January 2018 - Page 3 of 3

Debian 9 — pyjwt — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — pyjwt — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-11424 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 14.04 — gnutls26 — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gnutls26 — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3318-1 Related CVEs: CVE-2017-7507 CVE-2017-7869 CVE-2016-8610 CVE-2016-7444 CVE-2017-5334 CVE-2017-5335 CVE-2017-5336 CVE-2017-5337  +7 more Upstream summary: Hubert Kario discovered that GnuTLS incorrectly handled decoding a status response TLS extension. A remote […]

Read more
Ubuntu 14.04 — libxdmcp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libxdmcp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5690-1 Related CVEs: CVE-2017-2625 Upstream summary: It was discovered that libXdmcp was generating weak session keys. A local attacker could possibly use this issue to perform a brute force attack […]

Read more
SLES 12 — libplist1 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libplist1 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1368-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-5209 CVE-2017-5834 CVE-2017-6440 CVE-2017-7982 CVE-2017-5545 CVE-2017-5835 CVE-2017-5836 Upstream summary: The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information […]

Read more
CHAT