Linux

Debian 11 — php-horde-kronolith — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — php-horde-kronolith — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-6620 CVE-2013-6365 CVE-2017-16906 CVE-2017-16908 Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in the (1) tasks and (2) search views in Horde Kronolith H4 before 3.0.17 allow remote attackers […]

Read more
Debian 11 — tika — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — tika — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-4434 CVE-2016-6809 CVE-2018-11761 CVE-2018-11762 CVE-2018-1335 CVE-2018-1338 CVE-2018-1339 CVE-2018-17197  +12 more Upstream summary: Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might […]

Read more
Debian 11 — wavpack — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — wavpack — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-10169 CVE-2016-10170 CVE-2016-10171 CVE-2016-10172 CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539  +12 more Upstream summary: The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial […]

Read more
Debian 11 — exo — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — exo — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-32278 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How To Install Cassandra and Run a Single-Node Cluster on Ubuntu 22.04 — step-by-step Linux tutorial on Progressive Robot

How To Install Cassandra and Run a Single-Node Cluster on Ubuntu 22.04

Apache Cassandra is an open-source, masterless, and distributed NoSQL database system. Cassandra is considered highly suited for mission-critical applications and multi-node setups because it’s scalable, elastic, and fault-tolerant. In this tutorial, you’ll install and use Cassandra to run a single-node cluster on Ubuntu 22.04.

Read more
Ubuntu 18.04 — ntfs-3g — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — ntfs-3g — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 November 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5711-1 Related CVEs: CVE-2022-40284 CVE-2021-46790 CVE-2022-30783 CVE-2022-30784 CVE-2022-30785 CVE-2022-30786 CVE-2022-30787 CVE-2022-30788  +4 more Upstream summary: Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A local […]

Read more
Ubuntu 22.04 — libbpf — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — libbpf — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 November 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5759-1 Related CVEs: CVE-2021-45940 CVE-2021-45941 CVE-2022-3533 CVE-2022-3534 CVE-2022-3606 Upstream summary: It was discovered that LibBPF incorrectly handled certain memory operations under certain circumstances. An attacker could possibly use this issue […]

Read more
Oracle Linux 9 — rsync — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — rsync — vulnerability — patch and remediation guide (ELSA-2022-6181)

🟠 High   ⏱ 15–60 min  Last verified: 11 November 2022 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-6181 Related CVEs: CVE-2022-29154 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
CHAT