Common Problems

Debian 11 — pound — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pound — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-2026 CVE-2005-1391 CVE-2005-3751 CVE-2009-3555 CVE-2011-3389 CVE-2012-4929 CVE-2014-3566 CVE-2016-10711  +1 more Upstream summary: Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote […]

Read more
Debian 11 — slrn — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — slrn — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-0740 Upstream summary: Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument. […]

Read more
Debian 11 — python-oslo.privsep — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — python-oslo.privsep — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-38065 Upstream summary: A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within […]

Read more
Arch Linux — libgcrypt — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — libgcrypt — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202101-45 Related CVEs: CVE-2021-3345 CVE-2018-0495 CVE-2017-7526 CVE-2017-0379 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 1.9.0-2. Fixed in: 1.9.1-1. Group: AVG-1505. Table of contents Symptom & Impact Environment & […]

Read more
Ubuntu 18.04 — advancecomp — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — advancecomp — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5838-1 Related CVEs: CVE-2022-35014 CVE-2022-35015 CVE-2022-35016 CVE-2022-35017 CVE-2022-35018 CVE-2022-35019 CVE-2022-35020 CVE-2019-8379  +2 more Upstream summary: It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on […]

Read more
FreeBSD 13 — openjdk8-jre — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — openjdk8-jre — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: java — multiple vulnerabilities Related CVEs: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 25 new security fixes for […]

Read more
Oracle Linux 8 — java-1.8.0-openjdk — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — java-1.8.0-openjdk — security and stability fixes — required update (ELSA-2022-0307)

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-0307 Related CVEs: CVE-2022-21365 CVE-2022-21299 CVE-2022-21360 CVE-2022-21282 CVE-2022-21294 CVE-2022-21296 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
IBM AIX 7.3 — CVE-1999-0003 — buffer overflow — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-1999-0003 — buffer overflow — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 30 June 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-1999-0003, IBM PSIRT advisory page CVE: CVE-1999-0003 NVD summary: Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). References: ftp://patches.sgi.com/support/free/security/advi   ftp://patches.sgi.com/support/free/security/advi   www.securityfocus.com/bid/122 Table of contents Symptom & […]

Read more
FreeBSD 13 — php70-phar — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php70-phar — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8874 CVE-2016-5766 CVE-2016-5767 CVE-2016-5768 CVE-2016-5769 CVE-2016-5770 CVE-2016-5771 CVE-2016-5772  +1 more Upstream summary: The PHP Group reports: Please reference CVE/URL list for details Table of […]

Read more
CHAT