March 2026 - Page 93 of 182

Rocky Linux 9 — pg_repack — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Rocky Linux 9

Rocky Linux 9 — pg_repack — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read  •  Source: Rocky Linux RXSA RLSA-2026:4110 Related CVEs: CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2025-12817 CVE-2025-12818 Upstream summary: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation of multibyte character […]

Read more
Debian 13 — rancid — vulnerability — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — rancid — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-4979 Upstream summary: getipacctg in rancid 2.3.2~a8 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/ipacct.#####.prefixes, (2) /tmp/ipacct.#####.sorted, (3) /tmp/ipacct.#####.pl, and (4) /tmp/ipacct.##### […]

Read more
openSUSE Tumbleweed — cmctl — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — cmctl — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:2706 (see also SUSE bugzilla) Related CVEs: CVE-2025-68121 CVE-2023-39325 CVE-2023-44487 CVE-2026-32952 CVE-2024-40635 CVE-2024-28180 CVE-2023-45288 Upstream summary: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated […]

Read more
Debian 12 — ormar — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — ormar — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-26198 CVE-2026-27953 Upstream summary: Ormar is a async mini ORM for Python. In versions 0.9.9 through 0.22.0, when performing aggregate queries, Ormar ORM constructs SQL expressions by passing […]

Read more
openSUSE Tumbleweed — libvncclient1 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — libvncclient1 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2019:0045-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-15126 CVE-2018-15127 CVE-2018-20749 CVE-2018-20750 CVE-2018-6307 CVE-2026-32853 CVE-2026-32854 CVE-2017-18922  +12 more Upstream summary: LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file […]

Read more
Debian 12 — libpf4j-java — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — libpf4j-java — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-40826 CVE-2023-40827 CVE-2023-40828 CVE-2025-70952 Upstream summary: An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the […]

Read more
Debian 13 — libtwelvemonkeys-java — vulnerability — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — libtwelvemonkeys-java — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 March 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-23792 Upstream summary: The package com.twelvemonkeys.imageio:imageio-metadata before 3.7.1 are vulnerable to XML External Entity (XXE) Injection due to an insecurely initialized XML parser for reading XMP Metadata. An attacker […]

Read more
Windows Server 2019 — KB5087538 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2019

Windows Server 2019 — KB5087538 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read  •  Source: Microsoft KB5087538 • MSRC update-guide entry Related CVEs: CVE-2026-35421 CVE-2026-41089 CVE-2026-32161 CVE-2026-40403 CVE-2026-21530 CVE-2026-33834 CVE-2026-33839 CVE-2026-34329  +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Heap-based buffer overflow in Windows […]

Read more
Ubuntu 22.04 — binutils — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — binutils — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 March 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7919-1 Related CVEs: CVE-2025-11495 CVE-2025-11081 CVE-2025-11083 CVE-2025-11412 CVE-2025-11082 CVE-2025-11413 CVE-2025-11414 CVE-2025-11494  +12 more Upstream summary: It was discovered that GNU binutils' dump_dwarf_section function could be manipulated to perform an out-of-bounds […]

Read more
SLES 16 — libid3tag0 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on SLES 16

SLES 16 — libid3tag0 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 March 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0715-1 (see also SUSE bugzilla) Related CVEs: CVE-2004-2779 CVE-2008-2109 CVE-2017-11550 CVE-2017-11551 Upstream summary: id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, […]

Read more
CHAT