chris

Ubuntu 14.04 — maas — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — maas — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 October 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2431-2 Related CVEs: https://launchpad.net/bugs/1399016 Upstream summary: USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed an issue in the MAAS package, causing a regression. This update fixes the problem. We […]

Read more
SLES 12 — python-cupshelpers — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — python-cupshelpers — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 October 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-4405 Upstream summary: The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure […]

Read more
SLES 12 — libXi6 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libXi6 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 October 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1984 CVE-2013-1995 CVE-2013-1998 Upstream summary: Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a […]

Read more
Ubuntu 14.04 — nvidia-graphics-drivers-352-updates — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — nvidia-graphics-drivers-352-updates — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 September 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2814-1 Related CVEs: CVE-2015-7869 Upstream summary: It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue to possibly gain root […]

Read more
SLES 12 — alsa — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — alsa — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 September 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2009-0035 Upstream summary: alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts. […]

Read more
SLES 12 — newt-devel — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — newt-devel — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 September 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2009:017 (see also SUSE bugzilla) Related CVEs: CVE-2009-2905 Upstream summary: Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) […]

Read more
Ubuntu 14.04 — unity — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — unity — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 September 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2303-1 Related CVEs: https://launchpad.net/bugs/1349128 https://launchpad.net/bugs/1314247 https://launchpad.net/bugs/1313885 https://launchpad.net/bugs/1308850 Upstream summary: It was discovered that in certain circumstances Unity failed to successfully grab the keyboard when switching to the lock screen. A […]

Read more
SLES 12 — libmpfr4 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libmpfr4 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:9332 (see also SUSE bugzilla) Related CVEs: CVE-2014-9474 Upstream summary: Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to […]

Read more
SLES 12 — perl-Cyrus-IMAP — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — perl-Cyrus-IMAP — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 September 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:1457-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-8076 CVE-2015-8077 CVE-2015-8078 CVE-2009-3235 CVE-2011-3372 Upstream summary: The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows […]

Read more
CHAT