Common Problems

SLES 15 — xscreensaver — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — xscreensaver — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 January 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:2641-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-34557 CVE-2015-8025 Upstream summary: XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows […]

Read more
IBM AIX 7.3 — CVE-2010-0960 — buffer overflow — patch and remediation guide — diagnosis and fix on IBM AIX 7.3

IBM AIX 7.3 — CVE-2010-0960 — buffer overflow — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 21 January 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2010-0960, IBM Support Bulletin CVE: CVE-2010-0960 NVD summary: Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors. References: aix.software.ibm.com/aix/efixes/security/qosmod_ […]

Read more
SLES 12 — finch — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — finch — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 January 2022 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1664-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-26491 CVE-2009-2694 CVE-2010-0013 CVE-2011-3594 CVE-2012-6152 CVE-2017-2640 CVE-2009-2703 CVE-2009-3026  +12 more Upstream summary: An issue was discovered in Pidgin before 2.14.9. A remote attacker who can […]

Read more
Arch Linux — rabbitmq — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — rabbitmq — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202106-17 Related CVEs: CVE-2021-22116 CVE-2021-32719 CVE-2021-32718 Upstream summary: Type: denial of service. Status: Fixed. Affected: 3.8.14-1. Fixed in: 3.8.16-1. Group: AVG-1966. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 13 — ja-w3m — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ja-w3m — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: w3m – multiple vulnerabilities Related CVEs: CVE-2006-6772 CVE-2016-9422 CVE-2016-9423 CVE-2016-9424 CVE-2016-9425 CVE-2016-9426 CVE-2016-9428 CVE-2016-9429  +12 more Upstream summary: Tatsuya Kinoshita reports: CVE-2018-6196 * table.c: Prevent negative indent value in feed_table_block_tag(). […]

Read more
AlmaLinux 8 — librsvg2 — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — librsvg2 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2020:4709 Related CVEs: CVE-2019-20446 Upstream summary: The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Resource exhaustion via crafted SVG file with […]

Read more
Oracle Linux 8 — nss and nspr security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — nss and nspr security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-3280)

🟡 Medium   ⏱ 10–30 min  Last verified: 20 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-3280 Related CVEs: CVE-2019-17006 CVE-2020-12402 CVE-2019-17023 CVE-2019-11756 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more
IBM AIX 7.2 — CVE-2022-40748 — xss — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2022-40748 — xss — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 20 January 2022 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2022-40748, IBM Support Bulletin CVE: CVE-2022-40748 NVD summary: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus […]

Read more
FreeBSD 13 — py38-psutil — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py38-psutil — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-psutil — double free vulnerability Related CVEs: CVE-2019-18874 Upstream summary: ret2libc reports: psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a […]

Read more
CHAT