Linux

Ubuntu 18.04 — docker-registry — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — docker-registry — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6336-1 Related CVEs: CVE-2017-11468 CVE-2023-2253 Upstream summary: It was discovered that Docker Registry incorrectly handled certain crafted input, A remote attacker could possibly use this issue to cause a denial […]

Read more
Ubuntu 16.04 — h2database — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — h2database — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6834-1 Related CVEs: CVE-2021-42392 CVE-2022-23221 Upstream summary: It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code. […]

Read more
Ubuntu 22.04 — schroot — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — schroot — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5584-1 Related CVEs: CVE-2022-2787 Upstream summary: It was discovered that Schroot incorrectly handled certain Schroot names. An attacker could possibly use this issue to break schroot's internal state causing a […]

Read more
Alpine Linux 3.18 — awstats — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux 3.18

Alpine Linux 3.18 — awstats — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 7.9-r0 📖 ~4 min read  •  Source: Alpine secdb entry — awstats 7.9-r0 Related CVEs: CVE-2022-46391 CVE-2020-35176 CVE-2017-1000501 Upstream summary: Alpine main repository for vv3.18 ships awstats 7.9-r0 which addresses CVE-2022-46391. Table of contents Symptom & […]

Read more
SLES 12 — audiofile — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — audiofile — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:0940-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7747 CVE-2018-17095 CVE-2019-13147 CVE-2022-24599 CVE-2017-6827 CVE-2017-6828 CVE-2017-6829 CVE-2017-6830  +10 more Upstream summary: Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File […]

Read more
Oracle Linux 8 — wireshark — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — wireshark — vulnerability — patch and remediation guide (ELSA-2023-7015)

🟡 Medium   ⏱ 10–30 min  Last verified: 27 May 2023 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-7015 Related CVEs: CVE-2023-2856 CVE-2023-2858 CVE-2023-0666 CVE-2023-2952 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more
Oracle Linux 9 — openssl — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — openssl — vulnerability — patch and remediation guide (ELSA-2024-12093)

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2023 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2024-12093 Related CVEs: CVE-2023-5363 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
SLES 12 — libapr-util1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libapr-util1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 27 May 2023 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:348-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-25147 CVE-2017-12618 Upstream summary: Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds […]

Read more
Arch Linux — linux — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — linux — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202210-2 Related CVEs: CVE-2022-42722 CVE-2022-42721 CVE-2022-42720 CVE-2022-42719 CVE-2022-41674 CVE-2019-17666 CVE-2021-3655 CVE-2021-3612  +12 more Upstream summary: Type: multiple issues. Status: Fixed. Affected: 5.1-1. Fixed in: 6.0.1.arch2-1. Group: AVG-2801. Table of contents […]

Read more
Oracle Linux 9 — samba — security and stability fixes — required update — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — samba — security and stability fixes — required update (ELSA-2023-4325)

🟡 Medium   ⏱ 10–30 min  Last verified: 27 May 2023 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-4325 Related CVEs: CVE-2023-3347 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
CHAT