Package Management

FreeBSD 13 — libXfont — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libXfont — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libXfont — permission bypass when opening files through symlinks Related CVEs: CVE-2007-5760 CVE-2007-5958 CVE-2007-6427 CVE-2007-6428 CVE-2007-6429 CVE-2008-0006 CVE-2011-2895 CVE-2013-6462  +9 more Upstream summary: the freedesktop.org project reports: A non-privileged X […]

Read more
openSUSE Tumbleweed — libmysofa1 — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libmysofa1 — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-3756 CVE-2019-10672 CVE-2019-16092 CVE-2019-16093 CVE-2019-16091 CVE-2019-16094 CVE-2019-16095 CVE-2019-20063  +7 more Upstream summary: libmysofa is vulnerable to Heap-based Buffer Overflow Table of contents Symptom & Impact […]

Read more
FreeBSD 12 — zydis — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zydis — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 October 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zydis — heap buffer overflow Related CVEs: CVE-2021-41253 Upstream summary: Zyantific reports: Zydis users of versions v3.2.0 and older that use the string functions provided in zycore in order to […]

Read more
Ubuntu 18.04 — svgpp — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — svgpp — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 October 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6178-1 Related CVEs: CVE-2019-6246 CVE-2021-44960 Upstream summary: It was discovered that in SVG++ library that the demo application incorrectly managed memory resulting in a memory access violation under certain circumstances. […]

Read more
Oracle Linux 8 — libarchive — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — libarchive — security and stability fixes — required update (ELSA-2019-3698)

🟡 Medium   ⏱ 10–30 min  Last verified: 18 October 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-3698 Related CVEs: CVE-2017-14503 CVE-2019-1000020 CVE-2019-1000019 CVE-2018-1000877 CVE-2018-1000878 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]

Read more
IBM AIX 7.2 — CVE-2021-29681 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2021-29681 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 18 October 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2021-29681, IBM Support Bulletin CVE: CVE-2021-29681 NVD summary: IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters into an HTML query. This information could be […]

Read more
AlmaLinux 8 — apiguardian — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — apiguardian — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2020:5097 Upstream summary: Eclipse is an integrated development environment (IDE). The metadata for the eclipse:rhel8 module has been updated to remove the following unused profiles: c everything To check whether you have […]

Read more
FreeBSD 12 — py37-ansible-base — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py37-ansible-base — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 October 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]

Read more
How to Set Up a Firewall with firewalld on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Set Up a Firewall with firewalld on SLES 15

Introduction This tutorial covers How to Set Up a Firewall with firewalld on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to […]

Read more
FreeBSD 13 — bastillion — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — bastillion — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bastillion — log4j vulnerability Related CVEs: CVE-2021-44228 Upstream summary: FreeBSD port maintainer reports: Bastillion uses log4j. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
CHAT