Common Problems

SLES 12 — python-paramiko — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — python-paramiko — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 15 March 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0174-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000805 CVE-2018-7750 CVE-2022-24302 CVE-2013-7459 Upstream summary: Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that […]

Read more
FreeBSD 13 — firefox-esr — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — firefox-esr — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox ESR — Other issue in the WebRTC component Related CVEs: CVE-2011-3079 CVE-2012-2808 CVE-2014-1492 CVE-2014-1493 CVE-2014-1494 CVE-2014-1496 CVE-2014-1497 CVE-2014-1498  +12 more Upstream summary: https://bugzilla.mozilla.org/show_bug.cgi?id=2035939 reports: Other issue in the WebRTC […]

Read more
FreeBSD 13 — libaudiofile — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libaudiofile — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libaudiofile — heap-based overflow in Microsoft ADPCM compression module Related CVEs: CVE-2014-0159 Upstream summary: Debian reports: Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to […]

Read more
FreeBSD 13 — ko-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ko-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

Read more
FreeBSD 13 — zabbix-agent — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zabbix-agent — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zabbix — php frontend multiple vulnerabilities Upstream summary: Secunia reports: Some vulnerabilities have been reported in the ZABBIX PHP frontend, which can be exploited by malicious people to conduct cross-site […]

Read more
FreeBSD 13 — p5-subversion — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — p5-subversion — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: subversion — heap overflow vulnerability Related CVEs: CVE-2009-2411 Upstream summary: A Subversion Security Advisory reports: Subversion clients and servers have multiple heap overflow issues in the parsing of binary deltas. […]

Read more
Debian 11 — golang-gogoprotobuf — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — golang-gogoprotobuf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-3121 Upstream summary: An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue. Table of contents Symptom & […]

Read more
Debian 11 — libgetdata — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libgetdata — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-20204 Upstream summary: A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This degrades the confidentiality, integrity […]

Read more
AlmaLinux 8 — iptraf-ng — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — iptraf-ng — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2021:1691 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Debian 11 — htop — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — htop — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-5076 Upstream summary: htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have […]

Read more
CHAT