April 2022 - Page 20 of 70

Arch Linux — element-desktop — vulnerability — patch and remediation guide — diagnosis and fix on Arch Linux

Arch Linux — element-desktop — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Arch Linux (rolling release) 📖 ~4 min read  •  Source: Arch ASA ASA-202109-4 Related CVEs: CVE-2021-40823 Upstream summary: Type: information disclosure. Status: Fixed. Affected: 1.7.34-2. Fixed in: 1.8.4-1. Group: AVG-2377. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
Amazon Linux 2 — firefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — firefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2FIREFOX-2023-009 Related CVEs: CVE-2022-45403 CVE-2022-45404 CVE-2022-45405 CVE-2022-45406 CVE-2022-45408 CVE-2022-45409 CVE-2022-45410 CVE-2022-45411  +12 more Upstream summary: Service Workers should not be able to infer information about opaque cross-origin responses; but timing […]

Read more
FreeBSD 13 — unace — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — unace — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unace — multiple vulnerabilities Related CVEs: CVE-2005-0160 CVE-2005-0161 Upstream summary: Ulf Härnhammar reports: There are buffer overflows when extracting, testing or listing specially prepared ACE archives. There are directory traversal […]

Read more
FreeBSD 13 — libadplug — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libadplug — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libadplug — Various vulnerabilities Related CVEs: CVE-2019-14690 CVE-2019-14691 CVE-2019-14692 CVE-2019-14732 CVE-2019-14733 CVE-2019-14734 CVE-2019-15151 Upstream summary: Malvineous on Github reports: This release fixes the following security issues: buffer overflow in .bmf […]

Read more
FreeBSD 13 — py39-markdown — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py39-markdown — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-markdown2 — regular expression denial of service vulnerability Related CVEs: CVE-2020-11888 CVE-2021-26813 Upstream summary: Ben Caller reports: markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of […]

Read more
FreeBSD 12 — rpm — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — rpm — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rpm4 — Multiple Vulnerabilities Related CVEs: CVE-2021-3521 CVE-2021-35938 CVE-2021-35939 Upstream summary: rpm project reports: Fix intermediate symlinks not verified (CVE-2021-35939). Fix subkey binding signatures not checked on PGP public keys […]

Read more
FreeBSD 13 — shotwell — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — shotwell — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: shotwell — failure to encrypt authentication Upstream summary: Jens Georg reports: I have just released Shotwell 0.24.5 and 0.25.4 which turn on HTTPS encryption all over the publishing plugins. Users […]

Read more
Debian 11 — xfce4-terminal — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — xfce4-terminal — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-3770 Upstream summary: The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a crafted link, as […]

Read more
Debian 11 — rubocop — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — rubocop — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-8418 Upstream summary: RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other […]

Read more
CHAT