April 2026 - Page 93 of 170

Rocky Linux 9 — php-pecl-zip — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Rocky Linux 9

Rocky Linux 9 — php-pecl-zip — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read  •  Source: Rocky Linux RXSA RLSA-2026:1429 Related CVEs: CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1220 CVE-2025-1735 CVE-2025-6491 CVE-2022-31628 CVE-2022-31629  +3 more Upstream summary: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): […]

Read more
Rocky Linux 8 — libssh — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Rocky Linux 8

Rocky Linux 8 — libssh — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read  •  Source: Rocky Linux RXSA RLSA-2025:18286 Related CVEs: CVE-2025-5318 CVE-2025-5372 Upstream summary: libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: […]

Read more
openSUSE Tumbleweed — kyverno — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — kyverno — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-4789 CVE-2026-24051 CVE-2026-24686 Upstream summary: Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions. Table of contents Symptom & […]

Read more
openSUSE Leap 15.6 — munge — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — munge — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:2918 (see also SUSE bugzilla) Related CVEs: CVE-2026-25506 Upstream summary: MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer […]

Read more
Fedora 42 — python3.14 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Fedora 42

Fedora 42 — python3.14 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Fedora 42 📖 ~4 min read  •  Source: Fedora update FEDORA-2026-1fd21102d1 Related CVEs: CVE-2026-1502 CVE-2026-4786 CVE-2026-5713 CVE-2026-6100 Upstream summary: Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 —- New minor version of the alternate Python interpreter Table of contents Symptom & Impact Environment […]

Read more
Windows Server 2016 — KB5087537 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2016

Windows Server 2016 — KB5087537 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read  •  Source: Microsoft KB5087537 • MSRC update-guide entry Related CVEs: CVE-2026-35421 CVE-2026-41089 CVE-2026-32161 CVE-2026-40403 CVE-2026-21530 CVE-2026-33834 CVE-2026-34329 CVE-2026-34330  +12 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Microsoft summary: Heap-based buffer […]

Read more
FreeBSD 15 — netqmail — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — netqmail — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qmail — 64 bit integer overflows with possible remote code execution on large SMTP requests Related CVEs: CVE-2005-1513 CVE-2005-1514 CVE-2005-1515 Upstream summary: Georgi Guninski writes: There are several issues with […]

Read more
FreeBSD 15 — isc-dhcpd — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — isc-dhcpd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcpd — format string vulnerabilities Related CVEs: CVE-2004-1006 Upstream summary: The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary […]

Read more
FreeBSD 15 — py310-setuptools — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py310-setuptools — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-setuptools — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2025-47273 Upstream summary: https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, […]

Read more
CHAT