Linux

Debian 11 — netkit-telnet-ssl — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — netkit-telnet-ssl — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0640 CVE-2004-0911 CVE-2004-0998 CVE-2005-0469 CVE-2020-10188 Upstream summary: Format string vulnerability in the SSL_set_verify function in telnetd.c for SSLtelnet daemon (SSLtelnetd) 0.13 allows remote attackers to execute arbitrary code. […]

Read more
Debian 11 — reprepro — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — reprepro — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-4739 Upstream summary: reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an ostensibly valid Release.gpg file […]

Read more
Debian 11 — python-mistral-lib — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — python-mistral-lib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-3866 Upstream summary: An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw […]

Read more
An Introduction to Queries in PostgreSQL — step-by-step Linux tutorial on Progressive Robot

An Introduction to Queries in PostgreSQL

In this guide, we will discuss the basic syntax of SQL queries as well as some of the more commonly-employed functions and operators. We will also practice making SQL queries using some sample data in a PostgreSQL database.

Read more
Debian 11 — openldap — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — openldap — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 December 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-2952 CVE-2009-3767 CVE-2010-0211 CVE-2010-0212 CVE-2011-1024 CVE-2011-1025 CVE-2011-1081 CVE-2011-4079  +12 more Upstream summary: liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program […]

Read more
How To Use Vuls as a Vulnerability Scanner on Ubuntu 22.04 — step-by-step Linux tutorial on Progressive Robot

How To Use Vuls as a Vulnerability Scanner on Ubuntu 22.04

Vuls is an open-source, agentless vulnerability scanner that automates security vulnerability analysis of the software installed on a system. In this tutorial, you’ll deploy Vuls to an Ubuntu 22.04 server, building Vuls and its dependencies from source code, configuring scanning and reporting to Slack, and optionally connecting it to additional target machines to enable remote scanning.

Read more
Ubuntu 22.04 — ecdsautils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — ecdsautils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6239-1 Related CVEs: CVE-2022-24884 Upstream summary: It was discovered that ECDSA Util did not properly verify certain signature values. An attacker could possibly use this issue to bypass signature verification. […]

Read more
Oracle Linux 8 — ol8addon — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — ol8addon — vulnerability — patch and remediation guide (ELSA-2023-18908)

🟠 High   ⏱ 15–60 min  Last verified: 8 December 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-18908 Related CVEs: CVE-2022-2879 CVE-2022-41720 CVE-2022-41716 CVE-2022-32190 CVE-2022-2880 CVE-2022-41717 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Oracle Linux 9 — firefox — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — firefox — vulnerability — patch and remediation guide (ELSA-2022-8580)

🟠 High   ⏱ 15–60 min  Last verified: 8 December 2022 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-8580 Related CVEs: CVE-2022-45421 CVE-2022-45416 CVE-2022-45406 CVE-2022-45403 CVE-2022-45408 CVE-2022-45405 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
CHAT