March 2019 - Page 11 of 23

openSUSE Tumbleweed — libopus0 — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libopus0 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2017:0510-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-0381 Upstream summary: An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its […]

Read more
Amazon Linux 2 — perl-File-Find-Rule — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — perl-File-Find-Rule — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-2891 Related CVEs: CVE-2011-10007 Upstream summary: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with the […]

Read more
openSUSE Tumbleweed — java — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — java — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2012:0309-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-0497 CVE-2012-1682 CVE-2012-1713 CVE-2012-1716 CVE-2012-1723 CVE-2012-3216 CVE-2012-4681 CVE-2012-5068  +12 more Upstream summary: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE […]

Read more
FreeBSD 12 — xview — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xview — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xview — multiple buffer overflows in xv_parse_one Related CVEs: CVE-2005-0076 Upstream summary: A Debian Security Advisory reports: Erik Sjölund discovered that programs linked against xview are vulnerable to a number […]

Read more
SLES 12 — libpodofo0_9_2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libpodofo0_9_2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3541-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-8981 CVE-2017-6841 CVE-2017-6842 CVE-2017-6849 CVE-2017-8378 CVE-2019-10723 CVE-2018-12983 CVE-2019-20093  +12 more Upstream summary: Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers […]

Read more
FreeBSD 12 — libxcb — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libxcb — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xorg — protocol handling issues in X Window System client libraries Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: freedesktop.org reports: Ilja van Sprundel, […]

Read more
openSUSE Tumbleweed — criu — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — criu — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2015-5228 CVE-2015-5231 Upstream summary: The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take […]

Read more
Gentoo Linux — net-analyzer/icinga — vulnerability — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — net-analyzer/icinga — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202007-31 Related CVEs: CVE-2017-16882 Upstream summary: It was discovered that Icinga’s installed files have insecure permissions, possibly allowing root privilege escalation. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
CHAT