Common Problems

FreeBSD 13 — apache+mod_ssl+mod_snmp+mod_accel+ipv — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — apache+mod_ssl+mod_snmp+mod_accel+ipv — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

Read more
Oracle Linux 8 — mailman:2.1 — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — mailman:2.1 — security and stability fixes — required update (ELSA-2020-4667)

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-4667 Related CVEs: CVE-2020-12137 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 13 — zathura-pdf-mupdf — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zathura-pdf-mupdf — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mupdf — multiple vulnerabilities Related CVEs: CVE-2016-6265 CVE-2016-6525 Upstream summary: Tobias Kortkamp reports: Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a […]

Read more
Common Problems 121081

Service Fails to Start After Package Upgrade

🟠 High   ⏱ 5–30 min  Last verified: 30 June 2021 Affected versions: Debian 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
FreeBSD 13 — librsync — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — librsync — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: librsync — collision vulnerability Related CVEs: CVE-2014-8242 Upstream summary: Michael Samuel reports: librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers […]

Read more
Common Problems 118420

Ubuntu 16.04 Bluetooth device not detected

🟡 Medium   ⏱ 5–30 min  Last verified: 30 June 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Ubuntu 18.04 — libtar — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libtar — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7398-1 Related CVEs: CVE-2021-33643 CVE-2021-33644 CVE-2021-33645 CVE-2021-33646 Upstream summary: It was discovered that libtar may perform out-of-bounds reads when processing specially crafted tar files. An attacker could possibly use this […]

Read more
Ubuntu 20.04 — nettle — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — nettle — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4990-1 Related CVEs: CVE-2018-16869 CVE-2021-3580 CVE-2021-20305 Upstream summary: It was discovered that Nettle incorrectly handled RSA decryption. A remote attacker could possibly use this issue to cause Nettle to crash, […]

Read more
Ubuntu 20.04 — tor — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — tor — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5036-1 Related CVEs: CVE-2019-8955 CVE-2021-28089 CVE-2021-28090 CVE-2021-34548 CVE-2021-34549 CVE-2021-34550 CVE-2021-38385 Upstream summary: It was discovered that Tor incorrectly handled certain memory operations. A remote attacker could use this issue to […]

Read more
SLES 15 — php8-pear — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — php8-pear — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 June 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3198-1 Related CVEs: CVE-2021-32610 Upstream summary: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. Table of contents Symptom & Impact Environment […]

Read more
CHAT