Operations

Debian 11 — gnu-smalltalk — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gnu-smalltalk — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]

Read more
FreeBSD 13 — py311-ansible — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py311-ansible — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-ansible — multiple vulnerabilities Related CVEs: CVE-2020-25635 CVE-2020-25636 CVE-2021-3532 Upstream summary: abeluck reports: A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is […]

Read more
Alpine Linux edge — umoci — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — umoci — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.4.7-r0 📖 ~4 min read  •  Source: Alpine secdb entry — umoci 0.4.7-r0 Related CVEs: CVE-2021-29136 Upstream summary: Alpine community repository for vedge ships umoci 0.4.7-r0 which addresses CVE-2021-29136. Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 13 — linux-blackdown-jdk — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — linux-blackdown-jdk — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jdk/jre — Applet Caching May Allow Network Access Restrictions to be Circumvented Related CVEs: CVE-2004-1029 CVE-2005-1080 CVE-2007-5232 Upstream summary: SUN reports: A vulnerability in the Java Runtime Environment (JRE) with […]

Read more
Debian 11 — pound — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pound — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-2026 CVE-2005-1391 CVE-2005-3751 CVE-2009-3555 CVE-2011-3389 CVE-2012-4929 CVE-2014-3566 CVE-2016-10711  +1 more Upstream summary: Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote […]

Read more
Debian 11 — slrn — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — slrn — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-0740 Upstream summary: Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument. […]

Read more
Debian 11 — python-oslo.privsep — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — python-oslo.privsep — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-38065 Upstream summary: A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within […]

Read more
Arch Linux — libgcrypt — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — libgcrypt — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202101-45 Related CVEs: CVE-2021-3345 CVE-2018-0495 CVE-2017-7526 CVE-2017-0379 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 1.9.0-2. Fixed in: 1.9.1-1. Group: AVG-1505. Table of contents Symptom & Impact Environment & […]

Read more
Ubuntu 18.04 — advancecomp — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — advancecomp — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5838-1 Related CVEs: CVE-2022-35014 CVE-2022-35015 CVE-2022-35016 CVE-2022-35017 CVE-2022-35018 CVE-2022-35019 CVE-2022-35020 CVE-2019-8379  +2 more Upstream summary: It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on […]

Read more
CHAT