Linux

Debian 11 — fbi — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — fbi — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-1695 CVE-2006-3119 Upstream summary: The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via […]

Read more
Debian 11 — node-ini — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-ini — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-7788 Upstream summary: This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will […]

Read more
Debian 11 — crispy-doom — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — crispy-doom — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-14983 Upstream summary: The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can […]

Read more
Debian 11 — dpdk — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — dpdk — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1059 CVE-2019-14818 CVE-2020-10722 CVE-2020-10723 CVE-2020-10724 CVE-2020-10725 CVE-2020-10726 CVE-2020-14374  +9 more Upstream summary: The DPDK vhost-user interface does not check to verify that all the requested guest physical range […]

Read more
How to Install OpenJDK 8 on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Install OpenJDK 8 on Debian 9

Introduction This guide explains how to Install OpenJDK 8 on Debian 9 on Debian 9 Stretch. Debian Stretch uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 9 install with the standard […]

Read more
Ubuntu 18.04 — ruby-sinatra — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — ruby-sinatra — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7664-1 Related CVEs: CVE-2022-29970 CVE-2022-45442 Upstream summary: It was discovered that Sinatra incorrectly handled serving static files. An attacker could possibly use this issue to perform local file inclusion, obtaining […]

Read more
Ubuntu 20.04 — ruby-sinatra — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — ruby-sinatra — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7664-1 Related CVEs: CVE-2022-29970 CVE-2022-45442 Upstream summary: It was discovered that Sinatra incorrectly handled serving static files. An attacker could possibly use this issue to perform local file inclusion, obtaining […]

Read more
Ubuntu 20.04 — golang-1.13 — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — golang-1.13 — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6038-2 Related CVEs: CVE-2022-1705 CVE-2022-27664 CVE-2022-28131 CVE-2022-2879 CVE-2022-2880 CVE-2022-29526 CVE-2022-30629 CVE-2022-30630  +11 more Upstream summary: USN-6038-1 fixed several vulnerabilities in Go 1.18. This update provides the corresponding updates for Go […]

Read more
SLES 15 — libgmp10 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libgmp10 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 February 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:541-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-43618 Upstream summary: GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to […]

Read more
How to Set Up Bash Aliases and Environment Variables on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Set Up Bash Aliases and Environment Variables on Debian 9

Introduction This guide explains how to Set Up Bash Aliases and Environment Variables on Debian 9 on Debian 9 Stretch. Debian Stretch uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 9 […]

Read more
CHAT