February 2019 - Page 9 of 20

Ubuntu 18.04 — rssh — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — rssh — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3946-1 Related CVEs: CVE-2019-1000018 CVE-2019-3463 CVE-2019-3464 Upstream summary: It was discovered that rssh incorrectly handled certain command-line arguments and environment variables. An authenticated user could bypass rssh's command restrictions, allowing […]

Read more
SLES 15 — sblim-sfcb — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — sblim-sfcb — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-6644 Upstream summary: SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI. […]

Read more
FreeBSD 12 — mozilla-gtk — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mozilla-gtk — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-0722 CVE-2004-0758  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

Read more
Gentoo Linux — net-ftp/filezilla — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — net-ftp/filezilla — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202007-51 Related CVEs: CVE-2019-5429 Upstream summary: It was discovered that FileZilla uses an untrusted search path. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
openSUSE Tumbleweed — libheimdal — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libheimdal — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-6594 CVE-2017-17439 CVE-2019-12098 Upstream summary: The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by […]

Read more
Arch Linux — botan — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — botan — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201710-17 Related CVEs: CVE-2017-14737 Upstream summary: Type: information disclosure. Status: Fixed. Affected: 2.2.0-1. Fixed in: 2.3.0-1. Group: AVG-416. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
Arch Linux — smb4k — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — smb4k — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201705-11 Related CVEs: CVE-2017-8849 Upstream summary: Type: privilege escalation. Status: Fixed. Affected: 2.0.0-1. Fixed in: 2.0.0-2. Group: AVG-268. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
Ubuntu 14.04 — flask — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — flask — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4378-1 Related CVEs: CVE-2018-1000656 Upstream summary: It was discovered that Flask incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. Table of […]

Read more
FreeBSD 12 — zabbix — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zabbix — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zabbix — php frontend multiple vulnerabilities Upstream summary: Secunia reports: Some vulnerabilities have been reported in the ZABBIX PHP frontend, which can be exploited by malicious people to conduct cross-site […]

Read more
FreeBSD 12 — jftpgw — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — jftpgw — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Arbitrary code execution via a format string vulnerability in jftpgw Related CVEs: CVE-2004-0448 Upstream summary: The log functions in jftpgw may allow remotely authenticated user to execute arbitrary code via […]

Read more
CHAT