Common Problems

Oracle Linux 8 — dovecot — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — dovecot — vulnerability — patch and remediation guide (ELSA-2019-2822)

🟠 High   ⏱ 15–60 min  Last verified: 2 November 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-2822 Related CVEs: CVE-2019-11500 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Common Problems 112612

Windows Server 2019 – Password policy change blocked by domain functional level – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 2 November 2020 Affected versions: Windows Server 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Oracle Linux 8 — openjpeg2 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — openjpeg2 — vulnerability — patch and remediation guide (ELSA-2021-4251)

🟡 Medium   ⏱ 10–30 min  Last verified: 2 November 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-4251 Related CVEs: CVE-2018-5727 CVE-2020-27823 CVE-2020-27814 CVE-2018-20845 CVE-2019-12973 CVE-2020-27824 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Oracle Linux 8 — sysstat — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — sysstat — vulnerability — patch and remediation guide (ELSA-2020-4638)

🟢 Low   ⏱ 5–15 min  Last verified: 2 November 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-4638 Related CVEs: CVE-2019-16167 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 8 — java-11-openjdk — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — java-11-openjdk — security and stability fixes — required update (ELSA-2023-5742)

🟡 Medium   ⏱ 10–30 min  Last verified: 1 November 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-5742 Related CVEs: CVE-2023-22081 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 12 — chocolate-doom — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — chocolate-doom — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 November 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: chocolate-doom — Arbitrary code execution Related CVEs: CVE-2020-14983 Upstream summary: Michal Dardas from LogicalTrust reports: The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players […]

Read more
Ubuntu 20.04 — velocity — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — velocity — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 October 2020 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6281-1 Related CVEs: CVE-2020-13936 Upstream summary: Alvaro Munoz discovered that Velocity Engine incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted […]

Read more
Oracle Linux 8 — glibc security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — glibc security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2019-3513)

🟡 Medium   ⏱ 10–30 min  Last verified: 31 October 2020 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2019-3513 Related CVEs: CVE-2016-10739 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Common Problems 118058

Ubuntu 18.04 LTS – Docker daemon fails to start after storage driver conflict – Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 31 October 2020 Affected versions: Ubuntu 18.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
SLES 15 — python2-M2Crypto — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-M2Crypto — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 October 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-FU-2024:1448-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25657 Upstream summary: A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption […]

Read more
CHAT