Package Management

FreeBSD 12 — py35-yaml — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py35-yaml — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • March 6, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 6 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-yaml — FullLoader (still) exploitable for arbitrary command execution Related CVEs: CVE-2017-18342 CVE-2020-1747 Upstream summary: Riccardo Schirone (https://github.com/ret2libc) reports: In FullLoader python/object/new constructor, implemented by construct_python_object_apply, has support for setting […]

Read more
Ubuntu 18.04 — shiro — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — shiro — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • March 6, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 6 March 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6352-1 Related CVEs: CVE-2020-13933 CVE-2020-17510 CVE-2020-11989 CVE-2020-1957 Upstream summary: It was discovered that Apache Shiro incorrectly handled certain HTTP requests. A remote attacker could possibly use this issue to bypass […]

Read more
How to Install Kubernetes with kubeadm on Oracle Linux 8 — step-by-step Oracle Linux 8 tutorial on Progressive Robot

How to Install Kubernetes with kubeadm on Oracle Linux 8

Introduction How to Install Kubernetes with kubeadm on Oracle Linux 8 on Oracle Linux 8 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting configuration […]

Read more
Oracle Linux 8 — mailman:2.1 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — mailman:2.1 — vulnerability — patch and remediation guide (ELSA-2021-1751)

  • March 6, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 6 March 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-1751 Related CVEs: CVE-2020-12108 CVE-2020-15011 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Amazon Linux 2 — kernel-livepatch-4.14.225-168.357 — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-4.14.225-168.357 — vulnerability — patch and remediation guide

  • March 6, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2021-050 Related CVEs: CVE-2021-33034 Upstream summary: A use-after-free flaw was found in hci_send_acl in the bluetooth host controller interface (HCI) in Linux kernel, where a local attacker with an access […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel-container — vulnerability — patch and remediation guide (ELSA-2021-9086)

  • March 6, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 6 March 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-9086 Related CVEs: CVE-2021-26932 CVE-2021-26930 CVE-2020-0431 CVE-2020-16120 CVE-2021-3347 CVE-2021-3348 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Oracle Linux 8 — e2fsprogs — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — e2fsprogs — security and stability fixes — required update (ELSA-2022-7720)

  • March 5, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 5 March 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-7720 Related CVEs: CVE-2022-1304 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Common Problems 118617

Ubuntu 16.04 LTS snapd Refresh Fails with Certificate Errors

  • March 5, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 5–30 min  Last verified: 5 March 2021 Affected versions: 16.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
FreeBSD 12 — syncthing — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — syncthing — vulnerability — patch and remediation guide

  • March 5, 2021
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 5 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: syncthing — crash due to malformed relay protocol message Related CVEs: CVE-2021-21404 Upstream summary: syncthing developers report: syncthing can be caused to crash and exit if sent a malformed relay […]

Read more
openSUSE Tumbleweed — python36-rtslib-fb — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — python36-rtslib-fb — vulnerability — patch and remediation guide

  • March 5, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2020:1156-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14019 Upstream summary: Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved. […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT