2025 - Page 90 of 1252

Amazon Linux 2023 — kernel-livepatch-6.1.148-173.267 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.148-173.267 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-109 Related CVEs: CVE-2025-39677 CVE-2025-39691 CVE-2025-39923 CVE-2025-39955 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdisc_dequeue_internal (CVE-2025-39677) In the Linux kernel, […]

Read more
Debian 13 — node-set-value — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — node-set-value — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-10747 CVE-2021-23440 Upstream summary: set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype […]

Read more
openSUSE Tumbleweed — libpcre2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libpcre2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:21094-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-58050 CVE-2017-8786 Upstream summary: The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read […]

Read more
Debian 13 — nextcloud-desktop — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — nextcloud-desktop — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-8189 CVE-2020-8225 CVE-2020-8227 CVE-2021-22879 CVE-2021-22895 CVE-2021-32728 CVE-2022-39331 CVE-2022-39332  +12 more Upstream summary: A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local […]

Read more
Debian 13 — pitivi — vulnerability — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — pitivi — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 December 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-0855 Upstream summary: The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path. Table of contents Symptom […]

Read more
Debian 13 — gridengine — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — gridengine — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-0208 CVE-2012-0523 Upstream summary: Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows remote authenticated users to affect confidentiality, integrity, […]

Read more
Rocky Linux 9 — httpd — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Rocky Linux 9

Rocky Linux 9 — httpd — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read  •  Source: Rocky Linux RXSA RLSA-2025:23919 Related CVEs: CVE-2025-58098 CVE-2025-65082 CVE-2025-66200 Upstream summary: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Apache HTTP Server: […]

Read more
Debian 11 — rhino — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — rhino — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 December 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-66453 Upstream summary: Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float […]

Read more
NetBSD 9.4 — liboqs — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — liboqs — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2024-54137 CVE-2025-48946 CVE-2025-52473 Upstream summary: pkgsrc audit-packages flagged liboqs<0.12.0 for vulnerability class 'incorrect-decapsulation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-54137 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
Debian 12 — smb4k — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — smb4k — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 December 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-2851 CVE-2007-0472 CVE-2007-0473 CVE-2007-0474 CVE-2007-0475 CVE-2014-2581 CVE-2017-8849 CVE-2025-66002  +1 more Upstream summary: smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a […]

Read more
CHAT