Package Management

Ubuntu 18.04 — libvirt — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libvirt — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • November 29, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 29 November 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5399-1 Related CVEs: CVE-2020-25637 CVE-2021-3631 CVE-2021-3667 CVE-2021-3975 CVE-2021-4147 CVE-2022-0897 CVE-2020-10703 CVE-2020-12430  +12 more Upstream summary: It was discovered that libvirt incorrectly handled certain locking operations. A local attacker could possibly […]

Read more
Oracle Linux 9 — freerdp — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — freerdp — vulnerability — patch and remediation guide (ELSA-2023-2326)

  • November 29, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 29 November 2022 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-2326 Related CVEs: CVE-2022-39316 CVE-2022-39319 CVE-2022-39320 CVE-2022-39282 CVE-2022-41877 CVE-2022-39283 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
How to Install CodeIgniter on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Install CodeIgniter on SLES 15

Introduction This tutorial covers How to Install CodeIgniter on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper refresh && […]

Read more
IBM AIX 7.2 — CVE-2022-30608 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2022-30608 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 29 November 2022 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2022-30608, IBM Support Bulletin CVE: CVE-2022-30608 NVD summary: "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from […]

Read more
Oracle Linux 9 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide (ELSA-2023-12017)

  • November 29, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 29 November 2022 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-12017 Related CVEs: CVE-2022-42896 CVE-2022-42895 CVE-2022-4378 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
Debian 11 — jackson-databind — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — jackson-databind — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • November 29, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 29 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-15095 CVE-2017-17485 CVE-2017-7525 CVE-2018-11307 CVE-2018-12022 CVE-2018-12023 CVE-2018-14718 CVE-2018-14719  +12 more Upstream summary: A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could […]

Read more
IBM AIX 7.3 — CVE-2016-8963 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2016-8963 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 28 November 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2016-8963, IBM Support Bulletin CVE: CVE-2016-8963 NVD summary: IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user. References: www.ibm.com/support/docview.wss?uid=swg21995029   www.securityfocus.com/bid/95282   […]

Read more
Debian 11 — postfix-gld — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — postfix-gld — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • November 28, 2022
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 28 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-1099 CVE-2005-1100 Upstream summary: Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, […]

Read more
Common Problems 114889

RHEL 8 DNF Metadata Cache Corruption Causes Update Failures

  • November 28, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 5–30 min  Last verified: 28 November 2022 Affected versions: 8.6 8.7 8.8 8.9 8.10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT