Package Management

Debian 11 — zeromq3 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — zeromq3 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

  • August 31, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 31 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-7202 CVE-2014-7203 CVE-2014-9721 CVE-2019-13132 CVE-2019-6250 CVE-2020-15166 CVE-2021-20234 CVE-2021-20235  +2 more Upstream summary: stream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via […]

Read more
How to Install Vault for Secrets Management on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Install Vault for Secrets Management on FreeBSD 13 (FREEBSD-13-2)

  • August 31, 2021
  • FreeBSD
  • Comment off

Introduction FreeBSD 13 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up install vault for secrets management on freebsd 13 on FreeBSD 13 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any […]

Read more
Debian 11 — netcdf — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — netcdf — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • August 31, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 31 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-20005 CVE-2019-20006 CVE-2019-20007 CVE-2019-20198 CVE-2019-20199 CVE-2019-20200 CVE-2019-20201 CVE-2019-20202  +12 more Upstream summary: An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted […]

Read more
Debian 11 — notmuch — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — notmuch — vulnerability — patch and remediation guide

  • August 31, 2021
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 31 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-1103 Upstream summary: emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files via crafted MML tags, which are not […]

Read more
Oracle Linux 8 — gstreamer1-plugins-good — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — gstreamer1-plugins-good — vulnerability — patch and remediation guide (ELSA-2022-7618)

  • August 31, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 31 August 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-7618 Related CVEs: CVE-2021-3497 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Gentoo Linux — app-text/gocr — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — app-text/gocr — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • August 31, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202401-28 Related CVEs: CVE-2021-33479 CVE-2021-33480 CVE-2021-33481 Upstream summary: Multiple vulnerabilities have been discovered in GOCR. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment & […]

Read more
Oracle Linux 8 — p11-kit security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — p11-kit security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2021-1609)

  • August 30, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 30 August 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-1609 Related CVEs: CVE-2020-29362 CVE-2020-29363 CVE-2020-29361 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
FreeBSD 13 — py27-buildbot — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py27-buildbot — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • August 30, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: buildbot — OAuth Authentication Vulnerability Related CVEs: CVE-2019-12300 CVE-2019-7313 Upstream summary: Buildbot accepted user-submitted authorization token from OAuth and used it to authenticate user. The vulnerability can lead to malicious […]

Read more
openSUSE Tumbleweed — wavpack — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — wavpack — multiple vulnerabilities (12 CVEs) — patch and remediation guide

  • August 30, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:0153-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-6767 CVE-2020-35738 CVE-2021-44269 CVE-2018-7253 CVE-2019-1010315 CVE-2019-1010317 CVE-2019-1010319 CVE-2018-19840  +4 more Upstream summary: A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack […]

Read more
Debian 11 — libcgi-session-perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libcgi-session-perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • August 30, 2021
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-1279 CVE-2006-1280 Upstream summary: CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by (1) Driver::File, (2) Driver::db_file, and possibly […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT