Package Management

IBM AIX 7.1 — CVE-2021-20562 — xss — patch and remediation guide — diagnosis and fix on IBM AIX 7.1

IBM AIX 7.1 — CVE-2021-20562 — xss — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 14 January 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2021-20562, IBM Support Bulletin CVE: CVE-2021-20562 NVD summary: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary […]

Read more
Oracle Linux 8 — .NET Core 3.1 security and bugfix update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — .NET Core 3.1 security and bugfix update (ELSA-2022-0827)

🟠 High   ⏱ 15–60 min  Last verified: 14 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-0827 Related CVEs: CVE-2022-24512 CVE-2020-8927 CVE-2022-24464 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
FreeBSD 13 — ja-trac — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ja-trac — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: trac — potential DOS vulnerability Related CVEs: CVE-2005-3980 CVE-2005-4065 CVE-2005-4305 Upstream summary: Trac development team reports: 0.11.2 is a new stable maintenance release. It contains several security fixes and everyone […]

Read more
How to Configure Apache with mod_pagespeed on CentOS Stream 9 — step-by-step CentOS Stream 9 tutorial on Progressive Robot

How to Configure Apache with mod_pagespeed on CentOS Stream 9

Introduction Setting up configure apache with mod_pagespeed on centos stream 9 on a CentOS Stream 9 server is a common task for system administrators, DevOps engineers, and site reliability engineers. This guide explains how to Configure Apache with mod_pagespeed on CentOS Stream 9, with all the commands you need, the SELinux and firewalld considerations to […]

Read more
FreeBSD 13 — socat — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — socat — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: socat — diffie hellman parameter was not prime Related CVEs: CVE-2012-0219 CVE-2013-3571 CVE-2014-0019 Upstream summary: socat reports: In the OpenSSL address implementation the hard coded 1024 bit DH p parameter […]

Read more
FreeBSD 13 — libbrotli — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libbrotli — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: brotli — buffer overflow Related CVEs: CVE-2016-1624 CVE-2016-1968 Upstream summary: Google Chrome Releases reports: [583607] High CVE-2016-1624: Buffer overflow in Brotli. Credit to lukezli. Mozilla Foundation reports: Security researcher Luke […]

Read more
Debian 11 — libthai — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libthai — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-4012 Upstream summary: Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to […]

Read more
How to Install InfluxDB and Telegraf on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Install InfluxDB and Telegraf on FreeBSD 13

Introduction FreeBSD 13 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up install influxdb and telegraf on freebsd 13 on FreeBSD 13 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux […]

Read more
Debian 11 — nd — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — nd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0014 Upstream summary: Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings. Table of […]

Read more
Debian 11 — igraph — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — igraph — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-20349 Upstream summary: The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (application crash) […]

Read more
CHAT