January 2025 - Page 25 of 100

FreeBSD 14 — rubygem-actionview — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — rubygem-actionview — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Rails — XSS vulnerabilities Related CVEs: CVE-2015-7576 CVE-2015-7577 CVE-2015-7581 CVE-2016-0751 CVE-2016-0752 CVE-2016-0753 CVE-2016-2097 CVE-2016-2098  +12 more Upstream summary: Ruby on Rails blog: This is an announcement to let you know […]

Read more
FreeBSD 14 — cpu-microcode-intel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — cpu-microcode-intel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Intel CPUs — multiple vulnerabilities Related CVEs: CVE-2023-22655 CVE-2023-28746 CVE-2023-38575 CVE-2023-39368 CVE-2023-42667 CVE-2023-43490 CVE-2023-43758 CVE-2023-45733  +12 more Upstream summary: Intel reports: A potential security vulnerability in some Intel Processors may […]

Read more
Windows Server 2025 — KB5061018 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2025

Windows Server 2025 — KB5061018 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5061018 • MSRC update-guide entry Related CVEs: CVE-2025-49735 CVE-2025-33071 CVE-2025-33070 CVE-2025-32712 CVE-2025-32713 CVE-2025-32714 CVE-2025-32715 CVE-2025-32718  +12 more Affected components: Windows Server 2025 Microsoft summary: Use after free in Windows KDC Proxy Service […]

Read more
FreeBSD 14 — tauthon — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — tauthon — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tauthon — Regular Expression Denial of Service Related CVEs: CVE-2020-8492 Upstream summary: The :class:`~urllib.request.AbstractBasicAuthHandler` class of the :mod:`urllib.request` module uses an inefficient regular expression which can be exploited by an […]

Read more
FreeBSD 14 — bzip — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — bzip — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bzip2 — multiple issues Related CVEs: CVE-2005-0953 CVE-2005-1260 CVE-2008-1372 CVE-2010-0405 CVE-2016-3189 CVE-2019-12900 Upstream summary: bzip2 developers reports: CVE-2016-3189 – Fix use-after-free in bzip2recover (Jakub Martisko) CVE-2019-12900 – Detect out-of-range nSelectors […]

Read more
Windows Server 2019 — KB5037338 — security update — patch and remediation guide — diagnosis and fix on Windows Server 2019

Windows Server 2019 — KB5037338 — security update — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read  •  Source: Microsoft KB5037338 • MSRC update-guide entry Related CVEs: CVE-2024-21409 Affected components: Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
FreeBSD 14 — openjph — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — openjph — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenJPH < 0.24.5 — multiple vulnerabilities Upstream summary: Aous Naman reports several vulnerabilities fixed in OpenJPH versions up to 0.24.5 and credits Cary Phillips for reporting them from the OSS-fuzz […]

Read more
Ubuntu 20.04 — gnupg2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — gnupg2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 January 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7946-1 Related CVEs: CVE-2025-68973 CVE-2025-30258 CVE-2022-34903 Upstream summary: It was discovered that GnuPG incorrectly handled crafted input. A remote attacker could possibly use this issue to crash the program, or […]

Read more
Alpine Linux 3.20 — haserl — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux 3.20

Alpine Linux 3.20 — haserl — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 0.9.36-r0 📖 ~4 min read  •  Source: Alpine secdb entry — haserl 0.9.36-r0 Related CVEs: CVE-2021-29133 Upstream summary: Alpine main repository for vv3.20 ships haserl 0.9.36-r0 which addresses CVE-2021-29133. Table of contents Symptom & Impact Environment […]

Read more
SLES 15 — ruby2.5-rubygem-puma — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — ruby2.5-rubygem-puma — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 January 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3957-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-40175 CVE-2022-24790 CVE-2021-29509 CVE-2024-21647 CVE-2024-45614 CVE-2022-23634 CVE-2021-41136 Upstream summary: Puma is a Ruby/Rack web server built for parallelism. Prior to versions 6.3.1 and 5.6.7, puma […]

Read more
CHAT