February 2024 - Page 36 of 91

SLES 15 — libqb20 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libqb20 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3727-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-39976 Upstream summary: log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. Table of […]

Read more
SLES 12 — opensc — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — opensc — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2024 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:3582-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-42781 CVE-2021-42782 CVE-2023-5992 CVE-2023-40661 CVE-2023-2977 CVE-2019-15945 CVE-2019-15946 CVE-2019-19479  +12 more Upstream summary: Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c […]

Read more
Alpine Linux 3.18 — miniupnpd — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux 3.18

Alpine Linux 3.18 — miniupnpd — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 2.2.2-r0 📖 ~4 min read  •  Source: Alpine secdb entry — miniupnpd 2.2.2-r0 Related CVEs: CVE-2019-12107 CVE-2019-12108 CVE-2019-12109 CVE-2019-12110 CVE-2019-12111 Upstream summary: Alpine community repository for vv3.18 ships miniupnpd 2.2.2-r0 which addresses CVE-2019-12107. Table of contents […]

Read more
SLES 15 — go1.20 — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — go1.20 — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2024 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:4104-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-39326 CVE-2023-39325 CVE-2023-39323 CVE-2023-45285 CVE-2023-45283 CVE-2023-45284 CVE-2023-39318 CVE-2023-39319 Upstream summary: A malicious HTTP sender can use chunk extensions to cause a receiver reading from a […]

Read more
Oracle Linux 9 — tigervnc — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — tigervnc — vulnerability — patch and remediation guide (ELSA-2024-0557)

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2024 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2024-0557 Related CVEs: CVE-2024-21885 CVE-2023-6816 CVE-2024-21886 CVE-2024-0229 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more
Oracle Linux 8 — webkit2gtk3 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — webkit2gtk3 — vulnerability — patch and remediation guide (ELSA-2023-3108)

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2024 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-3108 Related CVEs: CVE-2023-2203 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 9 — qemu-kvm — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 9

Oracle Linux 9 — qemu-kvm — vulnerability — patch and remediation guide (ELSA-2024-4278)

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2024 Affected versions: Oracle Linux 9 📖 ~4 min read  •  Source: ELSA advisory ELSA-2024-4278 Related CVEs: CVE-2024-4467 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 8 — openssl — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — openssl — vulnerability — patch and remediation guide (ELSA-2023-12213)

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2024 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2023-12213 Related CVEs: CVE-2023-0286 CVE-2023-0215 CVE-2022-4304 CVE-2022-4450 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more
openSUSE Leap 15.5 — cacti — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — cacti — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0274-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-25641 CVE-2024-34340 CVE-2023-39361 CVE-2024-27082 CVE-2024-31445 CVE-2024-31458 CVE-2024-31459 CVE-2024-31460  +12 more Upstream summary: Cacti provides an operational monitoring and fault management framework. Prior to version […]

Read more
Oracle Linux 8 — edk2 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — edk2 — vulnerability — patch and remediation guide (ELSA-2024-12795)

🟡 Medium   ⏱ 10–30 min  Last verified: 18 February 2024 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2024-12795 Related CVEs: CVE-2023-45236 CVE-2024-1298 CVE-2024-25742 CVE-2023-45237 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]

Read more
CHAT