2022 - Page 376 of 828

FreeBSD 13 — owncloudclient — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — owncloudclient — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: owncloudclient — Improper validation of certificates when using self-signed certificates Related CVEs: CVE-2015-7298 Upstream summary: owncloud.org reports: The ownCloud Desktop Client was vulnerable against MITM attacks until version 2.0.0 in […]

Read more
FreeBSD 13 — rubygem-activemodel — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — rubygem-activemodel — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rails — multiple vulnerabilities Related CVEs: CVE-2012-2660 CVE-2012-2661 CVE-2013-4491 CVE-2013-6414 CVE-2013-6415 CVE-2013-6416 CVE-2013-6417 CVE-2015-7576  +5 more Upstream summary: Ruby on Rails blog: Rails 5.0.0.beta1.1, 4.2.5.1, 4.1.14.1, and 3.2.22.1 have been […]

Read more
Debian 11 — php-mail — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — php-mail — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-4023 CVE-2009-4111 Upstream summary: Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mail package 1.1.14 for PEAR allows remote attackers to read […]

Read more
Debian 11 — maildirsync — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — maildirsync — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-5150 Upstream summary: sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-*.#####.log temporary file. Table of contents […]

Read more
Amazon Linux 2 — openblas — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — openblas — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2R4-2023-001 Related CVEs: CVE-2021-4048 Upstream summary: An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack and OpenBLAS. A specially crafted input passed to […]

Read more
Debian 11 — libfastjson — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libfastjson — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-12762 Upstream summary: json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. Table of contents Symptom & Impact […]

Read more
Amazon Linux 2 — kernel-livepatch-4.14.299-223.520 — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-4.14.299-223.520 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-100 Related CVEs: CVE-2022-3524 Upstream summary: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component […]

Read more
FreeBSD 13 — jdk — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — jdk — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jdk/jre — Applet Caching May Allow Network Access Restrictions to be Circumvented Related CVEs: CVE-2004-1029 CVE-2005-1080 CVE-2007-5232 Upstream summary: SUN reports: A vulnerability in the Java Runtime Environment (JRE) with […]

Read more
Gentoo Linux — media-gfx/imagemagick — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — media-gfx/imagemagick — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202405-02 Related CVEs: CVE-2021-4219 CVE-2021-20224 CVE-2022-0284 CVE-2022-1115 CVE-2022-2719 CVE-2022-3213 CVE-2022-28463 CVE-2022-32545  +10 more Upstream summary: Multiple vulnerabilities have been discovered in ImageMagick. Please review the CVE identifiers referenced below for details. Table […]

Read more
CHAT