Linux

openSUSE Tumbleweed — dovecot22 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — dovecot22 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3430 CVE-2016-4983 Upstream summary: Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote […]

Read more
SLES 15 — perl-Convert-ASN1 — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl-Convert-ASN1 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 January 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:0172-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-7488 Upstream summary: perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input. Table of […]

Read more
SLES 15 — libsmi — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libsmi — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 January 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SR:2011:001 (see also SUSE bugzilla) Related CVEs: CVE-2010-2891 Upstream summary: Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier […]

Read more
Arch Linux — messagelib — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — messagelib — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201706-17 Related CVEs: CVE-2017-9604 CVE-2016-7968 CVE-2016-7967 Upstream summary: Type: information disclosure. Status: Fixed. Affected: 17.04.1-1. Fixed in: 17.04.2-1. Group: AVG-300. Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
Alpine Linux edge — perl-email-address-list — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — perl-email-address-list — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.06-r0 📖 ~4 min read  •  Source: Alpine secdb entry — perl-email-address-list 0.06-r0 Related CVEs: CVE-2018-18898 Upstream summary: Alpine main repository for vedge ships perl-email-address-list 0.06-r0 which addresses CVE-2018-18898. Table of contents Symptom & Impact Environment […]

Read more
openSUSE Tumbleweed — mgetty — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — mgetty — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2018:2942-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-16741 CVE-2008-4936 CVE-2018-16742 CVE-2018-16743 CVE-2018-16744 Upstream summary: An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly sanitize shell […]

Read more
Ubuntu 16.04 — mbedtls — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — mbedtls — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4267-1 Related CVEs: CVE-2017-18187 CVE-2018-0487 CVE-2018-0488 CVE-2018-0497 CVE-2018-0498 Upstream summary: It was discovered that mbedtls has a bounds-check bypass through an integer overflow that can be used by an attacked […]

Read more
Arch Linux — znc — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — znc — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201807-11 Related CVEs: CVE-2018-14056 CVE-2018-14055 Upstream summary: Type: multiple issues. Status: Fixed. Affected: 1.7.0-2. Fixed in: 1.7.1-1. Group: AVG-737. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
SLES 15 — libmad0 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libmad0 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 January 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3782-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-8373 CVE-2017-8372 CVE-2017-8374 Upstream summary: The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based […]

Read more
openSUSE Tumbleweed — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — perl-XML-Parser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:7679 (see also SUSE bugzilla) Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and […]

Read more
CHAT