January 2025 - Page 55 of 100

Alpine Linux 3.18 — botan — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux 3.18

Alpine Linux 3.18 — botan — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 2.9.0-r0 📖 ~4 min read  •  Source: Alpine secdb entry — botan 2.9.0-r0 Related CVEs: CVE-2018-20187 CVE-2018-12435 CVE-2018-9860 CVE-2018-9127 CVE-2024-34702 CVE-2024-34703 CVE-2024-39312 CVE-2021-40529  +1 more Upstream summary: Alpine main repository for vv3.18 ships botan 2.9.0-r0 which […]

Read more
FreeBSD 14 — mod_perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mod_perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_perl — cross-site scripting Related CVEs: CVE-2007-1349 CVE-2009-0796 Upstream summary: Secunia reports: Certain input passed to the "Apache::Status" and "Apache2::Status" modules is not properly sanitised before being returned to the […]

Read more
FreeBSD 13 — gstreamer1-plugins-opus — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — gstreamer1-plugins-opus — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gstreamer1-plugins-opus — Stack buffer-overflow in Opus decoder Related CVEs: CVE-2024-47607 Upstream summary: The GStreamer Security Center reports: Stack buffer-overflow in Opus decoder that can cause crashes for certain input files. […]

Read more
FreeBSD 14 — pivotx — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — pivotx — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pivotx — Multiple unrestricted file upload vulnerabilities Related CVEs: CVE-2011-1035 CVE-2012-2274 CVE-2014-0341 Upstream summary: Pivotx reports: Multiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow remote authenticated […]

Read more
FreeBSD 12 — wolfssl — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wolfssl — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wolfssl — multiple issues Related CVEs: CVE-2015-6925 CVE-2015-7744 CVE-2020-12966 CVE-2021-46744 CVE-2022-34293 CVE-2025-11931 CVE-2025-11932 CVE-2025-11933  +5 more Upstream summary: wolfSSL blog reports: This release includes multiple fixes across TLS 1.2, TLS […]

Read more
FreeBSD 14 — e2fsprogs — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — e2fsprogs — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: e2fsprogs — out-of-bounds read/write vulnerability Related CVEs: CVE-2007-5497 CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304 Upstream summary: Nils Bars reports: During the processing of [a specially fuzzed disk image], an out-of-bounds write […]

Read more
FreeBSD 14 — php5-horde — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — php5-horde — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2006-4481 CVE-2006-4482 CVE-2006-4483 CVE-2006-4484 CVE-2006-4485 CVE-2006-4486 CVE-2006-4812 CVE-2006-5178  +8 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]

Read more
Debian 11 — libcoap2 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libcoap2 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-46304 CVE-2025-65493 CVE-2025-65494 CVE-2025-65495 CVE-2025-65496 CVE-2025-65497 CVE-2025-65498 CVE-2025-65499  +2 more Upstream summary: A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a […]

Read more
Debian 12 — libcommons-lang3-java — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — libcommons-lang3-java — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-48924 Upstream summary: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass(…) […]

Read more
Debian 12 — retroarch — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — retroarch — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-23914 CVE-2020-23915 CVE-2025-9136 CVE-2025-9809 Upstream summary: An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the peg::AstOptimizer::optimize() located in peglib.h. It allows an […]

Read more
CHAT