Common Problems

FreeBSD 12 — ja-acroread — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ja-acroread — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: acroread — XML External Entity vulnerability Related CVEs: CVE-2005-1306 Upstream summary: Sverre H. Huseby discovered a vulnerability in Adobe Acrobat and Adobe Reader. Under certain circumstances, using XML scripts it […]

Read more
Amazon Linux 2 — openwsman — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — openwsman — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2019-1196 Related CVEs: CVE-2019-3816 CVE-2019-3833 Upstream summary: Earlier versions of Openwsman are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A […]

Read more
Ubuntu 16.04 — ipmitool — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ipmitool — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 February 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5997-1 Related CVEs: CVE-2020-5208 Upstream summary: It was discovered that IPMItool was not properly checking the data received from a remote LAN party. A remote attacker could possibly use this […]

Read more
SLES 15 — docker-runc — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — docker-runc — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 February 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:2958-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-19921 Upstream summary: runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be […]

Read more
openSUSE Tumbleweed — faad2 — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — faad2 — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2018-20196 CVE-2019-6956 CVE-2018-20194 CVE-2018-20199 CVE-2018-20358 CVE-2018-20359 CVE-2018-20362 CVE-2019-15296 Upstream summary: There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced […]

Read more
Red Hat Enterprise Linux 8 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 8 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 8 📖 ~4 min read  •  Source: Red Hat advisory RHSA RHSA-2026:8610 Related CVEs: CVE-2006-10002 CVE-2006-10003 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
SLES 15 — python2-rsa — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — python2-rsa — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 February 2020 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:254-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13757 CVE-2020-25658 Upstream summary: Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping […]

Read more
Common Problems 118415

dpkg Was Interrupted, You Must Manually Run dpkg –configure -a

🟡 Medium   ⏱ 5–30 min  Last verified: 8 February 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Gentoo Linux — dev-java/icedtea-bin — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — dev-java/icedtea-bin — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202409-26 Related CVEs: CVE-2020-14556 CVE-2020-14562 CVE-2020-14573 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14583  +12 more Upstream summary: Multiple vulnerabilities have been discovered in IcedTea. Please review the CVE identifiers referenced below for details. Table […]

Read more
Common Problems 115479

RHEL 7 time drift caused by chronyd service not active

🟡 Medium   ⏱ 5–30 min  Last verified: 8 February 2020 Affected versions: RHEL 7 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
CHAT