2025 - Page 84 of 1252

FreeBSD 15 — openvswitch — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — openvswitch — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openvswitch — MPLS buffer overflow Related CVEs: CVE-2016-2074 Upstream summary: Open vSwitch reports: Multiple versions of Open vSwitch are vulnerable to remote buffer overflow attacks, in which crafted MPLS packets […]

Read more
AlmaLinux 8 — aqute-bnd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — aqute-bnd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default […]

Read more
FreeBSD 15 — iperf — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — iperf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: iperf3 — buffer overflow Related CVEs: CVE-2016-4303 Upstream summary: ESnet reports: A malicious process can connect to an iperf3 server and, by sending a malformed message on the control channel, […]

Read more
Debian 13 — galera-4 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — galera-4 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-5157 Upstream summary: A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service. […]

Read more
Debian 13 — prototypejs — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — prototypejs — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-7220 CVE-2020-27511 Upstream summary: Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors. Table of contents Symptom & […]

Read more
Debian 13 — e2fsprogs — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — e2fsprogs — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-5497 CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304 Upstream summary: Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted […]

Read more
openSUSE Tumbleweed — pam_u2f — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — pam_u2f — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0167-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23013 CVE-2021-31924 CVE-2019-12209 CVE-2019-12210 Upstream summary: In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module (PAM) […]

Read more
SLES 16 — btrfsmaintenance — vulnerability — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — btrfsmaintenance — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2025 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-14722 Upstream summary: An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted […]

Read more
SLES 15 — iperf — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — iperf — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 December 2025 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02749-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-54351 CVE-2023-38403 CVE-2025-54349 CVE-2025-54350 CVE-2024-53580 CVE-2024-26306 Upstream summary: In iperf before 3.19.1, net.c has a buffer overflow when –skip-rx-copy is used (for MSG_TRUNC in recv). […]

Read more
CHAT