Linux

Arch Linux — libtiff — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — libtiff — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201707-17 Related CVEs: CVE-2016-10095 CVE-2015-7554 CVE-2016-9540 CVE-2016-9539 CVE-2016-9538 CVE-2016-9537 CVE-2016-9536 CVE-2016-9535  +12 more Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 4.0.8-1. Fixed in: 4.0.8-2. Group: AVG-5. Table of […]

Read more
openSUSE Tumbleweed — bugzilla — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — bugzilla — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2014-1517 CVE-2014-1571 CVE-2015-4499 CVE-2015-8508 CVE-2015-8509 CVE-2016-2803 Upstream summary: The login form in Bugzilla 2.x, 3.x, 4.x before 4.4.3, and 4.5.x before 4.5.3 does not properly handle a correctly authenticated […]

Read more
Ubuntu 14.04 — quagga — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — quagga — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 May 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3573-1 Related CVEs: CVE-2018-5378 CVE-2018-5379 CVE-2018-5380 CVE-2018-5381 CVE-2017-16227 CVE-2017-5495 CVE-2016-1245 CVE-2016-4036  +3 more Upstream summary: It was discovered that a double-free vulnerability existed in the Quagga BGP daemon when processing […]

Read more
SLES 15 — libquicktime — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libquicktime — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 May 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:0610-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-2399 CVE-2017-9122 CVE-2017-9123 CVE-2017-9124 CVE-2017-9125 CVE-2017-9126 CVE-2017-9127 CVE-2017-9128 Upstream summary: Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to […]

Read more
Arch Linux — nasm — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — nasm — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201901-16 Related CVEs: CVE-2019-6291 CVE-2019-6290 Upstream summary: Type: denial of service. Status: Fixed. Affected: 2.14-1. Fixed in: 2.14.02-1. Group: AVG-852. Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
openSUSE Tumbleweed — seamonkey — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — seamonkey — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14572-1 (see also SUSE bugzilla) Related CVEs: CVE-2008-0412 CVE-2008-0419 CVE-2008-1195 CVE-2009-3388 CVE-2009-3980 CVE-2009-3982 CVE-2010-1208 CVE-2010-2753  +12 more Upstream summary: The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey […]

Read more
Ubuntu 18.04 — gradle — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — gradle — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 May 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4858-1 Related CVEs: CVE-2019-11065 CVE-2019-16370 Upstream summary: It was discovered that Gradle used an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins were used. […]

Read more
openSUSE Tumbleweed — ceph-deploy — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — ceph-deploy — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2015-4053 Upstream summary: The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading […]

Read more
SLES 12 — slf4j — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — slf4j — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 May 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:1744-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-8088 Upstream summary: org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData […]

Read more
CHAT