October 2024 - Page 85 of 99

Debian 12 — shutter — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — shutter — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-0854 CVE-2016-10081 Upstream summary: App/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Show […]

Read more
NetBSD 9.4 — xulrunner192 — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — xulrunner192 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged xulrunner192<1.9.2.23 for vulnerability class 'multiple-vulnerabilities'. Reference: https://www.mozilla.org/security/known-vulnerabilities/firefox.html#firefox7 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

Read more
Debian 12 — gnuchess — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — gnuchess — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-8972 CVE-2019-15767 CVE-2021-30184 Upstream summary: Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary […]

Read more
NetBSD 9.4 — fig2dev — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — fig2dev — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-16140 CVE-2019-14275 CVE-2019-19555 CVE-2019-19746 CVE-2019-19797 CVE-2020-21534 CVE-2020-21533 CVE-2020-21532  +12 more Upstream summary: pkgsrc audit-packages flagged fig2dev<3.2.7b for vulnerability class 'out-of-bounds-write'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-16140 Table of contents Symptom & Impact Environment […]

Read more
Debian 12 — cfrpki — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — cfrpki — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-3761 CVE-2021-3907 CVE-2021-3908 CVE-2021-3909 CVE-2021-3910 CVE-2021-3911 CVE-2021-3912 CVE-2021-3978  +3 more Upstream summary: Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid […]

Read more
Alpine Linux 3.19 — h2o — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux 3.19

Alpine Linux 3.19 — h2o — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 2.2.6-r10 📖 ~4 min read  •  Source: Alpine secdb entry — h2o 2.2.6-r10 Related CVEs: CVE-2023-44487 CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 Upstream summary: Alpine community repository for vv3.19 ships h2o 2.2.6-r10 which addresses CVE-2023-44487. Table of contents Symptom […]

Read more
NetBSD 9.4 — mutt-kz — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — mutt-kz — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2014-0467 Upstream summary: pkgsrc audit-packages flagged mutt-kz<1.5.22.1rc1nb1 for vulnerability class 'remote-user-shell'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0467 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
Debian 12 — fmtlib — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — fmtlib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 October 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1000052 Upstream summary: fmtlib version prior to version 4.1.0 (before commit 0555cea5fc0bf890afe0071a558e44625a34ba85) contains a Memory corruption (SIGSEGV), CWE-134 vulnerability in fmt::print() library function that can result in Denial […]

Read more
Alpine Linux 3.19 — botan — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux 3.19

Alpine Linux 3.19 — botan — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 2.9.0-r0 📖 ~4 min read  •  Source: Alpine secdb entry — botan 2.9.0-r0 Related CVEs: CVE-2018-20187 CVE-2018-12435 CVE-2018-9860 CVE-2018-9127 CVE-2024-34702 CVE-2024-34703 CVE-2024-39312 CVE-2021-40529  +1 more Upstream summary: Alpine main repository for vv3.19 ships botan 2.9.0-r0 which […]

Read more
Alpine Linux 3.18 — soundtouch — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux 3.18

Alpine Linux 3.18 — soundtouch — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 2.1.2-r0 📖 ~4 min read  •  Source: Alpine secdb entry — soundtouch 2.1.2-r0 Related CVEs: CVE-2018-17096 CVE-2018-17097 CVE-2018-17098 Upstream summary: Alpine community repository for vv3.18 ships soundtouch 2.1.2-r0 which addresses CVE-2018-17096. Table of contents Symptom & […]

Read more
CHAT