Linux

Ubuntu 20.04 — linux-hwe-5.11 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — linux-hwe-5.11 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • July 5, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 5 July 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5219-1 Related CVEs: CVE-2021-4204 https://launchpad.net/bugs/1956585 CVE-2021-20321 CVE-2021-3760 CVE-2021-4002 CVE-2021-41864 CVE-2021-43056 CVE-2021-43267  +12 more Upstream summary: It was discovered that the eBPF implementation in the Linux kernel did not properly validate […]

Read more
Amazon Linux 2 — kernel-livepatch-5.10.50-44.132 — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-5.10.50-44.132 — vulnerability — patch and remediation guide

  • July 5, 2022
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2021-066 Related CVEs: CVE-2021-41073 Upstream summary: No CVE associated with this advisory Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]

Read more
AlmaLinux 8 — sil-nuosu-fonts — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — sil-nuosu-fonts — vulnerability — patch and remediation guide

  • July 4, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2021:4164 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Oracle Linux 8 — GStreamer, libmad, and SDL security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — GStreamer, libmad, and SDL security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-1631)

  • July 4, 2022
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 4 July 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-1631 Related CVEs: CVE-2018-7263 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 11 — libetpan — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libetpan — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • July 4, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 4 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-8825 CVE-2020-15953 CVE-2022-4121 Upstream summary: A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. […]

Read more
Common Problems 120532

Debian 11: chrony not syncing and system clock drift

  • July 4, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 5–30 min  Last verified: 4 July 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Debian 11 — libzstd — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libzstd — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • July 4, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 4 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-11922 CVE-2021-24031 CVE-2021-24032 CVE-2022-4899 Upstream summary: A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out […]

Read more
Debian 11 — libimobiledevice — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libimobiledevice — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • July 4, 2022
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 4 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-2142 CVE-2016-5104 Upstream summary: userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) […]

Read more
Ubuntu 18.04 — nvidia-graphics-drivers-450 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — nvidia-graphics-drivers-450 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

  • July 4, 2022
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 4 July 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4935-1 Related CVEs: CVE-2021-1076 CVE-2021-1077 CVE-2021-1052 CVE-2021-1053 CVE-2021-1056 Upstream summary: It was discovered that the NVIDIA GPU display driver for the Linux kernel incorrectly performed access control. A local attacker […]

Read more
Ubuntu 18.04 — multipath-tools — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — multipath-tools — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • July 4, 2022
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 4 July 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5731-1 Related CVEs: CVE-2022-41973 CVE-2022-41974 Upstream summary: It was discovered that multipath-tools incorrectly handled symlinks. A local attacker could possibly use this issue, in combination with other issues, to escalate […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT