openSUSE Tumbleweed — dcraw — multiple vulnerabilities (9 CVEs) — patch and remediation guide

May 30, 2021
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:1277-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-19566 CVE-2018-19568 CVE-2018-5805 CVE-2018-5806 CVE-2021-3624 CVE-2017-13735 CVE-2017-14608 CVE-2018-19655 +1 more Upstream summary: A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used […]

FreeBSD 13 — mysql40-server — security advisory — patch and remediation guide

May 30, 2021
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 30 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]

FreeBSD 13 — sugarcrm — multiple vulnerabilities (3 CVEs) — patch and remediation guide

May 30, 2021
BSD
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 30 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sugarcrm — multiple vulnerabilities Related CVEs: CVE-2017-14508 CVE-2017-14509 CVE-2017-14510 Upstream summary: sugarcrm developers report: An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and […]

openSUSE Tumbleweed — xml-security — multiple vulnerabilities (2 CVEs) — patch and remediation guide

May 30, 2021
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2019-12400 CVE-2021-40690 Upstream summary: In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool […]

Ubuntu 16.04 — openjpeg — multiple vulnerabilities (6 CVEs) — patch and remediation guide

May 30, 2021
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 30 May 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5664-1 Related CVEs: CVE-2016-10506 CVE-2016-7445 CVE-2016-9112 CVE-2017-17479 CVE-2018-18088 CVE-2020-27824 Upstream summary: It was discovered that OpenJPEG did not properly handle PNM headers, resulting in a null pointer dereference. A remote […]

SLES 12 — puppet — multiple vulnerabilities (14 CVEs) — patch and remediation guide

May 30, 2021
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 30 May 2021 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3355-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-27023 CVE-2020-7942 CVE-2011-3848 CVE-2011-3872 CVE-2012-3864 CVE-2012-3865 CVE-2012-3866 CVE-2013-3567 +6 more Upstream summary: A flaw was discovered in Puppet Agent and Puppet Server that may result […]

Arch Linux — opensc — multiple vulnerabilities (9 CVEs) — patch and remediation guide

May 30, 2021
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-202011-27 Related CVEs: CVE-2020-26572 CVE-2020-26571 CVE-2020-26570 CVE-2019-6502 CVE-2019-19481 CVE-2019-19480 CVE-2019-19479 CVE-2019-15946 +1 more Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 0.20.0-3. Fixed in: 0.21.0-1. Group: AVG-1298. Table of […]

Arch Linux — haproxy — multiple vulnerabilities (3 CVEs) — patch and remediation guide

May 30, 2021
Linux
Comment off

🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read • Source: Arch ASA ASA-202004-7 Related CVEs: CVE-2020-11100 CVE-2018-20103 CVE-2018-20102 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 2.1.3-1. Fixed in: 2.1.4-1. Group: AVG-1124. Table of contents Symptom & Impact Environment & Reproduction […]

How to Set Up Windows Server 2019 with Chef

May 30, 2021
Tutorials
Comment off

How to Set Up Windows Server 2019 with Chef Chef is an open-source configuration management platform that automates the provisioning, configuration, and management of infrastructure. Chef uses Ruby-based DSL “recipes” and “cookbooks” to describe how servers should be configured. For Windows Server 2019, Chef provides full support through the Chef Infra Client agent, enabling the […]

Oracle Linux 8 — GNOME security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — GNOME security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2021-1586)

May 29, 2021
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 29 May 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-1586 Related CVEs: CVE-2020-9983 CVE-2019-13012 CVE-2020-13584 CVE-2020-9951 CVE-2020-9948 CVE-2020-13543 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Logging Monitoring

openSUSE Tumbleweed — dcraw — multiple vulnerabilities (9 CVEs) — patch and remediation guide

FreeBSD 13 — mysql40-server — security advisory — patch and remediation guide

FreeBSD 13 — sugarcrm — multiple vulnerabilities (3 CVEs) — patch and remediation guide

openSUSE Tumbleweed — xml-security — multiple vulnerabilities (2 CVEs) — patch and remediation guide

Ubuntu 16.04 — openjpeg — multiple vulnerabilities (6 CVEs) — patch and remediation guide

SLES 12 — puppet — multiple vulnerabilities (14 CVEs) — patch and remediation guide

Arch Linux — opensc — multiple vulnerabilities (9 CVEs) — patch and remediation guide

Arch Linux — haproxy — multiple vulnerabilities (3 CVEs) — patch and remediation guide

How to Set Up Windows Server 2019 with Chef

Oracle Linux 8 — GNOME security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2021-1586)

Tags