Linux

Debian 11 — libjdom2-java — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libjdom2-java — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-33813 Upstream summary: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. Table of contents […]

Read more
Debian 11 — uim — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — uim — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-0503 CVE-2005-3149 Upstream summary: uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges. Table […]

Read more
Debian 11 — libquartz2-java — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libquartz2-java — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-13990 Upstream summary: initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
Debian 11 — rinetd — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — rinetd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0212 Upstream summary: handleAccept in rinetd before 0.62 does not properly resize the connection list when it becomes full and sets an array index incorrectly, which allows remote […]

Read more
Gentoo Linux — net-dns/bind-tools — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — net-dns/bind-tools — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202210-25 Related CVEs: CVE-2021-25219 CVE-2021-25220 CVE-2022-0396 CVE-2022-2795 CVE-2022-2881 CVE-2022-2906 CVE-2022-3080 CVE-2022-38177  +1 more Upstream summary: Multiple vulnerabilities have been discovered in ISC BIND. Please review the CVE identifiers referenced below for details. […]

Read more
Debian 11 — dibbler — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — dibbler — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-5028 CVE-2007-5029 CVE-2007-5030 CVE-2007-5031 Upstream summary: Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors. Table […]

Read more
Ubuntu 20.04 — mame — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — mame — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7913-1 Related CVEs: CVE-2022-34300 CVE-2018-16981 CVE-2021-46143 Upstream summary: It was discovered that the stb library, included in MAME, had a heap-based buffer overflow. An attacker could possibly use this issue […]

Read more
Ubuntu 18.04 — recutils — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — recutils — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 February 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7137-1 Related CVEs: CVE-2019-11637 CVE-2019-11638 CVE-2019-11639 CVE-2019-11640 CVE-2019-6455 CVE-2019-6456 CVE-2019-6457 CVE-2019-6458  +5 more Upstream summary: It was discovered that recutils incorrectly handled memory when parsing comments with the recparser utility. […]

Read more
Ubuntu 20.04 — node-nth-check — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — node-nth-check — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6114-1 Related CVEs: CVE-2021-3803 Upstream summary: Yeting Li discovered that nth-check incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input […]

Read more
Gentoo Linux — dev-util/pycharm-professional — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — dev-util/pycharm-professional — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202107-45 Related CVEs: CVE-2021-30005 Upstream summary: Insufficient validation exists within PyCharm’s checks for fetching projects from VCS. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
CHAT