロジェクトに使用するバージョンを選択します。 終了したら、JDKを使用してソフトウェアを開発したり、Java Runtimeを使用してソフトウェアを実行したりできます。

Read more
Ubuntu 20.04 — cjose — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — cjose — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 August 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6307-1 Related CVEs: CVE-2023-37464 Upstream summary: It was discovered that JOSE for C/C++ AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the […]

Read more
Oracle Linux 9 — GraalVM — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — GraalVM — vulnerability — patch and remediation guide (ELSA-2023-12682)

🟠 High   ⏱ 15–60 min  Last verified: 20 August 2023 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-12682 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]

Read more
How to Configure DNSSEC Validation on Debian 12 — step-by-step Debian 12 tutorial on Progressive Robot

How to Configure DNSSEC Validation on Debian 12

Introduction Debian 12 Bookworm is built around the ethos of stability and free software. Setting up configure dnssec validation on debian 12 on Bookworm leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bookworm freeze. Follow each step carefully and the […]

Read more
Common Problems 124667

Oracle Linux 9 – Common Problem 021 – Diagnosis and Fix

🟡 Medium   ⏱ 5–30 min  Last verified: 19 August 2023 Affected versions: Oracle Linux 9 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
CHAT