Linux

Oracle Linux 8 — mod_auth_mellon security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — mod_auth_mellon security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2019-3421)

🟡 Medium   ⏱ 10–30 min  Last verified: 11 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-3421 Related CVEs: CVE-2019-3877 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 11 — impacket — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — impacket — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-31800 Upstream summary: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to […]

Read more
openSUSE Tumbleweed — ruby2.7-rubygem-activerecord — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — ruby2.7-rubygem-activerecord — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:1468-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22880 Upstream summary: The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted […]

Read more
Debian 11 — libmwaw — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libmwaw — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-9433 Upstream summary: Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx. Table of […]

Read more
Debian 11 — icinga2 — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — icinga2 — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-16933 CVE-2018-6532 CVE-2018-6533 CVE-2018-6534 CVE-2018-6535 CVE-2018-6536 CVE-2020-14004 CVE-2020-29663  +8 more Upstream summary: etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable […]

Read more
Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Unbreakable Enterprise kernel — vulnerability — patch and remediation guide (ELSA-2021-9085)

🟠 High   ⏱ 15–60 min  Last verified: 11 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-9085 Related CVEs: CVE-2020-16120 CVE-2021-26931 CVE-2020-0431 CVE-2021-26930 CVE-2021-3347 CVE-2021-3348 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Arch Linux — mutt — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — mutt — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202011-25 Related CVEs: CVE-2020-28896 CVE-2021-3181 Upstream summary: Type: silent downgrade. Status: Fixed. Affected: 2.0.1-1. Fixed in: 2.0.2-1. Group: AVG-1288. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Debian 11 — qemu — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — qemu — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-1320 CVE-2007-1321 CVE-2007-1322 CVE-2007-1366 CVE-2007-5729 CVE-2007-5730 CVE-2008-0928 CVE-2008-1945  +12 more Upstream summary: Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, […]

Read more
CHAT