May 2025 - Page 98 of 103

FreeBSD 14 — mosquitto — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mosquitto — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mosquitto — NULL pointer dereference Upstream summary: Roger Light reports: If an authenticated client connected with MQTT v5 sent a malformed CONNACK message to the broker a NULL pointer dereference […]

Read more
Windows Server 2022 — KB5041828 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2022

Windows Server 2022 — KB5041828 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read  •  Source: Microsoft KB5041828 • MSRC update-guide entry Related CVEs: CVE-2024-38063 CVE-2024-38140 CVE-2022-3775 CVE-2024-38178 CVE-2024-38193 CVE-2024-38196 CVE-2024-38198 CVE-2024-38199  +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Table of […]

Read more
FreeBSD 14 — ossec-hids-local — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ossec-hids-local — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: security/ossec-hids-* — root escalation via syscheck feature Related CVEs: CVE-2014-5284 CVE-2015-3222 Upstream summary: OSSEC reports: The CVE-2015-3222 vulnerability, which allows for root escalation via sys check has been fixed in […]

Read more
Alpine Linux 3.20 — soundtouch — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux 3.20

Alpine Linux 3.20 — soundtouch — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 2.1.2-r0 📖 ~4 min read  •  Source: Alpine secdb entry — soundtouch 2.1.2-r0 Related CVEs: CVE-2018-17096 CVE-2018-17097 CVE-2018-17098 Upstream summary: Alpine community repository for vv3.20 ships soundtouch 2.1.2-r0 which addresses CVE-2018-17096. Table of contents Symptom & […]

Read more
Alpine Linux 3.20 — mrxvt — vulnerability — patch and remediation guide — diagnosis and fix on Alpine Linux 3.20

Alpine Linux 3.20 — mrxvt — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 0.5.4-r9 📖 ~4 min read  •  Source: Alpine secdb entry — mrxvt 0.5.4-r9 Related CVEs: CVE-2021-33477 Upstream summary: Alpine community repository for vv3.20 ships mrxvt 0.5.4-r9 which addresses CVE-2021-33477. Table of contents Symptom & Impact Environment […]

Read more
Alpine Linux 3.20 — pjproject — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux 3.20

Alpine Linux 3.20 — pjproject — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 2.14-r0 📖 ~4 min read  •  Source: Alpine secdb entry — pjproject 2.14-r0 Related CVEs: CVE-2023-38703 CVE-2023-27585 CVE-2022-31031 CVE-2022-39244 CVE-2022-39269 CVE-2022-24754 CVE-2022-24763 CVE-2022-24764  +12 more Upstream summary: Alpine main repository for vv3.20 ships pjproject 2.14-r0 which […]

Read more
Debian 11 — r-cran-gh — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — r-cran-gh — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-54956 Upstream summary: The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the corresponding HTTP request. […]

Read more
Alpine Linux 3.19 — uriparser — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux 3.19

Alpine Linux 3.19 — uriparser — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 0.9.8-r0 📖 ~4 min read  •  Source: Alpine secdb entry — uriparser 0.9.8-r0 Related CVEs: CVE-2024-34402 CVE-2024-34403 CVE-2021-46141 CVE-2021-46142 Upstream summary: Alpine community repository for vv3.19 ships uriparser 0.9.8-r0 which addresses CVE-2024-34402. Table of contents Symptom […]

Read more
Debian 11 — node-micromatch — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-micromatch — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 May 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-4067 Upstream summary: The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micromatch.braces()` in `index.js` because the […]

Read more
CHAT