Package Management

Debian 11 — btrbk — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — btrbk — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-38173 Upstream summary: Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys. Table of contents Symptom & […]

Read more
FreeBSD 13 — mysql57-client — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — mysql57-client — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2016-3492 CVE-2016-5616 CVE-2016-5617 CVE-2016-5624 CVE-2016-5625 CVE-2016-5626 CVE-2016-5629 CVE-2016-6662  +9 more Upstream summary: Oracle reports: This Critical Patch Update contains 34 new security patches for […]

Read more
Debian 11 — libmikmod — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libmikmod — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-6720 CVE-2009-0179 CVE-2009-3995 CVE-2009-3996 CVE-2010-2546 CVE-2010-2971 Upstream summary: libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the […]

Read more
How to Install CockroachDB on CentOS Stream 9 — step-by-step CentOS Stream 9 tutorial on Progressive Robot

How to Install CockroachDB on CentOS Stream 9

Introduction How to Install CockroachDB on CentOS Stream 9 on CentOS Stream 9 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting configuration is reproducible […]

Read more
Debian 11 — firmware-nonfree — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — firmware-nonfree — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-0801 CVE-2017-0561 CVE-2017-13077 CVE-2017-13078 CVE-2017-13079 CVE-2017-13080 CVE-2017-13081 CVE-2017-9417  +12 more Upstream summary: The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, […]

Read more
Debian 11 — ruby-image-processing — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ruby-image-processing — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-24720 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
SLES 15 — ruby2.5-rubygem-loofah — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — ruby2.5-rubygem-loofah — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 May 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:1657-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-23514 CVE-2022-23516 CVE-2022-23515 CVE-2019-15587 Upstream summary: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah […]

Read more
SLES 15 — python3-future — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python3-future — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 May 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:0076-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40899 Upstream summary: An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie […]

Read more
SLES 15 — python3-setuptools — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python3-setuptools — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 May 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:169-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40897 Upstream summary: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package […]

Read more
How to Secure MySQL on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Secure MySQL on FreeBSD 12

Introduction Deploying secure mysql on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base + […]

Read more
CHAT