January 2026 - Page 61 of 150

FreeBSD 12 — py314-strawberry-graphql — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py314-strawberry-graphql — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 January 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]

Read more
FreeBSD 15 — mod_http — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — mod_http — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_http2 — Multiple vulnerabilities Related CVEs: CVE-2020-11984 CVE-2020-11993 CVE-2020-9490 CVE-2024-24795 CVE-2024-27316 CVE-2024-38709 CVE-2025-49630 CVE-2025-53020 Upstream summary: The mod_http2 project reports: a client can increase memory consumption for a HTTP/2 connection […]

Read more
FreeBSD 15 — openvpn-devel — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — openvpn-devel — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenVPN — avoid buffer overread parsing routes or endpoints Related CVEs: CVE-2008-3459 CVE-2020-11810 CVE-2023-46849 CVE-2023-46850 CVE-2025-10680 CVE-2025-12106 CVE-2025-13086 CVE-2025-2704 Upstream summary: Mikhail Khachaiants reports: socket: reject mismatched address family in […]

Read more
openSUSE Tumbleweed — python311-python-multipart — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — python311-python-multipart — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1961-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-42561 CVE-2026-40347 Upstream summary: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a denial of service vulnerability in multipart part […]

Read more
Debian 13 — lftp — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — lftp — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0963 CVE-2007-2348 CVE-2010-2251 CVE-2018-10916 Upstream summary: Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via […]

Read more
Debian 13 — sanlock — vulnerability — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — sanlock — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-5638 Upstream summary: The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota […]

Read more
Common Problems 114109

RHEL 10 – tuned profile reverts after reboot and performance degrades – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 21 January 2026 Affected versions: RHEL 10.0 RHEL 10.1 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related […]

Read more
openSUSE Leap 15.6 — wireshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — wireshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0754-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-1492 CVE-2024-11595 CVE-2024-11596 CVE-2024-0207 CVE-2024-0210 CVE-2024-0211 CVE-2024-2955 CVE-2026-0959  +12 more Upstream summary: Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and […]

Read more
Debian 12 — libcrypt-argon2-perl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — libcrypt-argon2-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 January 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-8463 Upstream summary: Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input. The auto-detect form of argon2_verify passes […]

Read more
Debian 13 — xtrlock — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — xtrlock — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-0079 CVE-2016-10894 Upstream summary: Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session. Table of contents […]

Read more
CHAT