IT, Cloud & DevOps Blog

SLES 12 — lib3ds — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — lib3ds — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 28 March 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2010-0280 Upstream summary: Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of […]

Read more
SLES 12 — facter — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — facter — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 March 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2014:0880-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-3248 Upstream summary: Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before […]

Read more
Ubuntu 14.04 — rsyslog — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — rsyslog — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2381-1 Related CVEs: CVE-2014-3634 CVE-2014-3683 Upstream summary: It was discovered that Rsyslog incorrectly handled invalid PRI values. An attacker could use this issue to send malformed messages to the Rsyslog […]

Read more
Ubuntu 14.04 — python-dbusmock — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — python-dbusmock — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2618-1 Related CVEs: CVE-2015-1326 Upstream summary: It was discovered that python-dbusmock incorrectly handled template loading from shared directories. A local attacker could possibly use this issue to execute arbitrary code. […]

Read more
SLES 12 — pam_ssh — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — pam_ssh — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 March 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2009-1273 Upstream summary: pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the […]

Read more
SLES 12 — checkbashisms — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — checkbashisms — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 March 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2012-2240 CVE-2014-1833 CVE-2012-2241 CVE-2012-3500 Upstream summary: scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands." Table of […]

Read more
Red Hat Enterprise Linux 7 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Red Hat Enterprise Linux 7

Red Hat Enterprise Linux 7 — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 7 📖 ~4 min read  •  Source: Red Hat advisory RHSA RHSA-2026:8578 Related CVEs: CVE-2006-10002 CVE-2006-10003 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Ubuntu 14.04 — vnc4 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — vnc4 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 March 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4772-1 Related CVEs: CVE-2015-0255 CVE-2015-1283 Upstream summary: USN-2500-1 addressed CVE-2015-0255 for xorg-server. This update provides the corresponding fix for VNC4 on Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2015-0255) USN-2726-1 […]

Read more
SLES 12 — aaa_base — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — aaa_base — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 March 2015 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:005 (see also SUSE bugzilla) Related CVEs: CVE-2011-0461 Upstream summary: /etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite […]

Read more
Ubuntu 14.04 — rpm — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — rpm — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 March 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2479-1 Related CVEs: CVE-2013-6435 CVE-2014-8118 Upstream summary: Florian Weimer discovered that RPM incorrectly handled temporary files. A local attacker could use this issue to execute arbitrary code. (CVE-2013-6435) Florian Weimer […]

Read more
CHAT