Operations

Debian 11 — mercurial — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — mercurial — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-2942 CVE-2008-4297 CVE-2010-4237 CVE-2014-9390 CVE-2014-9462 CVE-2016-3068 CVE-2016-3069 CVE-2016-3105  +12 more Upstream summary: Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via […]

Read more
Windows Server 2022 — KB5028948 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2022

Windows Server 2022 — KB5028948 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read  •  Source: Microsoft KB5028948 • MSRC update-guide entry Related CVEs: CVE-2023-36873 CVE-2023-36899 Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Debian 11 — gambas3 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gambas3 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 January 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1809 Upstream summary: Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories. Table […]

Read more
Ubuntu 16.04 — libtommath — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libtommath — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 January 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6402-1 Related CVEs: CVE-2023-36328 Upstream summary: It was discovered that LibTomMath incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code and cause a denial […]

Read more
Ubuntu 18.04 — jhead — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — jhead — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 January 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6110-1 Related CVEs: CVE-2021-28275 CVE-2021-28277 CVE-2021-3496 https://launchpad.net/bugs/2020068 CVE-2021-34055 CVE-2022-41751 CVE-2019-1010301 CVE-2019-1010302  +6 more Upstream summary: It was discovered that Jhead did not properly handle certain crafted Canon images when processing […]

Read more
Windows Server 2019 — KB5031442 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2019

Windows Server 2019 — KB5031442 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read  •  Source: Microsoft KB5031442 • MSRC update-guide entry Related CVEs: CVE-2023-35349 CVE-2023-41765 CVE-2023-41770 CVE-2023-41768 CVE-2023-41767 CVE-2023-41771 CVE-2023-41769 CVE-2023-41773  +12 more Affected components: Windows Server 2019 (Server Core installation) Table of contents Symptom & Impact Environment […]

Read more
Ubuntu 20.04 — audiofile — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — audiofile — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 January 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6558-1 Related CVEs: CVE-2018-13440 CVE-2018-17095 CVE-2019-13147 CVE-2022-24599 Upstream summary: It was discovered that audiofile could be made to dereference invalid memory. If a user or an automated system were tricked […]

Read more
Ubuntu 20.04 — shadow — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — shadow — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 January 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6640-1 Related CVEs: CVE-2023-4641 https://launchpad.net/bugs/1998169 CVE-2013-4235 Upstream summary: It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker could possibly use this issue […]

Read more
Windows Server 2016 — KB5030271 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2016

Windows Server 2016 — KB5030271 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read  •  Source: Microsoft KB5030271 • MSRC update-guide entry Related CVEs: CVE-2023-38161 CVE-2023-38152 CVE-2023-38144 CVE-2023-38143 CVE-2023-38142 CVE-2023-38141 CVE-2023-38139 CVE-2023-36804  +2 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Table of contents Symptom […]

Read more
CHAT