2022 - Page 698 of 828

FreeBSD 13 — zh-cce — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zh-cce — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: CCE contains exploitable buffer overflows Upstream summary: The Chinese Console Environment contains exploitable buffer overflows. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
AlmaLinux 8 — gnome-shell-extensions — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — gnome-shell-extensions — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2021:4381 Related CVEs: CVE-2020-13558 CVE-2020-24870 CVE-2020-27918 CVE-2020-29623 CVE-2020-36241 CVE-2021-1765 CVE-2021-1788 CVE-2021-1789  +12 more Upstream summary: GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later […]

Read more
Debian 11 — rootlesskit — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — rootlesskit — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-20199 Upstream summary: Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust […]

Read more
Debian 11 — gthumb — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gthumb — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-18718 CVE-2019-20326 CVE-2020-36427 Upstream summary: An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two successive […]

Read more
Debian 11 — libvterm — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libvterm — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-20786 Upstream summary: libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, […]

Read more
Debian 11 — libcacard — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libcacard — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-6414 Upstream summary: Memory leak in the vcard_apdu_new function in card_7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service (host memory […]

Read more
Debian 11 — dnstracer — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — dnstracer — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-9430 Upstream summary: Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a […]

Read more
Ubuntu 14.04 — sosreport — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — sosreport — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 February 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5636-1 Related CVEs: CVE-2022-2806 CVE-2014-3925 CVE-2015-7529 Upstream summary: It was discovered that SoS incorrectly handled certain data. An attacker could possibly use this issue to expose sensitive information. Table of […]

Read more
Debian 11 — django-anymail — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — django-anymail — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1000089 CVE-2018-6596 Upstream summary: Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulnerability in WEBHOOK_AUTHORIZATION setting value that can result in An attacker with access […]

Read more
Ubuntu 14.04 — apr-util — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — apr-util — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5870-1 Related CVEs: CVE-2022-25147 CVE-2017-12618 Upstream summary: Ronald Crane discovered that APR-util did not properly handled memory when encoding or decoding certain input data. An attacker could possibly use this […]

Read more
CHAT