Linux

Ubuntu 16.04 — libhtml-stripscripts-perl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libhtml-stripscripts-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 April 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6100-1 Related CVEs: CVE-2023-24038 Upstream summary: It was discovered that HTML::StripScripts does not properly parse HTML content with certain style attributes. A remote attacker could use this issue to cause […]

Read more
Common Problems 117429

Ubuntu 20.04 black screen after login

🟡 Medium   ⏱ 5–30 min  Last verified: 27 April 2023 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Ubuntu 22.04 — lighttpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — lighttpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 April 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5903-1 Related CVEs: CVE-2022-22707 CVE-2022-41556 Upstream summary: It was discovered that lighttpd incorrectly handled certain inputs, which could result in a stack buffer overflow. A remote attacker could possibly use […]

Read more
Ubuntu 18.04 — apache-log4j1.2 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — apache-log4j1.2 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 April 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5998-1 Related CVEs: CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVE-2019-17571 CVE-2021-4104 Upstream summary: It was discovered that the SocketServer component of Apache Log4j 1.2 incorrectly handled deserialization. An attacker could possibly use this […]

Read more
Ubuntu 20.04 — axis — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — axis — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 April 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6470-1 Related CVEs: CVE-2023-40743 Upstream summary: It was discovered that Axis incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input […]

Read more
Oracle Linux 9 — libvpx — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — libvpx — vulnerability — patch and remediation guide (ELSA-2023-5539)

🟠 High   ⏱ 15–60 min  Last verified: 27 April 2023 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-5539 Related CVEs: CVE-2023-44488 CVE-2023-5217 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Oracle Linux 8 — thunderbird — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — thunderbird — vulnerability — patch and remediation guide (ELSA-2022-8547)

🟠 High   ⏱ 15–60 min  Last verified: 27 April 2023 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-8547 Related CVEs: CVE-2022-45410 CVE-2022-45412 CVE-2022-45406 CVE-2022-45421 CVE-2022-45404 CVE-2022-45403 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Oracle Linux 8 — GraalVM — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — GraalVM — vulnerability — patch and remediation guide (ELSA-2023-12937)

🟠 High   ⏱ 15–60 min  Last verified: 27 April 2023 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-12937 Related CVEs: CVE-2023-22081 CVE-2023-22067 CVE-2023-30589 CVE-2023-30588 CVE-2023-30590 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]

Read more
Oracle Linux 9 — GraalVM — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — GraalVM — vulnerability — patch and remediation guide (ELSA-2023-12683)

🟠 High   ⏱ 15–60 min  Last verified: 27 April 2023 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-12683 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]

Read more
Oracle Linux 9 — Kdump Service Disabled After Upgrade — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — Kdump Service Disabled After Upgrade

🟠 High   ⏱ 5–30 min  Last verified: 26 April 2023 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: Oracle Bug 36563373 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]

Read more
CHAT