IT, Cloud & DevOps Blog

Arch Linux — clamav — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — clamav — multiple vulnerabilities (14 CVEs) — patch and remediation guide

  • June 2, 2019
  • Linux
  • Comment off

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201803-14 Related CVEs: CVE-2018-1000085 CVE-2018-0202 CVE-2017-6419 CVE-2017-11423 CVE-2012-6706 CVE-2017-6420 CVE-2017-6418 CVE-2017-12380  +6 more Upstream summary: Type: multiple issues. Status: Fixed. Affected: 0.99.3-1. Fixed in: 0.99.4-1. Group: AVG-602. Table of contents […]

Read more
SLES 15 — yast2-rmt — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — yast2-rmt — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • June 2, 2019
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 2 June 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0629-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-20105 CVE-2018-17957 Upstream summary: A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local […]

Read more
FreeBSD 12 — libvorbis — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libvorbis — multiple vulnerabilities (11 CVEs) — patch and remediation guide

  • June 1, 2019
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 1 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libvorbis — two vulnerabilities Related CVEs: CVE-2007-3106 CVE-2008-1419 CVE-2008-1420 CVE-2008-1423 CVE-2009-3379 CVE-2017-14160 CVE-2017-14632 CVE-2017-14633  +3 more Upstream summary: Two vulnerabilities were fixed in the upstream repository: The bark_noise_hybridmp function allows […]

Read more
FreeBSD 12 — timidity++-xskin — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — timidity++-xskin — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • June 1, 2019
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 1 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: TiMidity++ — Multiple vulnerabilities Related CVEs: CVE-2017-11546 CVE-2017-11547 CVE-2017-11549 Upstream summary: qflb.wu of DBAPPSecurity reports: Ihe insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 can cause a denial of service(divide-by-zero error […]

Read more
openSUSE Tumbleweed — v8 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — v8 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

  • June 1, 2019
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-5037 CVE-2013-6638 CVE-2013-6639 CVE-2013-6640 CVE-2014-1705 CVE-2014-1730 CVE-2014-1735 Upstream summary: Google V8 computes hash values for form parameters without restricting the ability to trigger hash collisions […]

Read more
FreeBSD 12 — spamdyke — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — spamdyke — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • June 1, 2019
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 1 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: spamdyke — Buffer Overflow Vulnerabilities Related CVEs: CVE-2008-2784 CVE-2012-0070 CVE-2012-0802 Upstream summary: Secunia reports: Fixed a number of very serious errors in the usage of snprintf()/vsnprintf(). The return value was […]

Read more
Debian 9 — ldb — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — ldb — vulnerability — patch and remediation guide

  • June 1, 2019
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-3824 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Debian 9 — jruby — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — jruby — vulnerability — patch and remediation guide

  • June 1, 2019
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1000073 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
openSUSE Tumbleweed — libICE6 — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libICE6 — vulnerability — patch and remediation guide

  • June 1, 2019
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:1835-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-2626 Upstream summary: It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw […]

Read more
Ubuntu 18.04 — devscripts — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — devscripts — vulnerability — patch and remediation guide

  • June 1, 2019
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3704-1 Related CVEs: CVE-2018-13043 Upstream summary: It was discovered that devscripts incorrectly handled certain YAML files. An attacker could possibly use this to execute arbitrary code. Table of contents Symptom […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT