Common Problems

FreeBSD 13 — linux-f10-expat — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — linux-f10-expat — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: expat2 — Parser crash with specially formatted UTF-8 sequences Related CVEs: CVE-2009-3720 Upstream summary: CVE reports: The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, […]

Read more
FreeBSD 13 — ircservices — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ircservices — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: IRC Services– Denial of Service Vulnerability Related CVEs: CVE-2007-6122 Upstream summary: Secunia reports: A vulnerability has been reported in IRC Services, which can be exploited by malicious people to cause […]

Read more
Debian 11 — ejabberd — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ejabberd — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-0903 CVE-2009-0934 CVE-2010-0305 CVE-2011-1753 CVE-2011-4320 CVE-2013-6169 CVE-2014-8760 Upstream summary: Unspecified vulnerability in the mod_roster_odbc module in ejabberd before 1.1.3 has unknown impact and attack vectors. Table of contents […]

Read more
Debian 11 — realmd — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — realmd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-2704 Upstream summary: realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response. Table of contents Symptom […]

Read more
Debian 11 — fontforge — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — fontforge — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-4259 CVE-2017-11568 CVE-2017-11569 CVE-2017-11570 CVE-2017-11571 CVE-2017-11572 CVE-2017-11573 CVE-2017-11574  +12 more Upstream summary: Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application […]

Read more
Ubuntu 14.04 — privoxy — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — privoxy — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 March 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4886-1 Related CVEs: CVE-2020-35502 CVE-2021-20209 CVE-2021-20210 CVE-2021-20211 CVE-2021-20212 CVE-2021-20213 CVE-2021-20214 CVE-2021-20215  +6 more Upstream summary: It was discovered that Privoxy incorrectly handled CGI requests. An attacker could possibly use this […]

Read more
Amazon Linux 2 — rsyslog — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — rsyslog — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1803 Related CVEs: CVE-2014-3634 CVE-2022-24903 CVE-2019-17041 CVE-2019-17042 CVE-2018-16881 Upstream summary: A flaw was found in the way rsyslog handled invalid log message priority values. In certain configurations, a local attacker, […]

Read more
CentOS Stream 9 — python-wheel — vulnerability — patch and remediation guide — diagnosis and fix on CentOS Stream 9

CentOS Stream 9 — python-wheel — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 March 2022 Affected versions: CentOS Stream 9 📖 ~4 min read  •  Source: AlmaLinux/RHEL advisory ALSA-2023:6712 Related CVEs: CVE-2022-40898 Upstream summary: Wheel is the reference implementation of the Python wheel packaging standard, as defined in PEP 427. Security Fix(es): * python-wheel: remote attackers can cause denial […]

Read more
SLES 12 — tk — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — tk — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 March 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2022:0484-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-35331 Upstream summary: In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute […]

Read more
FreeBSD 13 — rt — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — rt — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: RT — XSS via calendar invitations Related CVEs: CVE-2009-3585 CVE-2011-0009 CVE-2011-1685 CVE-2011-1686 CVE-2011-1687 CVE-2011-1688 CVE-2011-1689 CVE-2011-1690  +12 more Upstream summary: Mateusz Szymaniec and CERT Polska Reports: RT is vulnerable to […]

Read more
CHAT