IT, Cloud & DevOps Blog

SLES 15 — perl-LWP-Protocol-https — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl-LWP-Protocol-https — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 May 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3230 Upstream summary: The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server […]

Read more
Alpine Linux edge — libbsd — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — libbsd — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.10.0-r0 📖 ~4 min read  •  Source: Alpine secdb entry — libbsd 0.10.0-r0 Related CVEs: CVE-2019-20367 Upstream summary: Alpine main repository for vedge ships libbsd 0.10.0-r0 which addresses CVE-2019-20367. Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 12 — tshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — tshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wireshark — multiple security issues Related CVEs: CVE-2010-3445 CVE-2012-0041 CVE-2012-0066 CVE-2012-0067 CVE-2012-0068 CVE-2012-3548 CVE-2012-4048 CVE-2012-4049  +12 more Upstream summary: wireshark developers reports: wnpa-sec-2018-05. IEEE 802.11 dissector crash. (CVE-2018-7335) wnpa-sec-2018-06. Large […]

Read more
Debian 9 — trafficserver — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — trafficserver — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 May 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-5660 CVE-2018-1318 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
Debian 9 — imagemagick — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — imagemagick — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 May 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-9439 CVE-2017-10995 CVE-2017-11352 CVE-2017-9500 CVE-2017-12877 CVE-2018-5248 CVE-2018-16412 CVE-2019-9956  +2 more Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]

Read more
Arch Linux — msmtp — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — msmtp — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201902-22 Related CVEs: CVE-2019-8337 Upstream summary: Type: certificate verification bypass. Status: Fixed. Affected: 1.8.2-1. Fixed in: 1.8.3-1. Group: AVG-905. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
openSUSE Tumbleweed — openjpeg — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — openjpeg — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2009-5030 CVE-2012-3358 CVE-2012-3535 CVE-2013-1447 CVE-2013-4289 CVE-2013-4290 CVE-2013-6045 CVE-2013-6052  +3 more Upstream summary: The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers […]

Read more
Debian 9 — uwsgi — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — uwsgi — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 May 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-7490 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 14.04 — xmltooling — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — xmltooling — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 May 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3921-1 Related CVEs: CVE-2019-9628 Upstream summary: It was discovered that XMLTooling incorrectly handled certain XML files with invalid data. An attacker could use this issue to cause XMLTooling to crash, […]

Read more
Arch Linux — rkhunter — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — rkhunter — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201707-24 Related CVEs: CVE-2017-7480 Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 1.4.2-2. Fixed in: 1.4.4-1. Group: AVG-334. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
CHAT