Common Problems

FreeBSD 12 — mozilla-thunderbird — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mozilla-thunderbird — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CAN-2006-0884 CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156  +12 more Upstream summary: The Mozilla Foundation reports of multiple security issues in Firefox, Seamonkey, and […]

Read more
FreeBSD 12 — atutor — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — atutor — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: atutor — multiple vulnerabilities Upstream summary: ATutor reports: Security Fixes: Added a new layer of security over all php superglobals, fixed several XSS, CSRF, and SQL injection vulnerabilities. Table of […]

Read more
Debian 9 — keystone — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — keystone — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 December 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-14432 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 12 — dpkg — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — dpkg — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dpkg — stack-based buffer overflow Related CVEs: CVE-2015-0860 Upstream summary: Salvatore Bonaccorso reports: Hanno Boeck discovered a stack-based buffer overflow in the dpkg-deb component of dpkg, the Debian package management […]

Read more
FreeBSD 12 — py24-pylons — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py24-pylons — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-pylons — Path traversal bug Upstream summary: Pylons team reports: The error.py controller uses paste.fileapp to serve the static resources to the browser. The default error.py controller uses os.path.join to […]

Read more
FreeBSD 12 — xorg-clients — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xorg-clients — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0 Related CVEs: CVE-2004-0419 Upstream summary: When the IPv6 code was added to xdm a critical test to disable xdmcp […]

Read more
Ubuntu 16.04 — lighttpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — lighttpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 December 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4775-1 Related CVEs: CVE-2015-3200 CVE-2018-19052 Upstream summary: It was discovered that Lighttpd did not properly sanitized the string used in basic HTTP authentication method. A remote attacker could use this […]

Read more
SLES 15 — perl-XML-Twig — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — perl-XML-Twig — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 December 2018 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2020:2172-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-9180 Upstream summary: perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig does not work. External entities are always expanded, regardless […]

Read more
FreeBSD 12 — pt_BR-netscape — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pt_BR-netscape — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 December 2018 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

Read more
CHAT