Common Problems

FreeBSD 12 — de-bugzilla — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — de-bugzilla — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bugzilla — multiple vulnerabilities Related CVEs: CVE-2013-0785 CVE-2013-0786 Upstream summary: A Bugzilla Security Advisory reports: Cross-Site Scripting When viewing a single bug report, which is the default, the bug ID […]

Read more
Common Problems 120981

Debian 10 – dpkg Interrupted State Blocks Package Operations – Full Recovery

🔴 Critical   ⏱ 5–30 min  Last verified: 30 March 2020 Affected versions: Debian 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
FreeBSD 12 — apache+mod_ssl — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — apache+mod_ssl — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2003-0993 CVE-2004-0700 CVE-2004-0885 CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using […]

Read more
FreeBSD 12 — py35-salt — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py35-salt — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: salt — multiple vulnerabilities in salt-master process Related CVEs: CVE-2016-1866 CVE-2016-3176 CVE-2017-12791 CVE-2017-14695 CVE-2017-14696 CVE-2018-15750 CVE-2018-15751 CVE-2019-17361  +2 more Upstream summary: F-Secure reports: CVE-2020-11651 – Authentication bypass vulnerabilities The ClearFuncs […]

Read more
Common Problems 115419

RHEL 7 firewalld dropping application traffic after zone change

🟠 High   ⏱ 5–30 min  Last verified: 30 March 2020 Affected versions: RHEL 7 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
FreeBSD 12 — fswiki — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — fswiki — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fswiki — XSS vulnerability Related CVEs: CVE-2005-1799 Upstream summary: JVN reports: FreeStyleWiki has XSS vulnerability. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
Common Problems 114984

RHEL 8 Podman Image Pull Fails With Certificate Errors

🟡 Medium   ⏱ 5–30 min  Last verified: 30 March 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Ubuntu 14.04 — spamassassin — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — spamassassin — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 March 2020 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4899-2 Related CVEs: CVE-2020-1946 CVE-2020-1930 CVE-2020-1931 CVE-2018-11805 CVE-2019-12420 CVE-2017-15705 CVE-2018-11780 CVE-2018-11781 Upstream summary: USN-4899-1 fixed a vulnerability in SpamAssassin. This update provides the corresponding update for Ubuntu 14.04 ESM. Original […]

Read more
Gentoo Linux — sys-devel/gettext — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — sys-devel/gettext — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202208-33 Related CVEs: CVE-2020-12825 Upstream summary: The cr_parser_parse_any_core function in libcroco's cr-parser.c does not limit recursion, leading to a denial of service via a stack overflow when trying to parse crafted CSS. […]

Read more
SLES 15 — memcached — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — memcached — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 March 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2020:2072-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-11596 CVE-2009-1494 CVE-2011-4971 CVE-2013-7239 CVE-2016-8704 CVE-2016-8705 CVE-2016-8706 CVE-2017-9951  +6 more Upstream summary: In memcached before 1.5.14, a NULL pointer dereference was found in the "lru […]

Read more
CHAT