Common Problems

FreeBSD 13 — wpa_supplicant — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — wpa_supplicant — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: FreeBSD — EAP-pwd message reassembly issue with unexpected fragment Related CVEs: CVE-2015-1863 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 CVE-2015-5310  +12 more Upstream summary: Problem Description: EAP-pwd implementation in hostapd (EAP […]

Read more
FreeBSD 13 — php72-imap — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php72-imap — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]

Read more
FreeBSD 13 — spamass-milter — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — spamass-milter — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: spamass-milter — remote command execution vulnerability Related CVEs: CVE-2010-1132 Upstream summary: The spamassassin milter plugin contains a vulnerability that can allow remote attackers to execute commands on affected systems. The […]

Read more
Debian 11 — rocksndiamonds — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — rocksndiamonds — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-4606 Upstream summary: Artsoft Entertainment Rocks'n'Diamonds (aka rocksndiamonds) 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home directory. Table […]

Read more
AlmaLinux 8 — gtk-vnc — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — gtk-vnc — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2020:1690 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 13 — shtool — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — shtool — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: shtool — insecure temporary file creation Upstream summary: A Zataz advisory reports that shtool contains a security flaw which could allow a malicious local user to create or overwrite the […]

Read more
Debian 11 — zim — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — zim — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-10870 Upstream summary: Zim through 0.72.1 creates temporary directories with predictable names. A malicious user could predict and create Zim's temporary directories and prevent other users from being […]

Read more
Oracle Linux 8 — kernel security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — kernel security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2021-1093)

🟠 High   ⏱ 15–60 min  Last verified: 21 April 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-1093 Related CVEs: CVE-2021-26708 CVE-2021-3347 CVE-2021-27365 CVE-2021-27363 CVE-2021-27364 CVE-2020-27152 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Debian 11 — ident2 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ident2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0408 Upstream summary: Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code. Table of contents Symptom & Impact Environment […]

Read more
Debian 11 — crawl — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — crawl — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0103 CVE-2006-0045 CVE-2020-11722 Upstream summary: crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to […]

Read more
CHAT