Package Management

Debian 11 — ocsinventory-server — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ocsinventory-server — multiple vulnerabilities (19 CVEs) — patch and remediation guide

  • September 3, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 3 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-1443 CVE-2009-1769 CVE-2009-2166 CVE-2009-3040 CVE-2009-3042 CVE-2010-1594 CVE-2010-1595 CVE-2010-1733  +11 more Upstream summary: Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact […]

Read more
Debian 11 — colord — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — colord — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • September 3, 2021
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 3 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-4349 CVE-2021-42523 Upstream summary: Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide (ELSA-2021-9057)

  • September 3, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 3 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-9057 Related CVEs: CVE-2021-26932 CVE-2021-26930 CVE-2021-26931 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
Debian 10 — xen — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — xen — multiple vulnerabilities (7 CVEs) — patch and remediation guide

  • September 3, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 3 September 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-17349 CVE-2020-11739 CVE-2020-25595 CVE-2020-27670 CVE-2020-29479 CVE-2021-0089 CVE-2021-26933 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]

Read more
Amazon Linux 2 — gupnp — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — gupnp — vulnerability — patch and remediation guide

  • September 3, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2021-1673 Related CVEs: CVE-2021-33516 Upstream summary: A flaw was found in gupnp. DNS rebinding can occur when a victim's browser is used by a remote web server to trigger actions […]

Read more
Oracle Linux 8 — rpm security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — rpm security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2021-4489)

  • September 2, 2021
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-4489 Related CVEs: CVE-2021-20266 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 13 — php71-mbstring — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php71-mbstring — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • September 2, 2021
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 2 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: oniguruma — multiple vulnerabilities Related CVEs: CVE-2017-9224 CVE-2017-9226 CVE-2017-9227 CVE-2017-9228 Upstream summary: the PHP project reports: A stack out-of-bounds read occurs in match_at() during regular expression searching. A logical error […]

Read more
FreeBSD 13 — kibana — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — kibana — vulnerability — patch and remediation guide

  • September 2, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kibana4 — XSS vulnerability Related CVEs: CVE-2015-8131 Upstream summary: Elastic reports: Fixes XSS vulnerability (CVE pending) – Thanks to Vladimir Ivanov for responsibly reporting. Table of contents Symptom & Impact […]

Read more
How to Use Podman Compose on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Use Podman Compose on SLES 15

Introduction This tutorial covers How to Use Podman Compose on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Step 1 — Install Podman zypper install -y podman Step 2 — […]

Read more
FreeBSD 13 — junkbuster-zlib — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — junkbuster-zlib — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • September 2, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: junkbuster — heap corruption vulnerability and configuration modification vulnerability Related CVEs: CVE-2005-1108 CVE-2005-1109 Upstream summary: A Debian advisory reports: James Ranson discovered that an attacker can modify the referrer setting […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT