Operations

Debian 11 — libpodofo — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libpodofo — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • October 31, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 31 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-8981 CVE-2017-5852 CVE-2017-5853 CVE-2017-5854 CVE-2017-5855 CVE-2017-5886 CVE-2017-6840 CVE-2017-6841  +12 more Upstream summary: Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified […]

Read more
FreeBSD 13 — hdf5 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — hdf5 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • October 30, 2021
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 30 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: hdf5 — multiple vulnerabilities Related CVEs: CVE-2016-4330 CVE-2016-4331 CVE-2016-4332 CVE-2016-4333 Upstream summary: Talos Security reports: CVE-2016-4330 (TALOS-2016-0176) – HDF5 Group libhdf5 H5T_ARRAY Code Execution Vulnerability CVE-2016-4331 (TALOS-2016-0177) – HDF5 Group […]

Read more
FreeBSD 13 — pdflib-perl — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — pdflib-perl — multiple vulnerabilities (5 CVEs) — patch and remediation guide

  • October 30, 2021
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 30 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]

Read more
Oracle Linux 8 — evolution — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — evolution — security and stability fixes — required update (ELSA-2020-1600)

  • October 30, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 30 October 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-1600 Related CVEs: CVE-2018-15587 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
How to Install PHP 8.2 on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Install PHP 8.2 on FreeBSD 13

  • October 30, 2021
  • FreeBSD
  • Comment off

Introduction This guide explains how to Install PHP 8.2 on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege […]

Read more
FreeBSD 13 — xlockmore — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xlockmore — vulnerability — patch and remediation guide

  • October 30, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 30 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xlockmore — local exploit Related CVEs: CVE-2012-4524 Upstream summary: Ignatios Souvatzis of NetBSD reports: Due to an error in the dclock screensaver in xlockmore, users who explicitly use this screensaver […]

Read more
Debian 11 — ocsinventory-agent — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ocsinventory-agent — vulnerability — patch and remediation guide

  • October 30, 2021
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 30 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-0667 Upstream summary: Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a […]

Read more
Debian 11 — initramfs-tools — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — initramfs-tools — vulnerability — patch and remediation guide

  • October 30, 2021
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 30 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-4996 Upstream summary: init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this […]

Read more
Gentoo Linux — dev-python/hiredis — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — dev-python/hiredis — vulnerability — patch and remediation guide

  • October 30, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202210-32 Related CVEs: CVE-2021-32765 Upstream summary: Hiredis is vulnerable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT