2022 - Page 185 of 828

Debian 11 — kcron — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — kcron — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-24986 Upstream summary: KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be […]

Read more
Ubuntu 18.04 — ecdsautils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — ecdsautils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 October 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6239-1 Related CVEs: CVE-2022-24884 Upstream summary: It was discovered that ECDSA Util did not properly verify certain signature values. An attacker could possibly use this issue to bypass signature verification. […]

Read more
Oracle Linux 9 — libtirpc — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — libtirpc — vulnerability — patch and remediation guide (ELSA-2022-8400)

🟡 Medium   ⏱ 10–30 min  Last verified: 11 October 2022 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-8400 Related CVEs: CVE-2021-46828 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
IBM AIX 7.1 — CVE-2022-35717 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.1

IBM AIX 7.1 — CVE-2022-35717 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 11 October 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2022-35717, IBM Support Bulletin CVE: CVE-2022-35717 NVD summary: "IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. […]

Read more
IBM AIX 7.3 — CVE-1999-0089 — buffer overflow — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-1999-0089 — buffer overflow — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 10 October 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-1999-0089, IBM PSIRT advisory page CVE: CVE-1999-0089 NVD summary: Buffer overflow in AIX libDtSvc library can allow local users to gain root access. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE   exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom & […]

Read more
FreeBSD 13 — postgresql96-client — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — postgresql96-client — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL vulnerabilities Related CVEs: CVE-2016-5423 CVE-2016-5424 Upstream summary: The PostgreSQL project reports: Security Fixes nested CASE expressions + database and role names with embedded special characters CVE-2017-7484: selectivity estimators bypass […]

Read more
Common Problems 120462

Debian 11 – APT Lock Contention Blocks Security Updates – Safe Recovery

🟠 High   ⏱ 5–30 min  Last verified: 10 October 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
openSUSE Tumbleweed — enlightenment — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — enlightenment — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:10153-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-37706 Upstream summary: enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles […]

Read more
FreeBSD 13 — py36-ansible-base — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py36-ansible-base — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]

Read more
CHAT