August 2024 - Page 39 of 99

FreeBSD 14 — gdcm — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — gdcm — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gdcm — multiple vulnerabilities Related CVEs: CVE-2015-8396 CVE-2015-8397 Upstream summary: CENSUS S.A. reports: GDCM versions 2.6.0 and 2.6.1 (and possibly previous versions) are prone to an integer overflow vulnerability which […]

Read more
NetBSD 10.0 — py-babel — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — py-babel — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-42771 Upstream summary: pkgsrc audit-packages flagged py{27,36,37,38,39}-babel<2.9.1 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-42771 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
FreeBSD 14 — libproxy-perl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — libproxy-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libproxy — stack-based buffer overflow Related CVEs: CVE-2012-4504 Upstream summary: Tomas Hoger reports: A buffer overflow flaw was discovered in the libproxy's url::get_pac() used to download proxy.pac proxy auto-configuration file. […]

Read more
FreeBSD 14 — hive — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — hive — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 August 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: hive — authorization logic vulnerability Related CVEs: CVE-2015-7521 Upstream summary: Sushanth Sowmyan reports: Some partition-level operations exist that do not explicitly also authorize privileges of the parent table. This can […]

Read more
NetBSD 10.0 — php55-gd — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — php55-gd — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2013-7226 CVE-2014-5120 CVE-2016-5766 CVE-2016-5767 CVE-2016-7568 CVE-2013-7327 CVE-2014-2497 CVE-2014-9709 Upstream summary: pkgsrc audit-packages flagged php55-gd<5.5.9 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7226 Table of contents Symptom & Impact Environment & Reproduction […]

Read more
Debian 12 — qpdf — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — qpdf — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-9252 CVE-2017-11624 CVE-2017-11625 CVE-2017-11626 CVE-2017-11627 CVE-2017-12595 CVE-2017-18183 CVE-2017-18184  +11 more Upstream summary: An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in […]

Read more
NetBSD 10.0 — isc-dhcpd — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — isc-dhcpd — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2011-2748 CVE-2011-2749 CVE-2021-25217 CVE-2007-0062 CVE-2010-2156 CVE-2016-2774 CVE-2017-3144 CVE-2018-5733  +1 more Upstream summary: pkgsrc audit-packages flagged isc-dhcpd<4.2.2 for vulnerability class 'remote-denial-of-service'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2011-2748 Table of contents Symptom & Impact Environment […]

Read more
NetBSD 9.4 — ytalk — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — ytalk — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged ytalk<3.2.0 for vulnerability class 'denial-of-service'. Reference: http://www.impul.se/ytalk/ChangeLog Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

Read more
Debian 12 — sniproxy — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — sniproxy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 August 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-25076 Upstream summary: A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80df9b7b345cc9eba55df74a07b498819ba). A specially crafted HTTP […]

Read more
CHAT