Package Management

Gentoo Linux — net-dns/bind — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — net-dns/bind — multiple vulnerabilities (14 CVEs) — patch and remediation guide

  • January 24, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202008-19 Related CVEs: CVE-2020-8620 CVE-2020-8621 CVE-2020-8622 CVE-2020-8623 CVE-2020-8624 CVE-2021-25219 CVE-2021-25220 CVE-2022-0396  +6 more Upstream summary: Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Table […]

Read more
How to Set Up OpenVPN on SLES 12 — step-by-step SUSE Linux Enterprise 12 tutorial on Progressive Robot

How to Set Up OpenVPN on SLES 12

Introduction This tutorial covers How to Set Up OpenVPN on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper refresh […]

Read more
FreeBSD 13 — subversion-perl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — subversion-perl — vulnerability — patch and remediation guide

  • January 24, 2022
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: subversion — WebDAV fails to protect metadata Related CVEs: CVE-2004-0749 Upstream summary: In some situations, subversion metadata may be unexpectedly disclosed via WebDAV. A subversion advisory states: mod_authz_svn, the Apache […]

Read more
Debian 11 — krusader — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — krusader — vulnerability — patch and remediation guide

  • January 24, 2022
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-3856 Upstream summary: The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords […]

Read more
Debian 11 — eldav — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — eldav — vulnerability — patch and remediation guide

  • January 24, 2022
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0438 Upstream summary: eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files. […]

Read more
Debian 11 — fuzz — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — fuzz — vulnerability — patch and remediation guide

  • January 24, 2022
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0261 Upstream summary: fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges. Table of contents Symptom & Impact Environment & […]

Read more
openSUSE Tumbleweed — libdxfrw1 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libdxfrw1 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • January 24, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:0067-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-21898 CVE-2021-21899 CVE-2021-21900 Upstream summary: A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to […]

Read more
Debian 11 — libxxf86dga — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libxxf86dga — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • January 24, 2022
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1991 CVE-2013-2000 Upstream summary: Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors […]

Read more
Ubuntu 18.04 — libsepol — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libsepol — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • January 24, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 24 January 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5391-1 Related CVEs: CVE-2021-36084 CVE-2021-36085 CVE-2021-36086 CVE-2021-36087 Upstream summary: Nicolas Iooss discovered that libsepol incorrectly handled memory when handling policies. An attacker could possibly use this issue to cause a […]

Read more
How to Configure PostgreSQL High Availability with Patroni on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Configure PostgreSQL High Availability with Patroni on SLES 15

Introduction This tutorial covers How to Configure PostgreSQL High Availability with Patroni on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT