Linux

Debian 12 — scipy — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — scipy — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-25399 CVE-2023-29824 Upstream summary: A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a […]

Read more
Ubuntu 16.04 — libcaca — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libcaca — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 28 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7943-1 Related CVEs: CVE-2022-0856 CVE-2021-30498 CVE-2021-30499 CVE-2021-3410 CVE-2018-20544 CVE-2018-20545 CVE-2018-20546 CVE-2018-20547  +2 more Upstream summary: Han Zheng discovered that libcaca incorrectly handled certain images. An attacker could possibly use this […]

Read more
SLES 12 — axis — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — axis — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 June 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0851-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-51441 CVE-2012-5784 CVE-2014-3596 CVE-2018-8032 Upstream summary: ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin […]

Read more
How to Install OpenJDK 17 on Debian 12 — step-by-step Debian 12 tutorial on Progressive Robot

How to Install OpenJDK 17 on Debian 12

Introduction This guide explains how to Install OpenJDK 17 on Debian 12 on Debian 12 Bookworm. Debian Bookworm uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 12 install with the standard […]

Read more
Oracle Linux 9 — subversion — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — subversion — vulnerability — patch and remediation guide (ELSA-2022-4591)

🟠 High   ⏱ 15–60 min  Last verified: 28 June 2023 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-4591 Related CVEs: CVE-2022-24070 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 9 — python3.11 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — python3.11 — vulnerability — patch and remediation guide (ELSA-2023-5456)

🟠 High   ⏱ 15–60 min  Last verified: 28 June 2023 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-5456 Related CVEs: CVE-2023-40217 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 8 — freerdp — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — freerdp — vulnerability — patch and remediation guide (ELSA-2023-2851)

🟡 Medium   ⏱ 10–30 min  Last verified: 28 June 2023 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-2851 Related CVEs: CVE-2022-39283 CVE-2022-39320 CVE-2022-39319 CVE-2022-41877 CVE-2022-39282 CVE-2022-39318 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Oracle Linux 8 — librabbitmq — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — librabbitmq — vulnerability — patch and remediation guide (ELSA-2023-7150)

🟡 Medium   ⏱ 10–30 min  Last verified: 28 June 2023 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-7150 Related CVEs: CVE-2023-35789 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 9 — tpm2-tss security and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — tpm2-tss security and — enhancement update — new behaviour and fixes (ELSA-2023-6685)

🟢 Low   ⏱ 5–15 min  Last verified: 27 June 2023 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-6685 Related CVEs: CVE-2023-22745 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 12 — uap-core — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — uap-core — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 June 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-20164 CVE-2020-5243 Upstream summary: An issue was discovered in regex.yaml (aka regexes.yaml) in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service (ReDoS) issue allows remote attackers […]

Read more
CHAT