Linux

Arch Linux — libgcrypt — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — libgcrypt — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202101-45 Related CVEs: CVE-2021-3345 CVE-2018-0495 CVE-2017-7526 CVE-2017-0379 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 1.9.0-2. Fixed in: 1.9.1-1. Group: AVG-1505. Table of contents Symptom & Impact Environment & […]

Read more
Ubuntu 18.04 — advancecomp — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — advancecomp — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5838-1 Related CVEs: CVE-2022-35014 CVE-2022-35015 CVE-2022-35016 CVE-2022-35017 CVE-2022-35018 CVE-2022-35019 CVE-2022-35020 CVE-2019-8379  +2 more Upstream summary: It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on […]

Read more
How to Install PHP 8.1 CLI on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Install PHP 8.1 CLI on Debian 11

Introduction This guide explains how to Install PHP 8.1 CLI on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the […]

Read more
Oracle Linux 8 — java-1.8.0-openjdk — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — java-1.8.0-openjdk — security and stability fixes — required update (ELSA-2022-0307)

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-0307 Related CVEs: CVE-2022-21365 CVE-2022-21299 CVE-2022-21360 CVE-2022-21282 CVE-2022-21294 CVE-2022-21296 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
AlmaLinux 8 — mingw-bzip2 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — mingw-bzip2 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2021:1968 Related CVEs: CVE-2019-16168 CVE-2020-13434 CVE-2020-13630 CVE-2020-13631 CVE-2020-13632 Upstream summary: MinGW is a free and open source software development environment to create Microsoft Windows applications. The following packages have been upgraded to […]

Read more
Debian 11 — shorewall — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — shorewall — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0647 CVE-2005-2317 Upstream summary: shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file. […]

Read more
Debian 11 — pupnp-1.8 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pupnp-1.8 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-12695 CVE-2020-13848 CVE-2021-28302 CVE-2021-29462 Upstream summary: The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on […]

Read more
Ubuntu 20.04 — maven-shared-utils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — maven-shared-utils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6730-1 Related CVEs: CVE-2022-29599 Upstream summary: It was discovered that Apache Maven Shared Utils did not handle double-quoted strings properly, allowing shell injection attacks. This could allow an attacker to […]

Read more
Ubuntu 18.04 — usbview — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — usbview — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5249-1 Related CVEs: CVE-2022-23220 Upstream summary: It was discovered that USBView allowed unprivileged users to run usbview as root. A local attacker could use this vulnerability to gain administrative privileges […]

Read more
Ubuntu 20.04 — barbican — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — barbican — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5697-1 Related CVEs: CVE-2022-3100 CVE-2022-23451 CVE-2022-23452 Upstream summary: Douglas Mendizabal discovered that Barbican incorrectly handled certain query strings. A remote attacker could possibly use this issue to bypass the access […]

Read more
CHAT