Package Management

Ubuntu 20.04 — json-c — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — json-c — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 June 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4360-4 Related CVEs: CVE-2020-12762 https://launchpad.net/bugs/1878723 Upstream summary: USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak that was reverted in USN-4360-2 and USN-4360-3. This update provides […]

Read more
SLES 15 — pacemaker — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — pacemaker — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 June 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:3054-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25654 CVE-2018-16877 CVE-2018-16878 CVE-2019-3885 Upstream summary: An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in […]

Read more
openSUSE Tumbleweed — python38-httpx — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — python38-httpx — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-41945 Upstream summary: Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`. Table of contents […]

Read more
Oracle Linux 8 — libexif — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — libexif — vulnerability — patch and remediation guide (ELSA-2020-5393)

🟠 High   ⏱ 15–60 min  Last verified: 9 June 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-5393 Related CVEs: CVE-2020-0452 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 13 — libXt — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libXt — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xorg — protocol handling issues in X Window System client libraries Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: freedesktop.org reports: Ilja van Sprundel, […]

Read more
Oracle Linux 8 — bind security, bug fix, and — enhancement update — new behaviour and fixes — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — bind security, bug fix, and — enhancement update — new behaviour and fixes (ELSA-2020-4500)

🟡 Medium   ⏱ 10–30 min  Last verified: 8 June 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2020-4500 Related CVEs: CVE-2020-8623 CVE-2020-8622 CVE-2020-8619 CVE-2020-8624 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more
FreeBSD 13 — zziplib — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zziplib — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zziplib – multiple vulnerabilities Related CVEs: CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5977 CVE-2017-5978 CVE-2017-5979 CVE-2017-5980 CVE-2017-5981  +9 more Upstream summary: NIST reports (by search in the range 2017/01/01 – 2018/07/06): 17 security […]

Read more
AlmaLinux 8 — libkkc-data — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — libkkc-data — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2019:3466 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 13 — dovecot-managesieve — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — dovecot-managesieve — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dovecot-managesieve — Script Name Directory Traversal Vulnerability Related CVEs: CVE-2008-5301 Upstream summary: Secunia reports: The security issue is caused due to an input validation error when processing script names. This […]

Read more
CHAT