Common Problems

Debian 11 — ruby-mail — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ruby-mail — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-2139 CVE-2012-2140 CVE-2015-9097 Upstream summary: Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. […]

Read more
Debian 11 — torbrowser-launcher — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — torbrowser-launcher — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-3180 Upstream summary: Tor Browser Launcher (aka torbrowser-launcher) before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via […]

Read more
openSUSE Tumbleweed — orthanc — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — orthanc — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:10144-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-2119 Upstream summary: OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM […]

Read more
Debian 11 — python-gnupg — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — python-gnupg — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-7323 CVE-2014-1927 CVE-2014-1928 CVE-2014-1929 CVE-2019-6690 Upstream summary: python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. Table of contents Symptom & […]

Read more
Ubuntu 16.04 — wheel — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — wheel — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5821-2 Related CVEs: CVE-2022-40898 Upstream summary: USN-5821-1 fixed a vulnerability in wheel. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Sebastian Chnelik discovered that wheel […]

Read more
Gentoo Linux — app-arch/unzip — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — app-arch/unzip — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202310-17 Related CVEs: CVE-2022-0529 CVE-2022-0530 CVE-2018-1000035 CVE-2019-13232 Upstream summary: Multiple vulnerabilities have been discovered in UnZip. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment […]

Read more
Ubuntu 16.04 — pcs — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — pcs — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7614-1 Related CVEs: CVE-2017-2661 CVE-2022-2735 CVE-2018-1086 CVE-2022-1049 Upstream summary: Cedric Buissart discovered that pcs did not correctly handle certain parameters. An attacker could possibly use this issue to leak sensitive […]

Read more
Arch Linux — prosody — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — prosody — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202105-11 Related CVEs: CVE-2021-32921 CVE-2021-32920 CVE-2021-32919 CVE-2021-32918 CVE-2021-32917 CVE-2021-37601 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 1:0.11.8-1. Fixed in: 1:0.11.9-1. Group: AVG-1955. Table of contents Symptom & Impact Environment […]

Read more
SLES 12 — fribidi — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — fribidi — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1844-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-25308 CVE-2022-25309 CVE-2022-25310 Upstream summary: A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially […]

Read more
Arch Linux — fossil — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — fossil — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202108-8 Related CVEs: CVE-2021-36377 Upstream summary: Type: certificate verification bypass. Status: Fixed. Affected: 2.15.1-1. Fixed in: 2.16-1. Group: AVG-2146. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
CHAT