chris

FreeBSD 12 — joomla — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — joomla — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: joomla3 — vulnerabilitiesw Related CVEs: CVE-2006-6832 CVE-2006-6833 CVE-2006-6834 CVE-2007-4188 CVE-2007-4189 CVE-2007-4190 CVE-2007-5577 CVE-2008-3681  +12 more Upstream summary: JSST reports: Inadequate escaping in mod_banners leads to a stored XSS vulnerability. Inadequate […]

Read more
FreeBSD 12 — ntp-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ntp-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ntp — Multiple vulnerabilities Related CVEs: CVE-2014-9293 CVE-2014-9294 CVE-2014-9295 CVE-2014-9296 CVE-2015-1798 CVE-2015-1799 CVE-2015-5300 CVE-2015-7691  +12 more Upstream summary: nwtime.org reports: Three ntp vulnerabilities, Depending on configuration, may have little impact […]

Read more
FreeBSD 12 — anubis — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — anubis — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: GNU Anubis buffer overflows and format string vulnerabilities Related CVEs: CVE-2004-0353 CVE-2004-0354 Upstream summary: Ulf Härnhammar discovered several vulnerabilities in GNU Anubis. Unsafe uses of `sscanf'. The `%s' format specifier […]

Read more
openSUSE Tumbleweed — wesnoth — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — wesnoth — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-1999023 CVE-2015-0844 Upstream summary: The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can […]

Read more
FreeBSD 12 — kdebase-workspace — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — kdebase-workspace — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: KDM — local privilege escalation vulnerability Related CVEs: CVE-2010-0436 Upstream summary: KDE Security Advisory reports: KDM contains a race condition that allows local attackers to make arbitrary files on the […]

Read more
FreeBSD 12 — drm-fbsd12.0-kmod — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — drm-fbsd12.0-kmod — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: drm graphics drivers — potential information disclusure via local access Related CVEs: CVE-2019-0154 CVE-2019-11112 CVE-2019-14615 Upstream summary: Intel reports: .A potential security vulnerability in Intel(R) Processor Graphics may allow information […]

Read more
FreeBSD 12 — p5-Crypt-OpenPGP — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — p5-Crypt-OpenPGP — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gnupg — OpenPGP symmetric encryption vulnerability Related CVEs: CVE-2005-0366 Upstream summary: Serge Mister and Robert Zuccherato reports that the OpenPGP protocol is vulnerable to a cryptographic attack when using symmetric […]

Read more
openSUSE Tumbleweed — libspiro1 — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libspiro1 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2019-19847 Upstream summary: Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
FreeBSD 12 — phpnuke — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — phpnuke — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Several vulnerabilities found in PHPNuke Related CVEs: CVE-2003-0279 CVE-2003-0318 CVE-2004-0266 CVE-2004-0269 Upstream summary: Janek Vind "waraxe" reports that several issues in the PHPNuke software may be exploited via carefully crafted […]

Read more
Ubuntu 16.04 — python-crypto — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — python-crypto — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3616-1 Related CVEs: CVE-2018-6594 CVE-2013-7459 Upstream summary: It was discovered that Python Crypto incorrectly generated ElGamal key parameters. A remote attacker could possibly use this issue to obtain sensitive information. […]

Read more
CHAT