Common Problems

Debian 11 — lpr — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — lpr — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2000-1220 CVE-2000-1221 CVE-2003-0144 CVE-2003-0146 Upstream summary: The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by […]

Read more
Debian 11 — ruby-i18n — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ruby-i18n — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-4492 CVE-2014-10077 Upstream summary: Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML […]

Read more
Ubuntu 16.04 — pdfresurrect — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — pdfresurrect — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 August 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5282-1 Related CVEs: CVE-2019-14267 CVE-2019-14934 CVE-2020-20740 CVE-2020-9549 CVE-2021-3508 Upstream summary: It was discovered that PDFResurrect was incorrectly handling corrupted PDF files. An attacker could possibly use this issue to cause […]

Read more
Common Problems 125083

Oracle Linux 8 – Common Problem 012 – Diagnosis and Fix

🟡 Medium   ⏱ 5–30 min  Last verified: 29 August 2021 Affected versions: Oracle Linux 8 📖 ~3 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
IBM AIX 7.2 — CVE-2021-38982 — xss — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2021-38982 — xss — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 29 August 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2021-38982, IBM Support Bulletin CVE: CVE-2021-38982 NVD summary: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code […]

Read more
FreeBSD 12 — py311-markdown — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py311-markdown — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 August 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-markdown2 — regular expression denial of service vulnerability Related CVEs: CVE-2020-11888 CVE-2021-26813 Upstream summary: Ben Caller reports: markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of […]

Read more
FreeBSD 13 — kvirc-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — kvirc-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kvirc — multiple vulnerabilities Related CVEs: CVE-2010-2451 CVE-2010-2452 Upstream summary: Two security vulnerabilities have been discovered: Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have […]

Read more
Common Problems 115014

RHEL 8 Kernel Updated but Old Entry Boots by Default

🟡 Medium   ⏱ 5–30 min  Last verified: 29 August 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
FreeBSD 13 — ampache — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ampache — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ampache — insecure temporary file usage Related CVEs: CVE-2008-3929 Upstream summary: Secunia reports: A security issue has been reported in Ampache, which can be exploited by malicious, local users to […]

Read more
Debian 11 — semi — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — semi — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 August 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0440 Upstream summary: The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a […]

Read more
CHAT