Package Management

FreeBSD 12 — advancecomp — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — advancecomp — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 November 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: advancecomp — Multiple vulnerabilities Related CVEs: CVE-2018-1056 CVE-2019-8379 CVE-2019-8383 CVE-2019-9210 CVE-2022-35014 CVE-2022-35015 CVE-2022-35016 CVE-2022-35017  +3 more Upstream summary: GitHub advisories reports: Multiple vulnerabilities found in advancecomp including: Three segmentation faults. […]

Read more
Debian 11 — pmount — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pmount — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-2192 Upstream summary: The make_lockdir_name function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/. Table […]

Read more
How to Configure RC Scripts on IBM AIX 7.3 — step-by-step IBM AIX 7.3 tutorial on Progressive Robot

How to Configure RC Scripts on IBM AIX 7.3

Introduction IBM AIX 7.3 is the latest release of IBM’s enterprise-grade UNIX operating system, running on IBM Power Systems hardware. Known for its reliability, security, and performance in mission-critical environments, AIX 7.3 introduces enhanced virtualization, security hardening, and cloud integration features. This guide covers how to configure rc scripts on IBM AIX 7.3 with practical […]

Read more
Debian 11 — php-horde-kronolith — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — php-horde-kronolith — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-6620 CVE-2013-6365 CVE-2017-16906 CVE-2017-16908 Upstream summary: Multiple cross-site scripting (XSS) vulnerabilities in the (1) tasks and (2) search views in Horde Kronolith H4 before 3.0.17 allow remote attackers […]

Read more
Debian 11 — tika — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — tika — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-4434 CVE-2016-6809 CVE-2018-11761 CVE-2018-11762 CVE-2018-1335 CVE-2018-1338 CVE-2018-1339 CVE-2018-17197  +12 more Upstream summary: Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might […]

Read more
Debian 11 — wavpack — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — wavpack — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-10169 CVE-2016-10170 CVE-2016-10171 CVE-2016-10172 CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539  +12 more Upstream summary: The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial […]

Read more
Debian 11 — exo — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — exo — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 November 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-32278 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 18.04 — ntfs-3g — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — ntfs-3g — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 November 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5711-1 Related CVEs: CVE-2022-40284 CVE-2021-46790 CVE-2022-30783 CVE-2022-30784 CVE-2022-30785 CVE-2022-30786 CVE-2022-30787 CVE-2022-30788  +4 more Upstream summary: Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A local […]

Read more
Ubuntu 22.04 — libbpf — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — libbpf — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 November 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5759-1 Related CVEs: CVE-2021-45940 CVE-2021-45941 CVE-2022-3533 CVE-2022-3534 CVE-2022-3606 Upstream summary: It was discovered that LibBPF incorrectly handled certain memory operations under certain circumstances. An attacker could possibly use this issue […]

Read more
CHAT