Linux

Debian 11 — hawtjni — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — hawtjni — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-2035 Upstream summary: Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by […]

Read more
How To Set Up Continuous Archiving and Perform Point-In-Time-Recovery with PostgreSQL 12 on Ubuntu 20.04 — step-by-step Linux tutorial on Progressive Robot

How To Set Up Continuous Archiving and Perform Point-In-Time-Recovery with PostgreSQL 12 on Ubuntu 20.04

One method PostgreSQL uses to maintain ACID properties is Write-Ahead Logging (WAL). For example, a secondary database cluster can use the archived WAL file for replication purposes, but you can also use the files to perform point-in-time-recovery (PITR). In this tutorial, you will set up continuous archiving with a PostgreSQL 12 cluster on Ubuntu 20.04 and perform PITR on the cluster.

Read more
Debian 11 — curl — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — curl — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-1605 CVE-2005-0490 CVE-2005-3185 CVE-2005-4077 CVE-2006-1061 CVE-2007-3564 CVE-2009-0037 CVE-2009-2417  +12 more Upstream summary: curl 7.x before 7.10.7 sends CONNECT proxy credentials to the remote server. Table of contents Symptom […]

Read more
Oracle Linux 8 — flatpak security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — flatpak security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2023-7038)

🟡 Medium   ⏱ 10–30 min  Last verified: 20 November 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-7038 Related CVEs: CVE-2023-28100 CVE-2023-28101 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
AlmaLinux 8 — mdadm — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — mdadm — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2022:2087 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Debian 11 — php-horde-data — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — php-horde-data — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-8518 Upstream summary: Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution. Table of contents Symptom & Impact […]

Read more
Debian 11 — ruby-omniauth — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ruby-omniauth — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-9284 CVE-2017-18076 CVE-2020-36599 Upstream summary: The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the […]

Read more
Debian 11 — revelation — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — revelation — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-2742 CVE-2012-2743 CVE-2012-3818 Upstream summary: Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy […]

Read more
Debian 11 — openpyxl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — openpyxl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-5992 Upstream summary: Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document. Table of contents Symptom & […]

Read more
CHAT