Logging Monitoring

Debian 11 — php-mdb2 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — php-mdb2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-5934 Upstream summary: The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents […]

Read more
Gentoo Linux — net-dns/bind — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — net-dns/bind — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202008-19 Related CVEs: CVE-2020-8620 CVE-2020-8621 CVE-2020-8622 CVE-2020-8623 CVE-2020-8624 CVE-2021-25219 CVE-2021-25220 CVE-2022-0396  +6 more Upstream summary: Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Table […]

Read more
FreeBSD 13 — subversion-perl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — subversion-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: subversion — WebDAV fails to protect metadata Related CVEs: CVE-2004-0749 Upstream summary: In some situations, subversion metadata may be unexpectedly disclosed via WebDAV. A subversion advisory states: mod_authz_svn, the Apache […]

Read more
Debian 11 — krusader — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — krusader — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-3856 Upstream summary: The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords […]

Read more
Debian 11 — eldav — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — eldav — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0438 Upstream summary: eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files. […]

Read more
Debian 11 — fuzz — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — fuzz — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0261 Upstream summary: fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges. Table of contents Symptom & Impact Environment & […]

Read more
openSUSE Tumbleweed — libdxfrw1 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libdxfrw1 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:0067-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-21898 CVE-2021-21899 CVE-2021-21900 Upstream summary: A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to […]

Read more
Debian 11 — libxxf86dga — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libxxf86dga — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1991 CVE-2013-2000 Upstream summary: Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors […]

Read more
Ubuntu 18.04 — libsepol — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libsepol — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 January 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5391-1 Related CVEs: CVE-2021-36084 CVE-2021-36085 CVE-2021-36086 CVE-2021-36087 Upstream summary: Nicolas Iooss discovered that libsepol incorrectly handled memory when handling policies. An attacker could possibly use this issue to cause a […]

Read more
IBM AIX 7.1 — CVE-2021-29888 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.1

IBM AIX 7.1 — CVE-2021-29888 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 24 January 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2021-29888, IBM Support Bulletin CVE: CVE-2021-29888 NVD summary: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from […]

Read more
CHAT