Package Management

Oracle Linux 8 — grub2, mokutil, shim, and shim-unsigned-x64 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — grub2, mokutil, shim, and shim-unsigned-x64 — vulnerability — patch and remediation guide (ELSA-2022-5095)

  • July 20, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 20 July 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-5095 Related CVEs: CVE-2022-28733 CVE-2022-28735 CVE-2021-3695 CVE-2021-3697 CVE-2022-28736 CVE-2022-28737 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
How to Install pip and Manage Python Packages on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Install pip and Manage Python Packages on Debian 11

  • July 20, 2022
  • Linux
  • Comment off

Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up install pip and manage python packages on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each step […]

Read more
IBM AIX 7.3 — CVE-1999-0627 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-1999-0627 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 10–30 min  Last verified: 19 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-1999-0627, IBM PSIRT advisory page CVE: CVE-1999-0627 NVD summary: The rexd service is running, which uses weak authentication that can allow an attacker to execute commands. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE   exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of […]

Read more
IBM AIX 7.1 — CVE-2022-35721 — xss — patch and remediation guide — diagnosis and fix on IBM AIX 7.1

IBM AIX 7.1 — CVE-2022-35721 — xss — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 19 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2022-35721, IBM Support Bulletin CVE: CVE-2022-35721 NVD summary: IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web […]

Read more
AlmaLinux 8 — dlm — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — dlm — vulnerability — patch and remediation guide

  • July 19, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2021:1710 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 12 — bastillion — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — bastillion — vulnerability — patch and remediation guide

  • July 19, 2022
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 19 July 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bastillion — log4j vulnerability Related CVEs: CVE-2021-44228 Upstream summary: FreeBSD port maintainer reports: Bastillion uses log4j. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
AlmaLinux 8 — qt5-qtserialport — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — qt5-qtserialport — vulnerability — patch and remediation guide

  • July 19, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2021:4172 Related CVEs: CVE-2021-3481 Upstream summary: Qt is a software toolkit for developing applications. The following packages have been upgraded to a later upstream version: adwaita-qt (1.2.1), python-qt5 (5.15.0), qgnomeplatform (0.7.1), qt5 […]

Read more
FreeBSD 13 — apache+mod_ssl+mod_accel+mod_deflate — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — apache+mod_ssl+mod_accel+mod_deflate — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • July 19, 2022
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 19 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

Read more
FreeBSD 13 — py311-impacket — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py311-impacket — vulnerability — patch and remediation guide

  • July 19, 2022
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 19 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-impacket — multiple path traversal vulnerabilities Related CVEs: CVE-2021-31800 Upstream summary: asolino reports: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT