Debian 13 — gimp — multiple vulnerabilities (20 CVEs) — patch and remediation guide

January 5, 2026
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 5 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-3404 CVE-2006-4519 CVE-2007-2356 CVE-2007-2949 CVE-2007-3126 CVE-2007-3741 CVE-2009-1570 CVE-2009-3909 +12 more Upstream summary: Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to […]

FreeBSD 15 — duo — security advisory — patch and remediation guide

January 4, 2026
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 4 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: duo — Two-factor authentication bypass Upstream summary: The duo security team reports: An untrusted user may be able to set the http_proxy variable to an invalid address. If this happens, […]

FreeBSD 15 — php56-odbc — multiple vulnerabilities (12 CVEs) — patch and remediation guide

January 4, 2026
BSD
Comment off

🟠 High ⏱ 15–60 min Last verified: 4 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292 +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

FreeBSD 15 — horde-gollem — security advisory — patch and remediation guide

January 4, 2026
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 4 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde-gollem — XSS vulnerability Upstream summary: The Horde team reports: The major changes compared to Gollem version H3 (1.1.1) are: * Fixed an XSS vulnerability in the file viewer. Table […]

NetBSD 10.0 — ruby-rails80 — vulnerability — patch and remediation guide

January 4, 2026
BSD
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-55193 Upstream summary: pkgsrc audit-packages flagged ruby{31,32,33,34}-rails80<8.0.2.1 for vulnerability class 'improper-output-neutralization'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-55193 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

FreeBSD 15 — py39-sqlalchemy — multiple vulnerabilities (2 CVEs) — patch and remediation guide

January 4, 2026
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 4 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-sqlalchemy12 — multiple SQL Injection vulnerabilities Related CVEs: CVE-2019-7164 CVE-2019-7548 Upstream summary: 21k reports: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter. nosecurity reports: […]

FreeBSD 15 — apache22-event-mpm — multiple vulnerabilities (13 CVEs) — patch and remediation guide

January 4, 2026
BSD
Comment off

🟠 High ⏱ 15–60 min Last verified: 4 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: apache22 — chunk header parsing defect Related CVEs: CVE-2012-0833 CVE-2012-2687 CVE-2012-3499 CVE-2012-4558 CVE-2013-1862 CVE-2013-1896 CVE-2013-5704 CVE-2013-6438 +5 more Upstream summary: Apache Foundation reports: CVE-2015-3183 core: Fix chunk header parsing defect. […]

FreeBSD 15 — hanemacs — vulnerability — patch and remediation guide

January 4, 2026
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 4 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]

FreeBSD 15 — sl-openoffice-SL — vulnerability — patch and remediation guide

January 4, 2026
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 4 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading a […]

Amazon Linux 2023 — aide — vulnerability — patch and remediation guide

January 4, 2026
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1462 Related CVEs: CVE-2025-54409 Upstream summary: AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can […]

2026 - Page 1355 of 1369

Debian 13 — gimp — multiple vulnerabilities (20 CVEs) — patch and remediation guide

FreeBSD 15 — duo — security advisory — patch and remediation guide

FreeBSD 15 — php56-odbc — multiple vulnerabilities (12 CVEs) — patch and remediation guide

FreeBSD 15 — horde-gollem — security advisory — patch and remediation guide

NetBSD 10.0 — ruby-rails80 — vulnerability — patch and remediation guide

FreeBSD 15 — py39-sqlalchemy — multiple vulnerabilities (2 CVEs) — patch and remediation guide

FreeBSD 15 — apache22-event-mpm — multiple vulnerabilities (13 CVEs) — patch and remediation guide

FreeBSD 15 — hanemacs — vulnerability — patch and remediation guide

FreeBSD 15 — sl-openoffice-SL — vulnerability — patch and remediation guide

Amazon Linux 2023 — aide — vulnerability — patch and remediation guide

Tags