SLES 15 — amavisd-new — vulnerability — patch and remediation guide

May 17, 2019
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 17 May 2019 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-1238 Upstream summary: (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, […]

FreeBSD 12 — w3m-img — multiple vulnerabilities (20 CVEs) — patch and remediation guide

May 17, 2019
BSD
Comment off

🟠 High ⏱ 15–60 min Last verified: 17 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: w3m – multiple vulnerabilities Related CVEs: CVE-2006-6772 CVE-2016-9422 CVE-2016-9423 CVE-2016-9424 CVE-2016-9425 CVE-2016-9426 CVE-2016-9428 CVE-2016-9429 +12 more Upstream summary: Tatsuya Kinoshita reports: CVE-2018-6196 * table.c: Prevent negative indent value in feed_table_block_tag(). […]

FreeBSD 12 — php56-odbc — multiple vulnerabilities (12 CVEs) — patch and remediation guide

May 16, 2019
BSD
Comment off

🟠 High ⏱ 15–60 min Last verified: 16 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292 +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

FreeBSD 12 — x86_64-pc-mingw32-binutils — multiple vulnerabilities (3 CVEs) — patch and remediation guide

May 16, 2019
BSD
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 16 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: GNU binutils — multiple vulnerabilities Related CVEs: CVE-2014-8501 CVE-2014-8502 CVE-2014-8503 Upstream summary: US-CERT/NIST reports: The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause […]

Ubuntu 16.04 — libjackson-json-java — multiple vulnerabilities (3 CVEs) — patch and remediation guide

May 16, 2019
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 16 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4741-1 Related CVEs: CVE-2017-15095 CVE-2017-7525 CVE-2019-10172 Upstream summary: It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could possibly use this issue to execute arbitrary code. Table of […]

Debian 9 — openssl — multiple vulnerabilities (5 CVEs) — patch and remediation guide

May 16, 2019
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 16 May 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-3735 CVE-2018-0732 CVE-2018-0739 CVE-2019-1543 CVE-2019-1547 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]

FreeBSD 12 — postgresql84-client — security advisory — patch and remediation guide

May 15, 2019
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 15 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]

FreeBSD 12 — picasm — vulnerability — patch and remediation guide

May 15, 2019
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 15 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: picasm — buffer overflow vulnerability Related CVEs: CVE-2005-1679 Upstream summary: Shaun Colley reports: When generating error and warning messages, picasm copies strings into fixed length buffers without bounds checking. If […]

FreeBSD 12 — iw-pine — multiple vulnerabilities (3 CVEs) — patch and remediation guide

May 15, 2019
BSD
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 15 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pine remotely exploitable buffer overflow in newmail.c Related CVEs: CVE-2002-1320 CVE-2003-0720 CVE-2003-0721 Upstream summary: Kris Kennaway reports a remotely exploitable buffer overflow in newmail.c. Mike Silbersack submitted the fix. Table […]

Ubuntu 16.04 — screen-resolution-extra — vulnerability — patch and remediation guide

May 15, 2019
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 15 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3607-1 Related CVEs: CVE-2018-8885 Upstream summary: It was discovered that Screen Resolution Extra was using PolicyKit in an unsafe manner. A local attacker could potentially exploit this issue to bypass […]

Common Problems

SLES 15 — amavisd-new — vulnerability — patch and remediation guide

FreeBSD 12 — w3m-img — multiple vulnerabilities (20 CVEs) — patch and remediation guide

FreeBSD 12 — php56-odbc — multiple vulnerabilities (12 CVEs) — patch and remediation guide

FreeBSD 12 — x86_64-pc-mingw32-binutils — multiple vulnerabilities (3 CVEs) — patch and remediation guide

Ubuntu 16.04 — libjackson-json-java — multiple vulnerabilities (3 CVEs) — patch and remediation guide

Debian 9 — openssl — multiple vulnerabilities (5 CVEs) — patch and remediation guide

FreeBSD 12 — postgresql84-client — security advisory — patch and remediation guide

FreeBSD 12 — picasm — vulnerability — patch and remediation guide

FreeBSD 12 — iw-pine — multiple vulnerabilities (3 CVEs) — patch and remediation guide

Ubuntu 16.04 — screen-resolution-extra — vulnerability — patch and remediation guide

Tags