Common Problems

Debian 11 — libusbmuxd — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libusbmuxd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-5104 Upstream summary: The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by […]

Read more
Debian 11 — bcron — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — bcron — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-6110 Upstream summary: bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify […]

Read more
Ubuntu 18.04 — h2database — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — h2database — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 August 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6834-1 Related CVEs: CVE-2021-42392 CVE-2022-23221 Upstream summary: It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code. […]

Read more
IBM AIX 7.3 — CVE-2022-30608 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2022-30608 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 13 August 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2022-30608, IBM Support Bulletin CVE: CVE-2022-30608 NVD summary: "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from […]

Read more
Oracle Linux 8 — go-toolset:ol8 security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — go-toolset:ol8 security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2019-3433)

🟡 Medium   ⏱ 10–30 min  Last verified: 12 August 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-3433 Related CVEs: CVE-2019-14809 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
IBM AIX 7.3 — CVE-2022-34165 — xss — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2022-34165 — xss — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 12 August 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2022-34165, IBM Support Bulletin CVE: CVE-2022-34165 NVD summary: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerable to HTTP header injection, […]

Read more
Common Problems 120518

Debian 11 – boot is delayed by systemd-networkd-wait-online timeout

🟡 Medium   ⏱ 5–30 min  Last verified: 12 August 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
FreeBSD 13 — qt4-xml — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — qt4-xml — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qt4-xml — XML Entity Expansion Denial of Service Related CVEs: CVE-2013-4549 Upstream summary: Richard J. Moore reports: QXmlSimpleReader in Qt versions prior to 5.2 supports expansion of internal entities in […]

Read more
FreeBSD 13 — subversion-static — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — subversion-static — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: subversion — Arbitrary code execution vulnerability Upstream summary: subversion team reports: A Subversion client sometimes connects to URLs provided by the repository. This happens in two primary cases: during 'checkout', […]

Read more
CHAT