chris

Debian 9 — xorg-server — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — xorg-server — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 April 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-10971 CVE-2017-12176 CVE-2018-14665 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
Ubuntu 16.04 — librelp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — librelp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 April 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4828-1 Related CVEs: CVE-2018-1000140 Upstream summary: It was discovered that librelp did not properly manage x509 certificates, leading to a stack-based buffer overflow. A remote attacker could possibly use this […]

Read more
Ubuntu 14.04 — eject — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — eject — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 April 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3246-1 Related CVEs: CVE-2017-6964 Upstream summary: Ilja Van Sprundel discovered that dmcrypt-get-device incorrectly checked setuid and setgid return values. A local attacker could use this issue to execute code as […]

Read more
Ubuntu 16.04 — root-system — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — root-system — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 April 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4801-1 Related CVEs: CVE-2017-1000203 Upstream summary: It was discovered that ROOT incorrectly handled certain input arguments. An attacker could possibly use this issue to execute arbitrary code. Table of contents […]

Read more
Debian 9 — wavpack — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — wavpack — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 April 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-10536 CVE-2018-6767 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
SLES 12 — libadns1 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libadns1 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 April 2018 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2020:193-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-9103 CVE-2017-9104 CVE-2017-9105 CVE-2017-9106 CVE-2017-9107 CVE-2017-9108 CVE-2017-9109 Upstream summary: An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_next. […]

Read more
Debian 9 — mbedtls — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — mbedtls — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 April 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-14032 CVE-2017-18187 CVE-2018-0497 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

Read more
Debian 9 — gcab — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — gcab — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 April 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-5345 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 9 — bzr — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — bzr — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 April 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-14176 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 14.04 — libxfont — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libxfont — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 April 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3500-1 Related CVEs: CVE-2017-16611 CVE-2017-13720 CVE-2017-13722 CVE-2015-1802 CVE-2015-1803 CVE-2015-1804 CVE-2014-0209 CVE-2014-0210  +1 more Upstream summary: It was discovered that libXfont incorrectly followed symlinks when opening font files. A local unprivileged […]

Read more
CHAT