Package Management

AlmaLinux 8 — baobab — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — baobab — multiple vulnerabilities (5 CVEs) — patch and remediation guide

  • April 4, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2020:1766 Related CVEs: CVE-2018-20337 CVE-2019-12447 CVE-2019-12448 CVE-2019-12449 CVE-2019-3825 Upstream summary: GNOME is the default desktop environment of AlmaLinux. Security Fix(es): * LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337) […]

Read more
How to Configure LVM on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Configure LVM on SLES 12

Introduction This tutorial covers How to Configure LVM on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Install LVM zypper install -y lvm2 Step 2 — Create […]

Read more
Debian 11 — apcupsd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — apcupsd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • April 4, 2022
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0098 CVE-2003-0099 Upstream summary: Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request […]

Read more
Debian 11 — petris — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — petris — vulnerability — patch and remediation guide

  • April 4, 2022
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-3540 Upstream summary: Buffer overflow in petris before 1.0.1 allows remote attackers to execute arbitrary code via unspecified attack vectors. Table of contents Symptom & Impact Environment & […]

Read more
Debian 11 — arc — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — arc — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • April 4, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 4 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-2945 CVE-2005-2992 CVE-2015-9275 Upstream summary: arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) […]

Read more
Debian 11 — rsync — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — rsync — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • April 4, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 4 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0962 CVE-2004-0426 CVE-2004-0792 CVE-2004-2093 CVE-2006-2083 CVE-2007-4091 CVE-2007-6199 CVE-2007-6200  +12 more Upstream summary: Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to […]

Read more
How to Set Up Riemann Event Stream Processor on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Set Up Riemann Event Stream Processor on Debian 9

  • April 4, 2022
  • Linux
  • Comment off

Introduction This guide explains how to Set Up Riemann Event Stream Processor on Debian 9 on Debian 9 Stretch. Debian Stretch uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 9 install […]

Read more
Ubuntu 20.04 — linuxptp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — linuxptp — vulnerability — patch and remediation guide

  • April 4, 2022
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6097-1 Related CVEs: CVE-2021-3570 Upstream summary: It was discovered that Linux PTP did not properly perform a length check when forwarding a PTP message between ports. A remote attacker could […]

Read more
Alpine Linux edge — py3-mako — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — py3-mako — vulnerability — patch and remediation guide

  • April 4, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.2.2-r0 📖 ~4 min read  •  Source: Alpine secdb entry — py3-mako 1.2.2-r0 Related CVEs: CVE-2022-40023 Upstream summary: Alpine main repository for vedge ships py3-mako 1.2.2-r0 which addresses CVE-2022-40023. Table of contents Symptom & Impact Environment […]

Read more
SLES 15 — ppp — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — ppp — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • April 4, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 4 April 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:0489-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8597 CVE-2022-4603 CVE-2014-3158 CVE-2015-3310 Upstream summary: eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT