January 2025 - Page 28 of 100

FreeBSD 12 — sudo — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — sudo — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 January 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sudo — privilege escalation vulnerability through host and chroot options Related CVEs: CVE-2005-1993 CVE-2005-2959 CVE-2009-0034 CVE-2010-0426 CVE-2010-1163 CVE-2010-1646 CVE-2010-2956 CVE-2011-0010  +12 more Upstream summary: Todd C. Miller reports, crediting Rich […]

Read more
FreeBSD 14 — eGroupWare — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — eGroupWare — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pear-XML_RPC — remote PHP code injection vulnerability Related CVEs: CVE-2005-2498 Upstream summary: A Hardened-PHP Project Security Advisory reports: When the library parses XMLRPC requests/responses, it constructs a string of PHP […]

Read more
NetBSD 10.0 — poppler — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — poppler — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-4352 CVE-2007-5392 CVE-2007-5393 CVE-2008-1693 CVE-2008-2950 CVE-2009-0800 CVE-2009-1180 CVE-2009-1181  +12 more Upstream summary: pkgsrc audit-packages flagged poppler<0.3.3nb2 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-3191 Table of contents Symptom & Impact Environment […]

Read more
Debian 12 — vte2.91 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — vte2.91 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-37535 Upstream summary: GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to […]

Read more
AlmaLinux 9 — fontforge — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 9

AlmaLinux 9 — fontforge — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2026:6628 Related CVEs: CVE-2025-15270 CVE-2025-15269 CVE-2025-15275 CVE-2025-15279 CVE-2024-25081 CVE-2024-25082 Upstream summary: FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and […]

Read more
FreeBSD 14 — eog — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — eog — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: eog — out-of-bounds write Related CVEs: CVE-2016-6855 Upstream summary: Felix Riemann reports: CVE-2016-6855 out-of-bounds write in eog 3.10.2. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.1.132-147.221 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.132-147.221 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-047 Related CVEs: CVE-2025-21927 CVE-2025-37785 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927) In the Linux kernel, the […]

Read more
FreeBSD 14 — py33-cryptography — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py33-cryptography — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-cryptography — vulnerable HKDF key generation Related CVEs: CVE-2016-9243 Upstream summary: Alex Gaynor reports: Fixed a bug where “HKDF“ would return an empty byte-string if used with a “length“ less […]

Read more
Windows Server 2022 — KB5036452 — security update — patch and remediation guide — diagnosis and fix on Windows Server 2022

Windows Server 2022 — KB5036452 — security update — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read  •  Source: Microsoft KB5036452 • MSRC update-guide entry Related CVEs: CVE-2024-26190 Affected components: Windows Server 2022, 23H2 Edition (Server Core installation) Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
FreeBSD 14 — lightzone — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — lightzone — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]

Read more
CHAT