Linux

Debian 11 — alien-arena — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — alien-arena — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-4754 CVE-2007-4755 CVE-2009-3637 CVE-2010-3439 Upstream summary: Format string vulnerability in the safe_bprintf function in acesrc/acebot_cmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a […]

Read more
Ubuntu 18.04 — awstats — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — awstats — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 January 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5899-1 Related CVEs: CVE-2022-46391 CVE-2017-1000501 CVE-2020-29600 CVE-2020-35176 Upstream summary: It was discovered that AWStats did not properly sanitize the content of whois responses in the hostinfo plugin. An attacker could […]

Read more
Common Problems 115635

RHEL 7 Yum Metadata Expired Behind Proxy – RHEL 7 Post 076

🟡 Medium   ⏱ 5–30 min  Last verified: 9 January 2023 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Debian 11 — lib3mf — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — lib3mf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-21772 Upstream summary: A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker […]

Read more
Debian 11 — python-uvicorn — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — python-uvicorn — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-7694 CVE-2020-7695 Upstream summary: This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP […]

Read more
Debian 11 — shellinabox — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — shellinabox — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-8400 CVE-2018-16789 Upstream summary: The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks […]

Read more
Debian 11 — hoteldruid — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — hoteldruid — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1000871 CVE-2019-8937 CVE-2019-9084 CVE-2019-9085 CVE-2019-9086 CVE-2019-9087 CVE-2021-37832 CVE-2021-37833  +12 more Upstream summary: HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in "id_utente_mod" parameter in […]

Read more
CHAT