Package Management

Ubuntu 18.04 — freeradius — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — freeradius — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 August 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5785-1 Related CVEs: CVE-2019-17185 CVE-2022-41860 CVE-2022-41861 CVE-2019-11234 CVE-2019-11235 Upstream summary: It was discovered that FreeRADIUS incorrectly handled multiple EAP-pwd handshakes. An attacker could possibly use this issue to cause a […]

Read more
How to Install GitLab Runner on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Install GitLab Runner on Debian 9

Introduction How to Install GitLab Runner on Debian 9 is a fundamental operation for any administrator maintaining a Debian 9 Stretch server. Debian 9 Stretch ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian 9. This […]

Read more
Oracle Linux 8 — varnish:6 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — varnish:6 — vulnerability — patch and remediation guide (ELSA-2022-0418)

🟠 High   ⏱ 15–60 min  Last verified: 23 August 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-0418 Related CVEs: CVE-2022-23959 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
AlmaLinux 8 — doxygen — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — doxygen — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:1314 Related CVEs: CVE-2020-11023 Upstream summary: Doxygen can generate an online class browser (in HTML) and/or a reference manual (in LaTeX) from a set of documented source files. The documentation is extracted […]

Read more
FreeBSD 13 — libdmx — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libdmx — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xorg — protocol handling issues in X Window System client libraries Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: freedesktop.org reports: Ilja van Sprundel, […]

Read more
FreeBSD 13 — ru-wordpress — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ru-wordpress — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wordpress — multiple issues Related CVEs: CVE-2013-0235 CVE-2013-0236 CVE-2013-0237 CVE-2013-2199 CVE-2013-2200 CVE-2013-2201 CVE-2013-2202 CVE-2013-2203  +12 more Upstream summary: wordpress developers reports: This security and maintenance release features 1 bug fix […]

Read more
How to Secure the MariaDB Installation on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Secure the MariaDB Installation on Debian 11

Introduction How to Secure the MariaDB Installation on Debian 11 is a fundamental operation for any administrator maintaining a Debian 11 Bullseye server. Debian 11 Bullseye ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian 11. […]

Read more
Oracle Linux 8 — microcode_ctl security, — bug-fix and enhancement update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — microcode_ctl security, — bug-fix and enhancement update (ELSA-2021-3027)

🟠 High   ⏱ 15–60 min  Last verified: 22 August 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-3027 Related CVEs: CVE-2020-0543 CVE-2020-8698 CVE-2020-8695 CVE-2020-24489 CVE-2020-0549 CVE-2020-24512 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
FreeBSD 13 — gitolite — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — gitolite — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gitolite — path traversal vulnerability Related CVEs: CVE-2012-4506 Upstream summary: Sitaram Chamarty reports: I'm sorry to say there is a potential path traversal vulnerability in v3. Thanks to Stephane Chazelas […]

Read more
CHAT