Common Problems

Ubuntu 16.04 — mupdf — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — mupdf — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 March 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7825-1 Related CVEs: CVE-2020-26683 CVE-2018-16647 CVE-2021-37220 CVE-2018-10289 CVE-2018-16648 CVE-2018-1000036 CVE-2021-3407 CVE-2020-21896 Upstream summary: It was discovered that MuPDF incorrectly managed memory, resulting in a memory leak. An attacker could possibly […]

Read more
Ubuntu 18.04 — ansible — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — ansible — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 March 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7330-1 Related CVEs: CVE-2015-3908 CVE-2015-6240 CVE-2016-8614 CVE-2019-10206 CVE-2019-14846 CVE-2019-14904 CVE-2020-10729 CVE-2020-1739  +12 more Upstream summary: It was discovered that Ansible did not properly verify certain fields of X.509 certificates. An […]

Read more
openSUSE Tumbleweed — imlib2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — imlib2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-12761 CVE-2008-2426 CVE-2008-5187 CVE-2010-0991 Upstream summary: modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-of-bounds reads) via an icon […]

Read more
SLES 15 — targetcli-fb-common — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — targetcli-fb-common — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 March 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-10699 CVE-2020-13867 Upstream summary: A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If […]

Read more
Common Problems 112522

Windows Server 2019 – IIS Windows Authentication Negotiate failing after binding changes – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 29 March 2021 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Oracle Linux 8 — glib2 — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — glib2 — security and stability fixes — required update (ELSA-2021-2170)

🟠 High   ⏱ 15–60 min  Last verified: 29 March 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-2170 Related CVEs: CVE-2021-27219 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Common Problems 112519

Windows Server 2019 — IIS application pool crashes with .NET CLR errors — Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 29 March 2021 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
FreeBSD 12 — py37-aiohttp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py37-aiohttp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: aiohttp — open redirect vulnerability Related CVEs: CVE-2021-21330 Upstream summary: Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to […]

Read more
Ubuntu 14.04 — musl — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — musl — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 March 2021 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5990-1 Related CVEs: CVE-2019-14697 CVE-2020-28928 CVE-2014-3484 CVE-2015-1817 CVE-2016-8859 CVE-2017-15650 CVE-2018-1000001 Upstream summary: It was discovered that musl did not handle certain i386 math functions properly. An attacker could use this […]

Read more
CHAT