Common Problems

Debian 11 — junit4 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — junit4 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-15250 Upstream summary: In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary […]

Read more
Debian 11 — libsass — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libsass — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-11554 CVE-2017-11555 CVE-2017-11556 CVE-2017-11608 CVE-2018-11499 CVE-2018-11693 CVE-2018-11694 CVE-2018-11695  +12 more Upstream summary: There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) […]

Read more
Ubuntu 22.04 — pdns — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — pdns — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 May 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7203-1 Related CVEs: CVE-2018-1046 CVE-2018-10851 CVE-2018-14626 CVE-2018-14644 CVE-2020-17482 CVE-2022-27227 Upstream summary: Wei Hao discovered that PowerDNS Authoritative Server incorrectly handled memory when accessing certain files. An attacker could possibly use […]

Read more
Ubuntu 20.04 — linux-azure-5.13 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — linux-azure-5.13 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5485-1 Related CVEs: CVE-2022-21123 CVE-2022-21125 CVE-2022-21166 CVE-2022-1158 CVE-2022-1966 CVE-2022-1972 CVE-2022-21499 CVE-2022-24958  +12 more Upstream summary: It was discovered that some Intel processors did not completely perform cleanup actions on multi-core […]

Read more
Oracle Linux 8 — cpio — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — cpio — vulnerability — patch and remediation guide (ELSA-2022-1991)

🟡 Medium   ⏱ 10–30 min  Last verified: 23 May 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-1991 Related CVEs: CVE-2021-38185 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 13 — fr-linux-netscape — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — fr-linux-netscape — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

Read more
Oracle Linux 8 — Power Button Defaults to ACPI Suspend Mode — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — Power Button Defaults to ACPI Suspend Mode

🟠 High   ⏱ 5–30 min  Last verified: 22 May 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: Oracle Bug 25597898 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan […]

Read more
FreeBSD 12 — rust — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — rust — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 May 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Rust — Race condition enabling symlink following Related CVEs: CVE-2019-12083 CVE-2022-21658 Upstream summary: The Rust Security Response WG was notified that the std::fs::remove_dir_all standard library function is vulnerable to a […]

Read more
FreeBSD 13 — py39-ansible-core — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py39-ansible-core — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]

Read more
Common Problems 120585

Debian 11 sudo Command Not Found or Permission Denied

🟠 High   ⏱ 5–30 min  Last verified: 22 May 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
CHAT