July 2026 - Page 184 of 201

FreeBSD 15 — github-release-monitor — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — github-release-monitor — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: github-release-monitor — multiple vulnerabilities Related CVEs: CVE-2025-55183 CVE-2025-55184 Upstream summary: https://nextjs.org/blog/security-update-2025-12-11 reports: Description (Medium) Source Code Exposure: CVE-2025-55183 A specifically crafted HTTP request can cause a Server Function to return […]

Read more
FreeBSD 15 — quiche — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — quiche — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: quiche — Infinite loop triggered by connection ID retirement Related CVEs: CVE-2024-1410 CVE-2024-1765 CVE-2025-4820 CVE-2025-4821 CVE-2025-7054 Upstream summary: Quiche Releases reports: This update includes 1 security fix: High CVE-2025-7054: Infinite […]

Read more
Debian 13 — hunspell — vulnerability — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — hunspell — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 July 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-16707 Upstream summary: Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
NetBSD 9.4 — py-torch — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — py-torch — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-46148 CVE-2025-46150 CVE-2025-46152 CVE-2025-46153 CVE-2025-55552 CVE-2025-55554 CVE-2026-24747 CVE-2025-46149  +6 more Upstream summary: pkgsrc audit-packages flagged py{27,39,310,311,312,313}-torch<2.8.0 for vulnerability class 'incorrect-calculation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-46148 Table of contents Symptom & Impact Environment […]

Read more
Debian 13 — cifs-utils — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — cifs-utils — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-1678 CVE-2011-2724 CVE-2011-3585 CVE-2012-1586 CVE-2014-2830 CVE-2020-14342 CVE-2021-20208 CVE-2022-27239  +2 more Upstream summary: smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab […]

Read more
FreeBSD 15 — apache+mod_perl — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — apache+mod_perl — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using mod_proxy in reverse […]

Read more
Rocky Linux 9 — image-builder — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Rocky Linux 9

Rocky Linux 9 — image-builder — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Rocky Linux 9 📖 ~4 min read  •  Source: Rocky Linux RXSA RLSA-2026:13671 Related CVEs: CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2025-58183 Upstream summary: A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. […]

Read more
Debian 13 — libwebsockets — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — libwebsockets — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-11677 CVE-2025-11678 Upstream summary: Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a […]

Read more
Debian 13 — node-tar — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — node-tar — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-8860 CVE-2018-20834 CVE-2021-32803 CVE-2021-32804 CVE-2021-37701 CVE-2021-37712 CVE-2024-28863 CVE-2026-23745  +3 more Upstream summary: The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via […]

Read more
openSUSE Tumbleweed — epiphany — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — epiphany — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:15011-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-3839 CVE-2023-26081 CVE-2022-29536 CVE-2021-45085 CVE-2021-45088 CVE-2018-11396 Upstream summary: A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications […]

Read more
CHAT