March 2019 - Page 2 of 23

SLES 15 — file — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — file — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:177-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-18218 CVE-2012-1571 CVE-2014-3710 CVE-2014-8116 CVE-2014-8117 CVE-2017-1000249 CVE-2019-8905 CVE-2019-8906  +2 more Upstream summary: cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of […]

Read more
openSUSE Tumbleweed — python36-python-gnupg — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — python36-python-gnupg — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2019:0143-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-6690 Upstream summary: python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg […]

Read more
Arch Linux — libextractor — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — libextractor — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201807-16 Related CVEs: CVE-2017-17440 CVE-2017-15922 Upstream summary: Type: denial of service. Status: Fixed. Affected: 1.6-3. Fixed in: 1.7-1. Group: AVG-541. Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
FreeBSD 12 — ghostscript9-base — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ghostscript9-base — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]

Read more
FreeBSD 12 — unzip — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — unzip — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unzip — multiple vulnerabilities Related CVEs: CVE-2005-2475 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 CVE-2014-9636 CVE-2015-1315 CVE-2015-7696 CVE-2015-7697 Upstream summary: Gustavo Grieco reports: Two issues were found in unzip 6.0: * A heap overflow […]

Read more
Ubuntu 16.04 — kconfig — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — kconfig — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4100-1 Related CVEs: CVE-2016-6232 CVE-2019-14744 Upstream summary: It was discovered that KConfig and KDE libraries have a vulnerability where an attacker could hide malicious code under desktop and configuration files. […]

Read more
Ubuntu 16.04 — vcftools — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — vcftools — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3974-1 Related CVEs: CVE-2018-11099 CVE-2018-11129 CVE-2018-11130 Upstream summary: It was discovered that VCFtools improperly handled certain input. If a user was tricked into opening a crafted input file, VCFtools could […]

Read more
Ubuntu 16.04 — fuse — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — fuse — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5326-1 Related CVEs: CVE-2018-10906 Upstream summary: It was discovered that FUSE is susceptible to a restriction bypass flaw on a system that has SELinux active. A local attacker with non-root […]

Read more
SLES 15 — libXdmcp6 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libXdmcp6 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1862-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-2625 Upstream summary: It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a […]

Read more
openSUSE Tumbleweed — python-Pillow — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — python-Pillow — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:0777-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-3589 CVE-2014-3598 CVE-2016-0740 CVE-2016-0775 Upstream summary: PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause […]

Read more
CHAT