IT, Cloud & DevOps Blog

SLES 15 — libvncclient0 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libvncclient0 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • August 11, 2019
  • Linux
  • Comment off

🔴 Critical   ⏱ 15–90 min  Last verified: 11 August 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0060-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-15126 CVE-2018-15127 CVE-2018-20749 CVE-2018-20750 CVE-2018-6307 CVE-2017-18922 CVE-2018-20019 CVE-2018-20020  +12 more Upstream summary: LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file […]

Read more
How to Set Timezone and NTP on SLES 15 — step-by-step SUSE Linux Enterprise 15 tutorial on Progressive Robot

How to Set Timezone and NTP on SLES 15

Introduction This tutorial covers How to Set Timezone and NTP on SLES 15 on SLES 15. SLES 15 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 15 system is up to date: zypper […]

Read more
FreeBSD 12 — oniguruma — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — oniguruma — multiple vulnerabilities (6 CVEs) — patch and remediation guide

  • August 10, 2019
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 10 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: oniguruma — multiple vulnerabilities Related CVEs: CVE-2017-9224 CVE-2017-9226 CVE-2017-9227 CVE-2017-9228 CVE-2019-13224 CVE-2019-13225 Upstream summary: A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, […]

Read more
Common Problems 113426

Windows Server 2012 R2 – tcpip.sys DPC latency spikes degrade throughput – Fix and Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 10 August 2019 Affected versions: Windows Server 2012 R2 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more
FreeBSD 12 — mpg — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mpg — multiple vulnerabilities (6 CVEs) — patch and remediation guide

  • August 10, 2019
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 10 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mpg123 — buffer overflow vulnerability Related CVEs: CVE-2003-0577 CVE-2003-0865 CVE-2004-0805 CVE-2004-0982 CVE-2004-0991 CVE-2004-1284 Upstream summary: Yuri D'Elia has found a buffer overflow vulnerability in mpg123's parsing of frame headers in […]

Read more
FreeBSD 12 — ruby+oniguruma — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ruby+oniguruma — multiple vulnerabilities (13 CVEs) — patch and remediation guide

  • August 10, 2019
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 10 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Multiple implementations — DoS via hash algorithm collision Related CVEs: CVE-2006-5467 CVE-2006-6303 CVE-2008-1447 CVE-2008-2726 CVE-2008-3655 CVE-2008-3656 CVE-2008-3905 CVE-2009-1904  +5 more Upstream summary: oCERT reports: A variety of programming languages suffer […]

Read more
openSUSE Tumbleweed — coolkey — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — coolkey — vulnerability — patch and remediation guide

  • August 10, 2019
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2007-4129 Upstream summary: CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory. Table of […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT