2022 - Page 637 of 828

FreeBSD 13 — rubygem-activeresource — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — rubygem-activeresource — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rails — multiple vulnerabilities Related CVEs: CVE-2013-4491 CVE-2013-6414 CVE-2013-6415 CVE-2013-6416 CVE-2013-6417 Upstream summary: Rails weblog: Rails 3.2.16 and 4.0.2 have been released! These two releases contain important security fixes, so […]

Read more
FreeBSD 13 — rubygem-rest-client — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — rubygem-rest-client — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rest-client — plaintext password disclosure Related CVEs: CVE-2015-1820 CVE-2015-3448 Upstream summary: The open sourced vulnerability database reports: REST Client for Ruby contains a flaw that is due to the application […]

Read more
FreeBSD 13 — monitorix — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — monitorix — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: monitorix — serious bug in the built-in HTTP server Upstream summary: Monitorix Project reports: A serious bug in the built-in HTTP server. It was discovered that the handle_request() routine did […]

Read more
Debian 11 — lam — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — lam — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]

Read more
Debian 11 — axel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — axel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-0390 CVE-2020-13614 Upstream summary: Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute arbitrary code. Table of contents […]

Read more
FreeBSD 13 — wine — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — wine — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wine — information disclosure due to insecure temporary file handling Related CVEs: CVE-2005-0787 Upstream summary: Due to insecure temporary file creation in the Wine Windows emulator, it is possible for […]

Read more
Debian 10 — lz4 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 10

Debian 10 — lz4 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 March 2022 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-3520 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Amazon Linux 2 — keepalived — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — keepalived — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2019-1154 Related CVEs: CVE-2018-19115 CVE-2021-44225 CVE-2018-19044 Upstream summary: Heap-based buffer overflow vulnerability in extract_status_code() function in lib/html.c that parses HTTP status code returned from web server allows malicious web server […]

Read more
Debian 11 — sqliteodbc — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — sqliteodbc — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-12050 Upstream summary: SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a […]

Read more
Debian 11 — fluxbox — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — fluxbox — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 March 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-1204 Upstream summary: FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service (application crash) by calling Xman with a long -title value, possibly […]

Read more
CHAT