Common Problems

SLES 15 — apache2-mod_nss — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — apache2-mod_nss — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 March 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2013:1926-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-4566 CVE-2015-5244 CVE-2016-3099 Upstream summary: mod_nss 1.0.8 and earlier, when NSSVerifyClient is set to none for the server/vhost context, does not enforce the NSSVerifyClient setting […]

Read more
openSUSE Tumbleweed — python36-websockets — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — python36-websockets — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:2854-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000518 Upstream summary: aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured […]

Read more
FreeBSD 12 — linux-flashplugin — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-flashplugin — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: linux-flashplugin — multiple vulnerabilities Related CVEs: CVE-2006-0024 CVE-2006-3311 CVE-2006-3587 CVE-2006-3588 CVE-2006-4640 CVE-2007-0071 CVE-2007-2022 CVE-2007-3456  +12 more Upstream summary: Adobe Product Security Incident Response Team reports: Critical vulnerabilities have been identified […]

Read more
Debian 9 — quagga — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — quagga — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 March 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-16227 CVE-2018-5379 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

Read more
FreeBSD 12 — py39-cairosvg — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py39-cairosvg — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: CairoSVG — Regular Expression Denial of Service vulnerability Upstream summary: CairoSVG security advisories: When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular […]

Read more
FreeBSD 12 — pngcheck — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pngcheck — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pngcheck — Buffer-overrun vulnerability Upstream summary: The libpng project reports: pngcheck versions 3.0.0 and earlier have a pair of buffer-overrun bugs related to the sPLT and PPLT chunks (the latter […]

Read more
FreeBSD 12 — tinyproxy — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — tinyproxy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tinyproxy — ACL lists ineffective when range is configured Related CVEs: CVE-2011-1499 Upstream summary: When including a line to allow a network of IP addresses, the access to tinyproxy 56 […]

Read more
Arch Linux — mupdf — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — mupdf — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201805-4 Related CVEs: CVE-2018-6544 CVE-2018-6192 CVE-2018-6187 CVE-2018-5686 CVE-2018-1000051 CVE-2017-17858 CVE-2017-15587 CVE-2017-14687  +2 more Upstream summary: Type: multiple issues. Status: Fixed. Affected: 1.12.0-2. Fixed in: 1.13.0-1. Group: AVG-609. Table of contents […]

Read more
FreeBSD 12 — krb5-beta — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — krb5-beta — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: krb5 — heap buffer overflow vulnerability in libkadm5srv Related CVEs: CVE-2004-1189 Upstream summary: A MIT krb5 Security Advisory reports: The MIT Kerberos 5 administration library (libkadm5srv) contains a heap buffer […]

Read more
Ubuntu 14.04 — libvirt — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libvirt — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 March 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4047-2 Related CVEs: CVE-2019-10161 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/MDS CVE-2018-1064 CVE-2018-3639  +12 more Upstream summary: USN-4047-1 fixed a vulnerability in libvirt. This update provides the corresponding update for Ubuntu 14.04 […]

Read more
CHAT