Common Problems

Debian 9 — apache2 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — apache2 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 August 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-15710 CVE-2017-3167 CVE-2017-9788 CVE-2017-9798 CVE-2018-17189 CVE-2019-9517 CVE-2019-10092 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]

Read more
Common Problems 119160

Ubuntu 14.04 LTS repository 404 errors after end-of-life

🟡 Medium   ⏱ 5–30 min  Last verified: 18 August 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Common Problems 119159

Ubuntu 14.04 LTS apt repositories return 404 after EOL

🟠 High   ⏱ 5–30 min  Last verified: 18 August 2019 Affected versions: 14.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Common Problems 115431

Chronyd Time Drift Causing TLS and Repository Failures

🟡 Medium   ⏱ 5–30 min  Last verified: 18 August 2019 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Ubuntu 18.04 — pango1.0 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — pango1.0 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 August 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3750-1 Related CVEs: CVE-2018-15120 Upstream summary: Jeffrey M. discovered that Pango incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. Table of […]

Read more
openSUSE Tumbleweed — libykcs11 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libykcs11 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2018:2623-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-14779 CVE-2018-14780 Upstream summary: A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the […]

Read more
SLES 15 — libneon27 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libneon27 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2009:018 (see also SUSE bugzilla) Related CVEs: CVE-2009-2473 CVE-2009-2474 Upstream summary: neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause […]

Read more
SLES 15 — enigmail — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — enigmail — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2018:1329-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-17688 CVE-2017-17689 CVE-2018-12019 CVE-2014-5369 CVE-2019-12269 Upstream summary: The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, […]

Read more
Arch Linux — ettercap — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — ettercap — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201709-16 Related CVEs: CVE-2017-8366 CVE-2017-6430 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 0.8.2-4. Fixed in: 0.8.2-5. Group: AVG-212. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 12 — powerdns — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — powerdns — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: powerdns — denial of service Related CVEs: CVE-2005-2302 CVE-2012-0206 CVE-2015-1868 CVE-2015-5230 CVE-2015-5311 CVE-2015-5470 CVE-2016-2120 CVE-2016-6170  +12 more Upstream summary: PowerDNS Team reports: PowerDNS Security Advisory 2022-01: incomplete validation of incoming […]

Read more
CHAT