Common Problems

FreeBSD 12 — mod_pagespeed — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mod_pagespeed — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • February 20, 2019
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 20 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_pagespeed — critical cross-site scripting (XSS) vulnerability Related CVEs: CVE-2012-4001 CVE-2012-4360 CVE-2013-6111 Upstream summary: mod_pagespeed developers report: Various versions of mod_pagespeed are subject to critical cross-site scripting (XSS) vulnerability, CVE-2013-6111. […]

Read more
SLES 12 — perl-Archive-Zip — vulnerability — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — perl-Archive-Zip — vulnerability — patch and remediation guide

  • February 20, 2019
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 20 February 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:2385-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10860 Upstream summary: perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while […]

Read more
Arch Linux — lib32-libxml2 — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — lib32-libxml2 — vulnerability — patch and remediation guide

  • February 20, 2019
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201810-4 Related CVEs: CVE-2018-9251 Upstream summary: Type: denial of service. Status: Fixed. Affected: 2.9.8-3. Fixed in: 2.9.8-4. Group: AVG-673. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 12 — kdegraphics — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — kdegraphics — multiple vulnerabilities (10 CVEs) — patch and remediation guide

  • February 19, 2019
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 19 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpdf — multiple remote Stream.CC vulnerabilities Related CVEs: CVE-2004-0888 CVE-2004-0889 CVE-2004-1125 CVE-2005-0064 CVE-2005-2097 CVE-2006-0301 CVE-2007-3387 CVE-2007-4352  +2 more Upstream summary: Secunia Research reports: Secunia Research has discovered some vulnerabilities in […]

Read more
openSUSE Tumbleweed — pagure — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — pagure — vulnerability — patch and remediation guide

  • February 19, 2019
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-7628 Upstream summary: Pagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers validate TLS certificates, so it is easy for man-in-the-middle […]

Read more
FreeBSD 12 — GraphicsMagick — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — GraphicsMagick — multiple vulnerabilities (11 CVEs) — patch and remediation guide

  • February 19, 2019
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 19 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: GraphicsMagick — multiple vulnerabilities Related CVEs: CVE-2012-3438 CVE-2016-2317 CVE-2016-7800 CVE-2016-7996 CVE-2016-7997 CVE-2016-9830 CVE-2017-10794 CVE-2017-10799  +3 more Upstream summary: GraphicsMagick News: Read "Security Fixes:" section for details. Table of contents Symptom […]

Read more
Arch Linux — php — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — php — multiple vulnerabilities (15 CVEs) — patch and remediation guide

  • February 19, 2019
  • Linux
  • Comment off

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-201910-14 Related CVEs: CVE-2019-11043 CVE-2017-5340 CVE-2016-9936 CVE-2016-9935 CVE-2016-9934 CVE-2016-9933 CVE-2016-9138 CVE-2016-8670  +7 more Upstream summary: Type: arbitrary code execution. Status: Fixed. Affected: 7.3.10-1. Fixed in: 7.3.11-1. Group: AVG-1052. Table of […]

Read more
Ubuntu 18.04 — log4net — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — log4net — vulnerability — patch and remediation guide

  • February 19, 2019
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 19 February 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4699-1 Related CVEs: CVE-2018-1285 Upstream summary: It was discovered that Apache Log4net incorrectly handled certain configuration files. An attacker could possibly use this issue to expose sensitive information. Table of […]

Read more
FreeBSD 12 — mupad — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mupad — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • February 18, 2019
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 18 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpm — image decoding vulnerabilities Related CVEs: CVE-2004-0687 CVE-2004-0688 Upstream summary: Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow […]

Read more
FreeBSD 12 — kf5-kauth — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — kf5-kauth — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • February 18, 2019
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 18 February 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kf5-kauth — Insecure handling of arguments in helpers Related CVEs: CVE-2017-8422 CVE-2019-7443 Upstream summary: Albert Astals Cid reports: KAuth allows to pass parameters with arbitrary types to helpers running as […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT