Linux

Debian 11 — unrar-nonfree — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — unrar-nonfree — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-0855 CVE-2007-3726 CVE-2012-6706 CVE-2017-12938 CVE-2017-12940 CVE-2017-12941 CVE-2017-12942 CVE-2017-20006  +5 more Upstream summary: Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted […]

Read more
Debian 11 — rbenv — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — rbenv — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-1000047 Upstream summary: rbenv (all current versions) is vulnerable to Directory Traversal in the specification of Ruby version resulting in arbitrary code execution Table of contents Symptom & […]

Read more
Ubuntu 18.04 — fis-gtm — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — fis-gtm — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 September 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7422-1 Related CVEs: CVE-2021-44492 CVE-2021-44498 CVE-2021-44500 CVE-2021-44502 CVE-2021-44506 CVE-2021-44508 CVE-2021-44509 CVE-2021-44510 Upstream summary: It was discovered that FIS-GT.M could incorrectly dereference memory in certain instances. An attacker could possibly use […]

Read more
Ubuntu 20.04 — kmail — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — kmail — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7731-1 Related CVEs: CVE-2017-17689 CVE-2020-11880 Upstream summary: Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that KMail could be made […]

Read more
Ubuntu 18.04 — maven — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — maven — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5245-1 Related CVEs: CVE-2021-26291 Upstream summary: It was discovered that Apache Maven followed repositories that are defined in a dependency's Project Object Model (pom) even if the repositories weren't encrypted […]

Read more
Ubuntu 20.04 — ruby-kramdown — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — ruby-kramdown — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6424-1 Related CVEs: CVE-2021-28834 CVE-2020-14001 Upstream summary: It was discovered that kramdown did not restrict Rouge formatters to the correct namespace. An attacker could use this issue to cause kramdown […]

Read more
Debian 11 — perl — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — perl — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-0703 CVE-2002-1323 CVE-2003-0615 CVE-2003-0618 CVE-2003-0900 CVE-2004-0452 CVE-2004-0976 CVE-2005-0155  +12 more Upstream summary: An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for […]

Read more
Oracle Linux 8 — samba security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — samba security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2021-1647)

🟡 Medium   ⏱ 10–30 min  Last verified: 14 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-1647 Related CVEs: CVE-2020-14318 CVE-2020-1472 CVE-2020-14323 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
CHAT