Fix Prevention

SLES 15 — xf86-video-intel — vulnerability — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — xf86-video-intel — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 March 2019 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2014-4910 Upstream summary: Directory traversal vulnerability in tools/backlight_helper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the interface […]

Read more
SLES 12 — policycoreutils — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — policycoreutils — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 March 2019 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:0338-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-7545 CVE-2018-1063 Upstream summary: SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call. Table of […]

Read more
FreeBSD 12 — linux-sun-jdk — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-sun-jdk — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: java 7.x — security manager bypass Related CVEs: CVE-2004-1029 CVE-2005-1080 CVE-2007-5232 CVE-2012-4681 CVE-2013-0433 Upstream summary: US CERT reports: Java 7 Update 10 and earlier versions of Java 7 contain a […]

Read more
FreeBSD 12 — linux-c6-xorg-libs — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-c6-xorg-libs — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libXfont — BDF parsing issues Related CVEs: CVE-2014-0209 CVE-2014-0210 CVE-2014-0211 CVE-2015-1802 CVE-2015-1803 CVE-2015-1804 Upstream summary: Alan Coopersmith reports: Ilja van Sprundel, a security researcher with IOActive, has discovered an issue […]

Read more
openSUSE Tumbleweed — postgresql11 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — postgresql11 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-10129 CVE-2019-10209 Upstream summary: A vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned table, an attacker […]

Read more
FreeBSD 12 — php5-phar — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php5-phar — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-5589 CVE-2015-5590 CVE-2015-6831 CVE-2015-6832 CVE-2015-6833 CVE-2015-7803 CVE-2015-7804 Upstream summary: PHP reports: Phar: Fixed bug #69720 (Null pointer dereference in phar_get_fp_offset()). Fixed bug #70433 (Uninitialized […]

Read more
FreeBSD 12 — groovy — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — groovy — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: groovy — remote execution of untrusted code/DoS vulnerability Related CVEs: CVE-2015-3253 CVE-2016-6814 Upstream summary: The Apache Groovy project reports: When an application with Groovy on classpath uses standard Java serialization […]

Read more
Alpine Linux edge — libxdmcp — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — libxdmcp — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.1.2-r3 📖 ~4 min read  •  Source: Alpine secdb entry — libxdmcp 1.1.2-r3 Related CVEs: CVE-2017-2625 Upstream summary: Alpine main repository for vedge ships libxdmcp 1.1.2-r3 which addresses CVE-2017-2625. Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 12 — typespeed — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — typespeed — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: typespeed — arbitrary code execution Related CVEs: CVE-2005-0105 Upstream summary: Debian reports: Ulf Härnhammar from the Debian Security Audit Project discovered a problem in typespeed, a touch-typist trainer disguised as […]

Read more
FreeBSD 12 — xorg-dmx — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xorg-dmx — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xorg-server — Multiple input validation failures in X server XKB extension Related CVEs: CVE-2017-12176 CVE-2017-12177 CVE-2017-12178 CVE-2017-12179 CVE-2017-12180 CVE-2017-12181 CVE-2017-12182 CVE-2017-12183  +12 more Upstream summary: The X.org project reports: These […]

Read more
CHAT