Common Problems

Debian 11 — impose+ — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — impose+ — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-4960 Upstream summary: impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-tmp.ps and (2) /tmp/bboxx-* temporary files. Table of […]

Read more
Debian 11 — libpff — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libpff — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-11723 CVE-2018-20348 CVE-2020-18897 Upstream summary: The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a […]

Read more
Debian 11 — newlib — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — newlib — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-2305 CVE-2019-14871 CVE-2019-14872 CVE-2019-14873 CVE-2019-14874 CVE-2019-14875 CVE-2019-14876 CVE-2019-14877  +3 more Upstream summary: Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 […]

Read more
Debian 11 — dpkg — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — dpkg — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-2768 CVE-2005-2096 CVE-2010-0396 CVE-2010-1679 CVE-2011-0402 CVE-2014-0471 CVE-2014-3127 CVE-2014-3227  +8 more Upstream summary: dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file […]

Read more
AlmaLinux 8 — rdma-core — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — rdma-core — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALEA-2022:2014 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Debian 11 — nacl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — nacl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-0565 Upstream summary: NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
Ubuntu 18.04 — cinder — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — cinder — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 March 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5835-4 Related CVEs: CVE-2022-47951 CVE-2020-10755 Upstream summary: USN-5835-1 fixed vulnerabilities in Cinder. This update provides the corresponding updates for Ubuntu 18.04 LTS. In addition, a regression was fixed for Ubuntu […]

Read more
AlmaLinux 8 — kmod-kvdo — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — kmod-kvdo — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2022:2003 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
SLES 12 — caribou — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — caribou — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 March 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1943-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3567 Upstream summary: A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking […]

Read more
IBM AIX 7.1 — CVE-2021-29722 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.1

IBM AIX 7.1 — CVE-2021-29722 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 18 March 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2021-29722, IBM Support Bulletin CVE: CVE-2021-29722 NVD summary: IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive […]

Read more
CHAT