Common Problems

FreeBSD 13 — gatekeeper — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — gatekeeper — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: GNU gatekeeper — denial of service Related CVEs: CVE-2012-3534 Upstream summary: Jan Willamowius reports: GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which […]

Read more
FreeBSD 13 — py38-pysaml — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py38-pysaml — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pysaml2 — multiple vulnerabilities Related CVEs: CVE-2021-21238 CVE-2021-21239 Upstream summary: pysaml2 Releases: Fix processing of invalid SAML XML documents – CVE-2021-21238 Fix unspecified xmlsec1 key-type preference – CVE-2021-21239 Table of […]

Read more
FreeBSD 13 — proftpd — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — proftpd — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: proftpd — user chroot escape vulnerability Related CVEs: CVE-2003-0831 CVE-2004-0432 CVE-2005-2390 CVE-2006-5815 CVE-2006-6170 CVE-2008-4242 CVE-2008-4247 CVE-2009-0542  +5 more Upstream summary: NVD reports: ProFTPD … controls whether the home directory of […]

Read more
Debian 11 — libfile-find-rule-perl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libfile-find-rule-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-10007 Upstream summary: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with the 2 […]

Read more
FreeBSD 13 — linux-shoutcast — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — linux-shoutcast — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: shoutcast — cross-site scripting, information exposure Related CVEs: CVE-2006-3007 Upstream summary: Goober's advisory reports reports that shoutcast is vulnerable to an arbitrary file reading vulnerability: Impact of the vulnerability depends […]

Read more
Amazon Linux 2 — fdupes — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — fdupes — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2MATE-DESKTOP1.X-2024-009 Related CVEs: CVE-2022-48682 Upstream summary: In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink. (CVE-2022-48682) Table of contents Symptom & Impact […]

Read more
Debian 11 — node-chart.js — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-chart.js — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-7746 Upstream summary: This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing […]

Read more
Debian 11 — projectl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — projectl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-3216 Upstream summary: The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, which allows local users to overwrite arbitrary files […]

Read more
Debian 11 — bash-completion — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — bash-completion — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-7738 Upstream summary: In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount […]

Read more
Debian 11 — libonig — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libonig — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-9224 CVE-2017-9225 CVE-2017-9226 CVE-2017-9227 CVE-2017-9228 CVE-2017-9229 CVE-2019-13224 CVE-2019-13225  +5 more Upstream summary: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and […]

Read more
CHAT