2021 - Page 223 of 759

openSUSE Tumbleweed — python36-httplib2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — python36-httplib2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • September 18, 2021
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:0772-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-11078 CVE-2021-21240 Upstream summary: In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send […]

Read more
Debian 11 — ruby-grape — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ruby-grape — vulnerability — patch and remediation guide

  • September 18, 2021
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 18 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-3769 Upstream summary: ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
Debian 11 — libgcrypt20 — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libgcrypt20 — multiple vulnerabilities (14 CVEs) — patch and remediation guide

  • September 18, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 18 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-3591 CVE-2014-5270 CVE-2015-0837 CVE-2015-7511 CVE-2016-6313 CVE-2017-0379 CVE-2017-7526 CVE-2017-9526  +6 more Upstream summary: Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which […]

Read more
SLES 15 — libSDL — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libSDL — multiple vulnerabilities (15 CVEs) — patch and remediation guide

  • September 18, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 18 September 2021 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1218-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-33657 CVE-2020-14409 CVE-2020-14410 CVE-2019-13616 CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575  +7 more Upstream summary: There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) […]

Read more
openSUSE Tumbleweed — privoxy — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — privoxy — multiple vulnerabilities (19 CVEs) — patch and remediation guide

  • September 18, 2021
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:1646-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-44540 CVE-2021-44541 CVE-2021-44542 CVE-2021-20216 CVE-2021-20217 CVE-2021-20272 CVE-2021-20273 CVE-2021-20274  +11 more Upstream summary: A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing […]

Read more
FreeBSD 13 — ethereal — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ethereal — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • September 18, 2021
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 18 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wireshark — PCNFSD Dissector Denial of Service Vulnerability Related CVEs: CVE-2004-0176 CVE-2004-0365 CVE-2004-0367 CVE-2004-0504 CVE-2004-0505 CVE-2004-0506 CVE-2004-0507 CVE-2004-0633  +12 more Upstream summary: Secunia reports: A vulnerability has been reported in […]

Read more
FreeBSD 13 — claws-mail — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — claws-mail — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • September 17, 2021
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 17 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: claws-mail — no bounds checking on the output buffer in conv_jistoeuc, conv_euctojis, conv_sjistoeuc Related CVEs: CVE-2007-1558 CVE-2007-2958 CVE-2007-6208 CVE-2015-8614 Upstream summary: DrWhax reports: So in codeconv.c there is a function […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT