Package Management

Debian 11 — slirp — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — slirp — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-7039 CVE-2020-8608 Upstream summary: tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause […]

Read more
How to Set Up a CI/CD Pipeline with Drone CI on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Set Up a CI/CD Pipeline with Drone CI on FreeBSD 13

Introduction How to Set Up a CI/CD Pipeline with Drone CI on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service […]

Read more
Debian 11 — libxml-dt-perl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libxml-dt-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-5260 Upstream summary: The (1) mkxmltype and (2) mkdtskel scripts in XML-DT before 0.64 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_xml_##### […]

Read more
Debian 11 — edk2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — edk2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-12178 CVE-2018-12179 CVE-2018-12180 CVE-2018-12181 CVE-2018-12183 CVE-2019-0160 CVE-2019-0161 CVE-2019-11098  +12 more Upstream summary: Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation […]

Read more
Gentoo Linux — dev-db/mariadb — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — dev-db/mariadb — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202011-14 Related CVEs: CVE-2020-15180 CVE-2019-2938 CVE-2019-2974 CVE-2021-46661 CVE-2021-46662 CVE-2021-46663 CVE-2021-46664 CVE-2021-46665  +12 more Upstream summary: It was discovered that MariaDB did not properly validate the content of a packet received from a […]

Read more
Oracle Linux 8 — ruby:2.5 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — ruby:2.5 — vulnerability — patch and remediation guide (ELSA-2022-5779)

🟡 Medium   ⏱ 10–30 min  Last verified: 16 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-5779 Related CVEs: CVE-2021-41819 CVE-2021-41817 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
FreeBSD 13 — py310-pyrad — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py310-pyrad — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pyrad — multiple vulnerabilities Related CVEs: CVE-2013-0294 CVE-2013-0342 Upstream summary: Nathaniel McCallum reports: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which […]

Read more
FreeBSD 13 — firebird21-server — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — firebird21-server — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firebird — Remote Stack Buffer Overflow Related CVEs: CVE-2013-2492 Upstream summary: Firebird Project reports: The FirebirdSQL server is vulnerable to a stack buffer overflow that can be triggered when an […]

Read more
FreeBSD 12 — mailman-postfix-with-htdig — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mailman-postfix-with-htdig — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 September 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mailman < 2.1.38 — CSRF vulnerability of list mod or member against list admin page Related CVEs: CVE-2021-43331 CVE-2021-43332 CVE-2021-44227 Upstream summary: Mark Sapiro reports: A list moderator or list […]

Read more
Oracle Linux 8 — httpd:2.4 — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — httpd:2.4 — security and stability fixes — required update (ELSA-2019-3436)

🟡 Medium   ⏱ 10–30 min  Last verified: 15 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-3436 Related CVEs: CVE-2019-0220 CVE-2019-0217 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
CHAT