2019 - Page 427 of 527

FreeBSD 12 — mgetty+sendfax — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mgetty+sendfax — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mgetty+sendfax — symlink attack via insecure temporary files Related CVEs: CVE-2008-4936 Upstream summary: Debian reports: Faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack […]

Read more
Alpine Linux edge — libxfont2 — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — libxfont2 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.0.3-r0 📖 ~4 min read  •  Source: Alpine secdb entry — libxfont2 2.0.3-r0 Related CVEs: CVE-2017-16611 Upstream summary: Alpine community repository for vedge ships libxfont2 2.0.3-r0 which addresses CVE-2017-16611. Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 12 — lynx — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — lynx — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: lynx — SSL certificate validation error Related CVEs: CVE-2005-3120 CVE-2014-3566 CVE-2016-9179 Upstream summary: Axel Beckert reports: […] I was able to capture the password given on the commandline in traffic […]

Read more
SLES 15 — yubikey-manager — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — yubikey-manager — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2017-15631 Upstream summary: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-workmode variable in the pptp_client.lua file. Table […]

Read more
openSUSE Tumbleweed — libvpx6 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libvpx6 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2020:0105-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-2126 CVE-2017-0641 CVE-2017-13194 CVE-2019-9232 CVE-2019-9371 CVE-2019-9433 CVE-2019-9325 Upstream summary: In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of […]

Read more
Arch Linux — opendoas — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — opendoas — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202102-8 Related CVEs: CVE-2019-25016 Upstream summary: Type: privilege escalation. Status: Fixed. Affected: 6.6.1-2. Fixed in: 6.8.1-2. Group: AVG-1504. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
FreeBSD 12 — linux-c6-tiff — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-c6-tiff — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tiff — multiple vulnerabilities Related CVEs: CVE-2015-8665 CVE-2015-8683 CVE-2015-8870 CVE-2016-5314 CVE-2016-5320 CVE-2016-5652 CVE-2016-5875 CVE-2016-9533  +12 more Upstream summary: NVD reports: Please reference CVE/URL list for details Table of contents Symptom […]

Read more
openSUSE Tumbleweed — conky — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — conky — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2011-3616 Upstream summary: The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on /tmp/.cesf. Table […]

Read more
FreeBSD 12 — wzdftpd — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wzdftpd — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wzdftpd — remote DoS Upstream summary: wzdftpd contains a potential remote Denial-of-Service. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]

Read more
SLES 12 — netpbm — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — netpbm — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 May 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0434-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-5849 CVE-2017-2579 CVE-2017-2580 CVE-2017-2581 CVE-2017-2586 CVE-2017-2587 CVE-2018-8975 Upstream summary: tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers […]

Read more
CHAT