Package Management

Oracle Linux 8 — .NET 5.0 security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — .NET 5.0 security, bug fix, and — enhancement update — new behaviour and fixes

🟠 High   ⏱ 15–60 min  Last verified: 22 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-2200 Related CVEs: CVE-2022-29117 CVE-2022-23267 CVE-2022-29145 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
How to Install Netdata on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Install Netdata on FreeBSD 13

Introduction This guide explains how to Install Netdata on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege separation. […]

Read more
FreeBSD 13 — opus-tools — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — opus-tools — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vorbis-tools, opus-tools — multiple vulnerabilities Related CVEs: CVE-2014-9638 CVE-2014-9639 CVE-2015-6749 Upstream summary: Paris Zoumpouloglou reports: I discovered an integer overflow issue in oggenc, related to the number of channels in […]

Read more
Debian 11 — libgtop2 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libgtop2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-0235 Upstream summary: Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local users to cause a denial of service (crash) and possibly execute […]

Read more
Debian 11 — android-platform-frameworks-native — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — android-platform-frameworks-native — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-3875 CVE-2015-6602 CVE-2015-6609 Upstream summary: libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a […]

Read more
Debian 11 — libslirp — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libslirp — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-10756 CVE-2020-1983 CVE-2020-29129 CVE-2020-29130 CVE-2020-7039 CVE-2020-7211 CVE-2020-8608 CVE-2021-3592  +3 more Upstream summary: An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This […]

Read more
Ubuntu 16.04 — libpano13 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libpano13 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 September 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6163-1 Related CVEs: CVE-2021-20307 CVE-2021-33293 Upstream summary: It was discovered that pano13 did not properly validate the prefix provided for PTcrop's output. An attacker could use this issue to cause […]

Read more
Arch Linux — tor — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — tor — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201712-10 Related CVEs: CVE-2017-8823 CVE-2017-8822 CVE-2017-8820 CVE-2017-8819 CVE-2021-34550 CVE-2021-34549 CVE-2021-34548 CVE-2017-0377  +2 more Upstream summary: Type: multiple issues. Status: Fixed. Affected: 0.3.1.8-1. Fixed in: 0.3.1.9-1. Group: AVG-539. Table of contents […]

Read more
Ubuntu 18.04 — linux-gke-5.3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — linux-gke-5.3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 September 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5014-1 Related CVEs: CVE-2021-33909 CVE-2021-3609 https://launchpad.net/bugs/1924611 CVE-2021-29154 CVE-2021-3492 CVE-2021-3493 CVE-2020-27170 CVE-2020-27171  +12 more Upstream summary: It was discovered that the virtual file system implementation in the Linux kernel contained an […]

Read more
Oracle Linux 8 — xorg-x11-server — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — xorg-x11-server — security and stability fixes — required update (ELSA-2023-2806)

🟡 Medium   ⏱ 10–30 min  Last verified: 21 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-2806 Related CVEs: CVE-2022-46344 CVE-2022-3551 CVE-2022-46342 CVE-2023-0494 CVE-2022-46341 CVE-2022-46343 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
CHAT