Common Problems

SLES 15 — libass9 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libass9 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 June 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:1174-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36430 CVE-2020-26682 CVE-2020-24994 CVE-2016-7969 CVE-2016-7970 CVE-2016-7972 Upstream summary: libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because […]

Read more
FreeBSD 13 — wireshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — wireshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wireshark — multiple security issues Related CVEs: CVE-2007-3389 CVE-2007-3390 CVE-2007-3391 CVE-2007-3392 CVE-2007-3393 CVE-2007-6112 CVE-2007-6113 CVE-2007-6114  +12 more Upstream summary: wireshark developers reports: wnpa-sec-2018-05. IEEE 802.11 dissector crash. (CVE-2018-7335) wnpa-sec-2018-06. Large […]

Read more
Oracle Linux 8 — container-tools:ol8 — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — container-tools:ol8 — security and stability fixes — required update (ELSA-2019-4269)

🟠 High   ⏱ 15–60 min  Last verified: 29 June 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-4269 Related CVEs: CVE-2019-9512 CVE-2019-9514 CVE-2019-16884 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
openSUSE Tumbleweed — lynis — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — lynis — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-8108 CVE-2020-13882 CVE-2019-13033 Upstream summary: Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a […]

Read more
IBM AIX 7.2 — CVE-2021-39085 — sql injection — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-2021-39085 — sql injection — patch and remediation guide

🟡 Medium   ⏱ 15–45 min  Last verified: 29 June 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2021-39085, IBM Support Bulletin CVE: CVE-2021-39085 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to SQL injection. A remote attacker […]

Read more
FreeBSD 13 — php72-exif — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php72-exif — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PHP — Multiple vulnerabilities in EXIF module Related CVEs: CVE-2019-11034 CVE-2019-11035 Upstream summary: The PHP project reports: Heap-buffer-overflow in php_ifd_get32s (CVE-2019-11034) Heap-buffer-overflow in exif_iif_add_value (CVE-2019-11035) Table of contents Symptom & […]

Read more
Gentoo Linux — www-apps/mediawiki — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — www-apps/mediawiki — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202305-24 Related CVEs: CVE-2021-41798 CVE-2021-41799 CVE-2021-41800 CVE-2021-44854 CVE-2021-44855 CVE-2021-44856 CVE-2021-44857 CVE-2021-44858  +12 more Upstream summary: Multiple vulnerabilities have been discovered in MediaWiki. Please review the CVE identifiers referenced below for details. Table […]

Read more
FreeBSD 13 — WebCalendar — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — WebCalendar — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: WebCalendar — Persistent XSS Related CVEs: CAN-2005-2320 CVE-2005-2717 CVE-2006-2762 CVE-2007-1343 CVE-2012-0846 Upstream summary: tom reports, There is no sanitation on the input of the location variable allowing for persistent XSS. […]

Read more
FreeBSD 13 — libproxy-gnome — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libproxy-gnome — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libproxy — stack-based buffer overflow Related CVEs: CVE-2012-4504 Upstream summary: Tomas Hoger reports: A buffer overflow flaw was discovered in the libproxy's url::get_pac() used to download proxy.pac proxy auto-configuration file. […]

Read more
Amazon Linux 2 — kernel-livepatch-4.14.181-142.260 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-4.14.181-142.260 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2020-025 Related CVEs: CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-12655 CVE-2020-14386 Upstream summary: An issue has been reported in the Linux kernel's handling of raw sockets. This issue can be used locally to […]

Read more
CHAT