May 2024 - Page 10 of 117

Alpine Linux 3.18 — suricata — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux 3.18

Alpine Linux 3.18 — suricata — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 6.0.4-r0 📖 ~4 min read  •  Source: Alpine secdb entry — suricata 6.0.4-r0 Related CVEs: CVE-2021-37592 CVE-2021-45098 CVE-2021-35063 CVE-2023-35852 CVE-2023-35853 Upstream summary: Alpine community repository for vv3.18 ships suricata 6.0.4-r0 which addresses CVE-2021-37592. Table of contents […]

Read more
Alpine Linux 3.18 — sane — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux 3.18

Alpine Linux 3.18 — sane — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 1.0.30-r0 📖 ~4 min read  •  Source: Alpine secdb entry — sane 1.0.30-r0 Related CVEs: CVE-2020-12861 CVE-2020-12862 CVE-2020-12863 CVE-2020-12864 CVE-2020-12865 CVE-2020-12866 CVE-2020-12867 Upstream summary: Alpine community repository for vv3.18 ships sane 1.0.30-r0 which addresses CVE-2020-12861. Table […]

Read more
FreeBSD 14 — mgetty+sendfax — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mgetty+sendfax — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mgetty+sendfax — symlink attack via insecure temporary files Related CVEs: CVE-2008-4936 Upstream summary: Debian reports: Faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack […]

Read more
FreeBSD 14 — py39-yaml — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py39-yaml — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PyYAML — arbitrary code execution Related CVEs: CVE-2020-14343 Upstream summary: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution […]

Read more
FreeBSD 14 — p5-PathTools — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — p5-PathTools — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-PathTools — File::Spec::canonpath loses taint Related CVEs: CVE-2015-8607 Upstream summary: Ricardo Signes reports: Beginning in PathTools 3.47 and/or perl 5.20.0, the File::Spec::canonpath() routine returned untained strings even if passed tainted […]

Read more
FreeBSD 14 — typo3-11-php — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — typo3-11-php — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: typo3 — multiple vulnerabilities Related CVEs: CVE-2022-23499 CVE-2022-23500 CVE-2022-23501 CVE-2022-23502 CVE-2022-23503 CVE-2022-23504 CVE-2022-23638 CVE-2023-37905  +2 more Upstream summary: TYPO3 reports: TYPO3-CORE-SA-2023-002: By-passing Cross-Site Scripting Protection in HTML Sanitizer TYPO3-CORE-SA-2023-003: Information […]

Read more
Debian 12 — util-linux — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — util-linux — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2001-1494 CVE-2005-2876 CVE-2006-7108 CVE-2007-5191 CVE-2008-1926 CVE-2011-1675 CVE-2011-1677 CVE-2013-0157  +12 more Upstream summary: script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by […]

Read more
Debian 12 — haskell-xml-conduit — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — haskell-xml-conduit — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-4249 Upstream summary: A vulnerability was found in xml-conduit. It has been classified as problematic. Affected is an unknown function of the file xml-conduit/src/Text/XML/Stream/Parse.hs of the component DOCTYPE […]

Read more
CHAT