IT, Cloud & DevOps Blog

Ubuntu 14.04 — libssh — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libssh — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 January 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3795-3 Related CVEs: https://launchpad.net/bugs/1805348 CVE-2018-10933 CVE-2015-3146 CVE-2016-0739 CVE-2014-8132 Upstream summary: USN-3795-1 and USN-3795-2 fixed a vulnerability in libssh. The upstream fix introduced a regression. This update fixes the problem. Original […]

Read more
openSUSE Tumbleweed — libquicktime — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libquicktime — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:0610-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-2399 CVE-2017-9122 CVE-2017-9123 CVE-2017-9124 CVE-2017-9125 CVE-2017-9126 CVE-2017-9127 CVE-2017-9128 Upstream summary: Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to […]

Read more
FreeBSD 12 — gaim — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gaim — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libgadu — multiple vulnerabilities Related CVEs: CVE-2004-0005 CVE-2004-0006 CVE-2004-0007 CVE-2004-0008 CVE-2004-0500 CVE-2004-0754 CVE-2004-0784 CVE-2004-0785  +12 more Upstream summary: Wojtek Kaniewski reports: Multiple vulnerabilities have been found in libgadu, a library […]

Read more
FreeBSD 12 — fr-netscape — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — fr-netscape — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

Read more
FreeBSD 12 — gdcm — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gdcm — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gdcm — multiple vulnerabilities Related CVEs: CVE-2015-8396 CVE-2015-8397 Upstream summary: CENSUS S.A. reports: GDCM versions 2.6.0 and 2.6.1 (and possibly previous versions) are prone to an integer overflow vulnerability which […]

Read more
FreeBSD 12 — typo3-lts — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — typo3-lts — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: typo3 — Missing access check in Extbase Related CVEs: CVE-2016-5091 Upstream summary: TYPO3 reports: Extbase request handling fails to implement a proper access check for requested controller/ action combinations, which […]

Read more
Debian 9 — cgit — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — cgit — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 January 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-14912 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 12 — ldb — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ldb — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: samba — multiple vulnerabilities Related CVEs: CVE-2015-3223 CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-7540 CVE-2015-8467 Upstream summary: Samba team reports: [CVE-2015-3223] Malicious request can cause Samba LDAP server to hang, spinning using […]

Read more
FreeBSD 12 — freeciv-nox — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — freeciv-nox — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 January 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: freeciv — Denial of Service Vulnerabilities Related CVEs: CVE-2006-0047 CVE-2006-3913 Upstream summary: Secunia reports: Luigi Auriemma has reported a vulnerability in Freeciv, which can be exploited by malicious people to […]

Read more
openSUSE Tumbleweed — libgadu3 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libgadu3 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2008:023 (see also SUSE bugzilla) Related CVEs: CVE-2008-4776 CVE-2014-3775 Upstream summary: libgadu before 1.8.2 allows remote servers to cause a denial of service (crash) via a contact description with a large length, […]

Read more
CHAT