ubuntu

Ubuntu 20.04 — zabbix — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — zabbix — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6751-1 Related CVEs: CVE-2022-35229 CVE-2022-35230 CVE-2014-3005 CVE-2016-10134 CVE-2016-10742 CVE-2016-4338 CVE-2017-2824 CVE-2017-2825  +3 more Upstream summary: It was discovered that Zabbix incorrectly handled input data in the discovery and graphs pages. […]

Read more
Ubuntu 16.04 — tomcat8 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — tomcat8 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 March 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6943-1 Related CVEs: CVE-2020-9484 CVE-2021-25122 CVE-2021-41079 CVE-2022-23181 CVE-2022-29885 CVE-2020-13935 CVE-2020-1935 CVE-2019-12418  +12 more Upstream summary: It was discovered that Tomcat incorrectly handled certain uncommon PersistenceManager with FileStore configurations. A remote […]

Read more
Ubuntu 20.04 — lib3mf — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — lib3mf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6216-1 Related CVEs: CVE-2021-21772 Upstream summary: It was discovered that lib3mf did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted 3MF […]

Read more
Ubuntu 18.04 — monit — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — monit — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 March 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6571-1 Related CVEs: CVE-2022-26563 CVE-2019-11454 CVE-2019-11455 Upstream summary: Youssef Rebahi-Gilbert discovered that Monit did not properly process credentials for disabled accounts. An attacker could possibly use this issue to login […]

Read more
Common Problems 118046

Ubuntu 18.04 LTS – UFW policy change blocks SSH and remote administration – Fix & Prevention

🔴 Critical   ⏱ 5–30 min  Last verified: 23 March 2022 Affected versions: Ubuntu 18.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
Ubuntu 16.04 — exuberant-ctags — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — exuberant-ctags — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5820-1 Related CVEs: CVE-2022-4515 Upstream summary: Lorenz Hipp discovered a flaw in exuberant-ctags handling of the tag filename command-line argument. A crafted tag filename specified in the command line or […]

Read more
Ubuntu 20.04 — libetpan — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — libetpan — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7740-1 Related CVEs: CVE-2022-4121 Upstream summary: It was discovered that LibEtPan incorrectly handled memory when parsing IMAP STATUS responses. A remote attacker could possibly use this issue to cause LibEtPan […]

Read more
Ubuntu 20.04 — hivex — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — hivex — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5148-1 Related CVEs: CVE-2021-3504 Upstream summary: It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive information. Table […]

Read more
Ubuntu 16.04 — alpine — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — alpine — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 March 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7360-1 Related CVEs: CVE-2020-14929 CVE-2021-38370 CVE-2021-46853 Upstream summary: It was discovered that Alpine did not use a secure connection under certain circumstances. A remote attacker could possibly use this issue […]

Read more
Ubuntu 20.04 — node-fetch — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — node-fetch — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6158-1 Related CVEs: CVE-2022-0235 Upstream summary: It was discovered that Node Fetch incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted […]

Read more
CHAT