Operations

FreeBSD 13 — apache+mod_ssl+mod_snmp+mod_accel+mod_deflate+ipv — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — apache+mod_ssl+mod_snmp+mod_accel+mod_deflate+ipv — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • July 27, 2021
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 27 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

Read more
AlmaLinux 8 — spice-vdagent — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — spice-vdagent — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • July 27, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2021:1791 Related CVEs: CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2020-25653 Upstream summary: The spice-vdagent packages provide a SPICE agent for Linux guests. Security Fix(es): * spice-vdagent: possible file transfer DoS and information leak via active_xfers […]

Read more
FreeBSD 13 — py36-pyrad — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py36-pyrad — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • July 27, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 27 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pyrad — multiple vulnerabilities Related CVEs: CVE-2013-0294 CVE-2013-0342 Upstream summary: Nathaniel McCallum reports: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which […]

Read more
FreeBSD 12 — opensearch — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — opensearch — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • July 27, 2021
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 27 July 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenSearch — Log4Shell Related CVEs: CVE-2021-44228 CVE-2021-45046 CVE-2021-45105 Upstream summary: OpenSearch reports: CVE-2021-45105 for Log4j was issued after the release of OpenSearch 1.2.2. This CVE advises upgrading to Log4j 2.17.0. […]

Read more
How to Set Up Two-Factor Authentication for SSH on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Set Up Two-Factor Authentication for SSH on FreeBSD 13

  • July 27, 2021
  • FreeBSD
  • Comment off

Introduction How to Set Up Two-Factor Authentication for SSH on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf […]

Read more
Ubuntu 20.04 — coturn — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — coturn — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • July 27, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 27 July 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4690-1 Related CVEs: CVE-2020-26262 CVE-2020-4067 CVE-2020-6061 CVE-2020-6062 Upstream summary: It was discovered that coTURN allowed peers to connect and relay packets to loopback addresses in the range of 127.x.x.x. A […]

Read more
Arch Linux — nvidia-utils — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — nvidia-utils — multiple vulnerabilities (6 CVEs) — patch and remediation guide

  • July 27, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202101-19 Related CVEs: CVE-2021-1056 CVE-2021-1053 CVE-2021-1052 CVE-2021-1095 CVE-2021-1094 CVE-2021-1093 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 455.45.01-1. Fixed in: 460.32.03-1. Group: AVG-1417. Table of contents Symptom & Impact Environment […]

Read more
Ubuntu 20.04 — recutils — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — recutils — multiple vulnerabilities (13 CVEs) — patch and remediation guide

  • July 27, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 27 July 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7137-1 Related CVEs: CVE-2019-11637 CVE-2019-11638 CVE-2019-11639 CVE-2019-11640 CVE-2019-6455 CVE-2019-6456 CVE-2019-6457 CVE-2019-6458  +5 more Upstream summary: It was discovered that recutils incorrectly handled memory when parsing comments with the recparser utility. […]

Read more
Oracle Linux 8 — nodejs:14 — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — nodejs:14 — security and stability fixes — required update (ELSA-2021-0551)

  • July 26, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 26 July 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-0551 Related CVEs: CVE-2020-8277 CVE-2020-8287 CVE-2020-15366 CVE-2020-7788 CVE-2020-7774 CVE-2020-8265 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
FreeBSD 13 — py37-beaker — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py37-beaker — vulnerability — patch and remediation guide

  • July 26, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 26 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-beaker — arbitrary code execution vulnerability Related CVEs: CVE-2013-7489 Upstream summary: matheusbrat reports: The Beaker library through 1.12.1 for Python is affected by deserialization of untrusted data, which could lead […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT