chris

Common Problems 113895

RHEL 10 – dnf update fails with metadata checksum mismatch from mirror

🟠 High   ⏱ 5–30 min  Last verified: 22 January 2026 Affected versions: RHEL 10 RHEL 10.0 RHEL 10.1 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & […]

Read more
Amazon Linux 2023 — fontforge — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — fontforge — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1431 Related CVEs: CVE-2025-15270 CVE-2025-15269 CVE-2025-15275 CVE-2025-15279 CVE-2025-50949 CVE-2024-25081 CVE-2024-25082 Upstream summary: FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers […]

Read more
Alpine Linux edge — thrift — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — thrift — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.23.0-r0 📖 ~4 min read  •  Source: Alpine secdb entry — thrift 0.23.0-r0 Related CVEs: CVE-2025-48431 CVE-2026-41602 CVE-2026-41603 CVE-2026-41604 CVE-2026-41605 CVE-2026-41606 CVE-2026-41607 CVE-2026-41636  +1 more Upstream summary: Alpine community repository for vedge ships thrift 0.23.0-r0 which […]

Read more
Oracle Linux 10 — poppler — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 10

Oracle Linux 10 — poppler — vulnerability — patch and remediation guide (ELSA-2026-0128)

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2026 Affected versions: Oracle Linux 10 📖 ~4 min read  •  Source: ELSA advisory ELSA-2026-0128 Related CVEs: CVE-2025-32365 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 15 — serf — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — serf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: serf — SSL Certificate Null Byte Poisoning Related CVEs: CVE-2014-3504 Upstream summary: serf Development list reports: Serf provides APIs to retrieve information about a certificate. These APIs return the information […]

Read more
FreeBSD 15 — mutt-ng — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — mutt-ng — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mutt — Remote Buffer Overflow Vulnerability Upstream summary: SecurityFocus reports: Mutt is prone to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied […]

Read more
FreeBSD 15 — fwbuilder — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — fwbuilder — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fwbuilder — security issue in temporary file handling Related CVEs: CVE-2009-4664 Upstream summary: Firewall Builder release notes reports: Vadim Kurland ([email protected]) reports: Fwbuilder and libfwbuilder 3.0.4 through to 3.0.6 generate […]

Read more
FreeBSD 15 — hsftp — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — hsftp — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: hsftp format string vulnerabilities Upstream summary: Ulf Härnhammar discovered a format string bug in hsftp's file listing code may allow a malicious server to cause arbitrary code execution by the […]

Read more
Rocky Linux 9 — expat — vulnerability — patch and remediation guide — diagnosis and fix on Rocky Linux 9

Rocky Linux 9 — expat — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read  •  Source: Rocky Linux RXSA RLSA-2025:22175 Related CVEs: CVE-2025-59375 Upstream summary: Expat is a C library for parsing XML documents. Security Fix(es): * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations […]

Read more
FreeBSD 14 — php84-composer — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — php84-composer — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 January 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PHP Composer — Multiple vulnerabilities Related CVEs: CVE-2026-40176 CVE-2026-40261 Upstream summary: Composer project reports: Fixed command injection via malicious Perforce reference (GHSA-gqw4-4w2p-838q / CVE-2026-40261) Fixed command injection via malicious Perforce […]

Read more
CHAT