Package Management

FreeBSD 13 — sqlite — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — sqlite — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • January 11, 2022
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 11 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: SQLite < 3.50.3 — CWE-190 Integer Overflow or Wraparound in FTS5 module Related CVEs: CVE-2015-3414 CVE-2015-3415 CVE-2015-3416 CVE-2016-6153 CVE-2017-10989 CVE-2018-8740 CVE-2019-5018 CVE-2020-11655  +12 more Upstream summary: https://github.com/google/security-research/security/advisories/GHSA-v2c8-vqqp-hv3g reports: An integer […]

Read more
Debian 11 — super — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — super — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • January 11, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 11 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-0817 CVE-2004-0579 CVE-2011-2776 CVE-2014-0470 Upstream summary: Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argument. Table of […]

Read more
Debian 11 — net-snmp — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — net-snmp — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • January 11, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 11 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-1170 CVE-2003-0935 CVE-2005-2177 CVE-2005-4837 CVE-2007-5846 CVE-2008-0960 CVE-2008-2292 CVE-2008-4309  +12 more Upstream summary: The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 […]

Read more
Oracle Linux 8 — thunderbird — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — thunderbird — vulnerability — patch and remediation guide (ELSA-2021-0657)

  • January 11, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 11 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-0657 Related CVEs: CVE-2021-23978 CVE-2021-23973 CVE-2021-23968 CVE-2021-23969 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more
Amazon Linux 2 — flac — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — flac — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • January 11, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2283 Related CVEs: CVE-2020-22219 CVE-2021-0561 Upstream summary: Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder. […]

Read more
IBM AIX 7.3 — CVE-2021-29691 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2021-29691 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 11 January 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2021-29691, IBM Support Bulletin CVE: CVE-2021-29691 NVD summary: IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound […]

Read more
Alpine Linux edge — wavpack — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — wavpack — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • January 11, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 5.5.0-r0 📖 ~4 min read  •  Source: Alpine secdb entry — wavpack 5.5.0-r0 Related CVEs: CVE-2021-44269 CVE-2020-35738 CVE-2019-1010319 CVE-2019-1010317 CVE-2019-1010315 CVE-2019-11498 CVE-2018-19840 CVE-2018-19841  +12 more Upstream summary: Alpine community repository for vedge ships wavpack 5.5.0-r0 which […]

Read more
FreeBSD 13 — libXi — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libXi — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • January 11, 2022
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 11 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: X.org libraries — multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered […]

Read more
Debian 11 — subversion — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — subversion — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • January 11, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 11 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0397 CVE-2004-0413 CVE-2004-0749 CVE-2004-1438 CVE-2006-1564 CVE-2007-2448 CVE-2009-2411 CVE-2010-3315  +12 more Upstream summary: Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT