Package Management

Ubuntu 18.04 — librecad — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — librecad — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 December 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5957-1 Related CVEs: CVE-2018-19105 CVE-2021-21898 CVE-2021-21899 CVE-2021-21900 CVE-2021-45341 CVE-2021-45342 CVE-2021-45343 Upstream summary: Cody Sixteen discovered that LibreCAD incorrectly handled memory when parsing DXF files. An attacker could use this issue […]

Read more
FreeBSD 12 — mysql-connector-java — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mysql-connector-java — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 December 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2020-2752 CVE-2020-2875 CVE-2020-2922 CVE-2020-2933 CVE-2020-2934 CVE-2021-22926 CVE-2021-22931 CVE-2021-22946  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 34 new security patches, plus […]

Read more
FreeBSD 13 — netscape — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — netscape — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-0722 CVE-2004-0757  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

Read more
Debian 11 — zabbix — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — zabbix — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-6692 CVE-2006-6693 CVE-2007-0640 CVE-2007-6210 CVE-2008-1353 CVE-2009-4498 CVE-2009-4499 CVE-2009-4500  +12 more Upstream summary: Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service […]

Read more
FreeBSD 13 — py27-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py27-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Django — potential SQL injection vulnerability Related CVEs: CVE-2012-3442 CVE-2012-3443 CVE-2012-3444 CVE-2013-0305 CVE-2013-0306 CVE-2013-1443 CVE-2013-1664 CVE-2013-1665  +12 more Upstream summary: MITRE CVE reports: Django 1.11 before 1.11.29, 2.2 before 2.2.11, […]

Read more
How to Configure Blackbox Exporter on Debian 9 — step-by-step Debian 9 tutorial on Progressive Robot

How to Configure Blackbox Exporter on Debian 9

Introduction Deploying configure blackbox exporter on debian 9 on a Debian 9 Stretch machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Before you begin, […]

Read more
FreeBSD 13 — quagga-re — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — quagga-re — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: quagga — BGP OPEN denial of service vulnerability Related CVEs: CVE-2012-0249 CVE-2012-0250 CVE-2012-0255 CVE-2012-1820 Upstream summary: CERT reports: If a pre-configured BGP peer sends a specially-crafted OPEN message with a […]

Read more
FreeBSD 13 — cde — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — cde — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: x11/cde — Local privilege escalation via CDE dtsession Related CVEs: CVE-2020-2696 Upstream summary: Marco Ivaldi (marco.ivaldi () mediaservice net) reports: A buffer overflow in the CheckMonitor() function in the Common […]

Read more
Oracle Linux 8 — sqlite — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — sqlite — security and stability fixes — required update (ELSA-2020-1810)

🟡 Medium   ⏱ 10–30 min  Last verified: 4 December 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-1810 Related CVEs: CVE-2019-19924 CVE-2019-19925 CVE-2019-8457 CVE-2019-13753 CVE-2019-13752 CVE-2019-19959 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
FreeBSD 12 — libcaca — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libcaca — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 December 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libcaca — Multiple vulnerabilities Related CVEs: CVE-2018-20545 CVE-2018-20546 CVE-2018-20547 CVE-2018-20548 CVE-2018-20549 CVE-2021-30498 CVE-2021-30499 CVE-2021-3410 Upstream summary: Sam Hocevar reports: Multiple memory leaks and invalid memory accesses: CVE-2018-20545: Illegal WRITE memory […]

Read more
CHAT