Package Management

Debian 11 — libnet-ssleay-perl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libnet-ssleay-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-0106 Upstream summary: SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users […]

Read more
Debian 11 — ht — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ht — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-1545 CVE-2005-1546 CVE-2016-2226 CVE-2016-4487 CVE-2016-4488 CVE-2016-4489 CVE-2016-4490 CVE-2016-4492  +2 more Upstream summary: Integer overflow in the ELF parser in HT Editor before 0.8.0 allows remote attackers to execute […]

Read more
Ubuntu 20.04 — knot-resolver — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — knot-resolver — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 November 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7047-1 Related CVEs: CVE-2019-10190 CVE-2019-10191 CVE-2019-19331 CVE-2020-12667 CVE-2022-40188 Upstream summary: Vladimír Čunát discovered that Knot Resolver incorrectly handled input during DNSSEC validation. A remote attacker could possibly use this issue […]

Read more
SLES 15 — rust1.62 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — rust1.62 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 November 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2423-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-36113 CVE-2022-36114 Upstream summary: Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in […]

Read more
How to Install Jenkins on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Install Jenkins on SLES 12

Introduction This tutorial covers How to Install Jenkins on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Add Jenkins Repository zypper addrepo -f https://pkg.jenkins.io/opensuse-stable/ jenkins zypper –gpg-auto-import-keys […]

Read more
Oracle Linux 9 — LibRaw — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — LibRaw — vulnerability — patch and remediation guide (ELSA-2023-6343)

🟡 Medium   ⏱ 10–30 min  Last verified: 12 November 2022 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-6343 Related CVEs: CVE-2021-32142 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 8 — microcode_ctl — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — microcode_ctl — vulnerability — patch and remediation guide (ELSA-2022-9508)

🟠 High   ⏱ 15–60 min  Last verified: 12 November 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-9508 Related CVEs: CVE-2022-21123 CVE-2022-21127 CVE-2022-21125 CVE-2022-21166 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more
SLES 12 — syslog-ng — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — syslog-ng — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 November 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0319-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-38725 CVE-2020-8019 CVE-2011-0343 CVE-2011-1951 Upstream summary: An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause […]

Read more
Amazon Linux 2 — libksba — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — libksba — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2041 Related CVEs: CVE-2022-47629 CVE-2022-3515 Upstream summary: Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. (CVE-2022-47629) Table of contents Symptom & Impact Environment […]

Read more
CHAT