Package Management

Debian 11 — aircrack-ng — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — aircrack-ng — multiple vulnerabilities (6 CVEs) — patch and remediation guide

  • December 9, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 9 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-2057 CVE-2010-1159 CVE-2014-8321 CVE-2014-8322 CVE-2014-8323 CVE-2014-8324 Upstream summary: Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets. Table […]

Read more
Alpine Linux edge — mumble — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — mumble — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • December 9, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.3.4-r0 📖 ~4 min read  •  Source: Alpine secdb entry — mumble 1.3.4-r0 Related CVEs: CVE-2021-27229 CVE-2018-20743 Upstream summary: Alpine community repository for vedge ships mumble 1.3.4-r0 which addresses CVE-2021-27229. Table of contents Symptom & Impact […]

Read more
FreeBSD 13 — tarsnap — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — tarsnap — security advisory — patch and remediation guide

  • December 9, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 9 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tarsnap — buffer overflow and local DoS Upstream summary: Colin Percival reports: 1. SECURITY FIX: When constructing paths of objects being archived, a buffer could overflow by one byte upon […]

Read more
SLES 15 — libnettle6 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libnettle6 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

  • December 9, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 9 December 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:254-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3580 CVE-2021-20305 CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 CVE-2016-6489 CVE-2018-16869 Upstream summary: A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An […]

Read more
How to Set Up Port Knocking on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Set Up Port Knocking on FreeBSD 13

  • December 9, 2021
  • FreeBSD
  • Comment off

Introduction Deploying set up port knocking on freebsd 13 on a FreeBSD 13 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard […]

Read more
AlmaLinux 8 — mailman — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — mailman — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • December 9, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2021:4916 Related CVEs: CVE-2021-44227 CVE-2021-42096 CVE-2021-42097 Upstream summary: Mailman is a program used to help manage e-mail discussion lists. Security Fix(es): * mailman: CSRF token bypass allows to perform CSRF attacks and […]

Read more
Oracle Linux 8 — postgresql:13 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — postgresql:13 — vulnerability — patch and remediation guide (ELSA-2021-2375)

  • December 9, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 9 December 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-2375 Related CVEs: CVE-2021-32027 CVE-2021-32029 CVE-2021-32028 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
FreeBSD 13 — openssl — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — openssl — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • December 9, 2021
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 9 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenSSL — Multiple vulnerabilities Related CVEs: CVE-2004-0079 CVE-2005-2969 CVE-2006-2937 CVE-2006-2938 CVE-2006-2940 CVE-2006-3738 CVE-2006-4339 CVE-2006-4343  +12 more Upstream summary: The OpenSSL project reports: Seven vulnerabilities in OpenSSL library. Highest classification Moderate. […]

Read more
FreeBSD 13 — chromium-pulse — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — chromium-pulse — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • December 9, 2021
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 9 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: chromium — multiple vulnerabilities Related CVEs: CVE-2014-0574 CVE-2014-7899 CVE-2014-7900 CVE-2014-7901 CVE-2014-7902 CVE-2014-7903 CVE-2014-7904 CVE-2014-7905  +12 more Upstream summary: Google Chrome releases reports: 40 security fixes in this release Please reference […]

Read more
Arch Linux — grafana — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — grafana — multiple vulnerabilities (7 CVEs) — patch and remediation guide

  • December 9, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202112-11 Related CVEs: CVE-2021-43815 CVE-2021-43813 CVE-2021-43798 CVE-2018-19039 CVE-2021-41244 CVE-2021-41174 CVE-2019-15043 Upstream summary: Type: directory traversal. Status: Fixed. Affected: 8.3.0-1. Fixed in: 8.3.1-1. Group: AVG-2609. Table of contents Symptom & Impact […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT