September 2024 - Page 54 of 95

FreeBSD 14 — php56-odbc — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — php56-odbc — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 September 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292  +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

Read more
NetBSD 10.0 — picocom — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — picocom — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2015-9059 Upstream summary: pkgsrc audit-packages flagged picocom<2.0 for vulnerability class 'command-injection'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9059 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
NetBSD 10.0 — php70-exif — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — php70-exif — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-10549 CVE-2018-14883 CVE-2018-14851 CVE-2016-7128 Upstream summary: pkgsrc audit-packages flagged php70-exif<7.0.30 for vulnerability class 'out-of-bounds-read'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-10549 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

Read more
Debian 12 — xserver-xorg-video-openchrome — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — xserver-xorg-video-openchrome — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1994 Upstream summary: Multiple integer overflows in X.org libchromeXvMC and libchromeXvMCPro in openChrome 0.3.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer […]

Read more
NetBSD 10.0 — json-c — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — json-c — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-12762 CVE-2013-6370 CVE-2013-6371 Upstream summary: pkgsrc audit-packages flagged json-c<0.15 for vulnerability class 'out-of-bounds-write'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-12762 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
NetBSD 10.0 — grpc — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — grpc — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-32731 CVE-2023-1428 CVE-2023-4785 CVE-2023-32732 CVE-2024-11407 CVE-2024-7246 Upstream summary: pkgsrc audit-packages flagged grpc>=1.53.0<1.55.0 for vulnerability class 'expected-behavior-violation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-32731 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Debian 12 — bristol — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — bristol — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-3351 Upstream summary: startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library […]

Read more
NetBSD 10.0 — matrix-synapse — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — matrix-synapse — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-26890 CVE-2020-26891 CVE-2020-26257 CVE-2021-21273 CVE-2021-21332 CVE-2021-21333 CVE-2021-21392 CVE-2021-41281  +12 more Upstream summary: pkgsrc audit-packages flagged matrix-synapse<1.20.0 for vulnerability class 'remote-denial-of-service'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-26890 Table of contents Symptom & Impact Environment […]

Read more
Debian 12 — mime-support — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — mime-support — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 September 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0214 CVE-2014-7209 Upstream summary: run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. Table of contents Symptom […]

Read more
NetBSD 10.0 — libvncserver — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — libvncserver — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-25708 CVE-2014-4607 CVE-2018-7225 CVE-2018-20748 CVE-2018-20749 CVE-2018-20750 CVE-2019-15681 CVE-2010-5304  +12 more Upstream summary: pkgsrc audit-packages flagged libvncserver<0.9.13 for vulnerability class 'remote-denial-of-service'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-25708 Table of contents Symptom & Impact Environment […]

Read more
CHAT