Package Management

Debian 11 — apache2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — apache2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • December 2, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 2 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2001-1534 CVE-2002-0392 CVE-2002-0654 CVE-2002-0661 CVE-2002-0840 CVE-2002-1156 CVE-2002-1592 CVE-2002-1593  +12 more Upstream summary: mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, […]

Read more
openSUSE Tumbleweed — libZXing1 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libZXing1 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • December 2, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:0157-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-28021 CVE-2021-42716 CVE-2021-42715 Upstream summary: Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file. Table of contents Symptom […]

Read more
FreeBSD 13 — cryptopp — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — cryptopp — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • December 1, 2021
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 1 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cryptopp — ElGamal implementation allows plaintext recovery Related CVEs: CVE-2015-2141 CVE-2016-3995 CVE-2016-7420 CVE-2021-40530 Upstream summary: Crypto++ 8.6 release notes reports: The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery […]

Read more
FreeBSD 13 — tcpslice — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — tcpslice — vulnerability — patch and remediation guide

  • December 1, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 1 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tcpslice — heap-based use-after-free in extract_slice() Related CVEs: CVE-2021-41043 Upstream summary: The Tcpdump Group reports: heap-based use-after-free in extract_slice() Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 13 — sieve-connect — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — sieve-connect — security advisory — patch and remediation guide

  • December 1, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 1 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sieve-connect — TLS hostname verification was not occurring Upstream summary: sieve-connect developer Phil Pennock reports: sieve-connect was not actually verifying TLS certificate identities matched the expected hostname. Table of contents […]

Read more
How to Set Up a LAMP Stack on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Set Up a LAMP Stack on FreeBSD 13

  • December 1, 2021
  • FreeBSD
  • Comment off

Introduction How to Set Up a LAMP Stack on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for […]

Read more
Oracle Linux 8 — cyrus-sasl security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — cyrus-sasl security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-4497)

  • December 1, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 1 December 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-4497 Related CVEs: CVE-2019-19906 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 13 — ghostscript-gpl-nox — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ghostscript-gpl-nox — vulnerability — patch and remediation guide

  • December 1, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 1 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — zseticcspace() function buffer overflow vulnerability Related CVEs: CVE-2008-0411 Upstream summary: Chris Evans from the Google Security Team reports: Severity: parsing of evil PostScript file will result in arbitrary […]

Read more
AlmaLinux 8 — radvd — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — radvd — vulnerability — patch and remediation guide

  • December 1, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2020:4640 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Debian 11 — xml-security-c — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — xml-security-c — multiple vulnerabilities (7 CVEs) — patch and remediation guide

  • December 1, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 1 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-0217 CVE-2011-2516 CVE-2013-2153 CVE-2013-2154 CVE-2013-2155 CVE-2013-2156 CVE-2013-2210 Upstream summary: The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT