Linux

Debian 9 — passenger — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — passenger — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 August 2017 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-16355 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 16.04 — node-moment — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — node-moment — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 August 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4786-1 Related CVEs: CVE-2016-4055 CVE-2017-18214 Upstream summary: It was discovered that Moment.js mishandled certain regular expressions. An attacker could use this vulnerability to cause a denial of service. Table of […]

Read more
Debian 9 — swauth — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — swauth — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 August 2017 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-16613 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 14.04 — libmwaw — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libmwaw — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 August 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3319-1 Related CVEs: CVE-2017-9433 Upstream summary: It was discovered that libmwaw incorrectly handled certain malformed document files. If a user or automated system were tricked into opening a specially crafted […]

Read more
Ubuntu 16.04 — libgc — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libgc — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 August 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3197-1 Related CVEs: CVE-2016-9427 Upstream summary: Kuang-che Wu discovered that multiple integer overflow vulnerabilities existed in libgc. An attacker could use these to cause a denial of service (application crash) […]

Read more
Ubuntu 14.04 — condor — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — condor — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 August 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4771-1 Related CVEs: CVE-2014-8126 CVE-2017-16816 Upstream summary: It was discovered that HTCondor incorrectly invoked the mailx utility. An attacker could use this vulnerability to execute arbitrary commands. This issue only […]

Read more
Ubuntu 16.04 — firebird2.5 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — firebird2.5 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 August 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4822-1 Related CVEs: CVE-2017-6369 Upstream summary: It was discovered that Firebird exposed certain UDF libraries. An authenticated attacker could use this vulnerability to cause a denial of service (crash) or […]

Read more
Debian 9 — jabberd2 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — jabberd2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 July 2017 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-10807 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Ubuntu 14.04 — mpg123 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — mpg123 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 July 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4806-1 Related CVEs: CVE-2017-12839 CVE-2017-12797 CVE-2017-9545 CVE-2017-11126 Upstream summary: It was discovered that mpg123 failed to handle certain malformed mp3 files. An attacker could use this vulnerability to potentially leak […]

Read more
Debian 9 — ruby-omniauth — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — ruby-omniauth — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 July 2017 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-18076 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
CHAT