AlmaLinux 9 — libxml2 — multiple vulnerabilities (16 CVEs) — patch and remediation guide

April 14, 2025
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:12447 Related CVEs: CVE-2025-7425 CVE-2025-49794 CVE-2025-49796 CVE-2025-6021 CVE-2024-56171 CVE-2025-24928 CVE-2022-49043 CVE-2025-9714 +8 more Upstream summary: The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * […]

Debian 12 — bpfcc — vulnerability — patch and remediation guide

April 14, 2025
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 14 April 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-2314 Upstream summary: If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force […]

Debian 12 — rlottie — multiple vulnerabilities (5 CVEs) — patch and remediation guide

April 14, 2025
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 14 April 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-31317 CVE-2021-31321 CVE-2025-0634 CVE-2025-53074 CVE-2025-53075 Upstream summary: Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the VDasher constructor […]

Debian 11 — gettext.js — vulnerability — patch and remediation guide

April 14, 2025
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 14 April 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-43370 Upstream summary: gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting (XSS) injection if `.po` dictionary definition files are corrupted. […]

Ubuntu 24.04 — virtuoso-opensource — multiple vulnerabilities (20 CVEs) — patch and remediation guide

April 14, 2025
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 14 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6879-1 Related CVEs: CVE-2023-31620 CVE-2023-31622 CVE-2023-31624 CVE-2023-31626 CVE-2023-31627 CVE-2023-31629 CVE-2023-31630 CVE-2023-31631 +12 more Upstream summary: Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL statements. An attacker […]

Ubuntu 22.04 — freeglut — multiple vulnerabilities (2 CVEs) — patch and remediation guide

April 14, 2025
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 14 April 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7870-1 Related CVEs: CVE-2024-24258 CVE-2024-24259 Upstream summary: It was discovered that Freeglut incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a […]

AlmaLinux 8 — plexus-interactivity — multiple vulnerabilities (2 CVEs) — patch and remediation guide

April 14, 2025
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default […]

Ubuntu 24.04 — python-scrapy — multiple vulnerabilities (6 CVEs) — patch and remediation guide

April 14, 2025
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 14 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7476-1 Related CVEs: CVE-2021-41125 CVE-2022-0577 CVE-2024-1892 CVE-2024-1968 CVE-2024-3572 CVE-2024-3574 Upstream summary: It was discovered that Scrapy improperly exposed HTTP authentication credentials to request targets, including during redirects. An attacker could […]

Alpine Linux 3.20 — zstd — multiple vulnerabilities (3 CVEs) — patch and remediation guide

April 14, 2025
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.20 / fixed in 1.4.9-r0 📖 ~4 min read • Source: Alpine secdb entry — zstd 1.4.9-r0 Related CVEs: CVE-2021-24032 CVE-2021-24031 CVE-2019-11922 Upstream summary: Alpine main repository for vv3.20 ships zstd 1.4.9-r0 which addresses CVE-2021-24032. Table of contents Symptom & […]

SLES 15 — libQt6Gui6 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

April 14, 2025
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 14 April 2025 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2873-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-33861 CVE-2024-30161 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix […]

Linux

AlmaLinux 9 — libxml2 — multiple vulnerabilities (16 CVEs) — patch and remediation guide

Debian 12 — bpfcc — vulnerability — patch and remediation guide

Debian 12 — rlottie — multiple vulnerabilities (5 CVEs) — patch and remediation guide

Debian 11 — gettext.js — vulnerability — patch and remediation guide

Ubuntu 24.04 — virtuoso-opensource — multiple vulnerabilities (20 CVEs) — patch and remediation guide

Ubuntu 22.04 — freeglut — multiple vulnerabilities (2 CVEs) — patch and remediation guide

AlmaLinux 8 — plexus-interactivity — multiple vulnerabilities (2 CVEs) — patch and remediation guide

Ubuntu 24.04 — python-scrapy — multiple vulnerabilities (6 CVEs) — patch and remediation guide

Alpine Linux 3.20 — zstd — multiple vulnerabilities (3 CVEs) — patch and remediation guide

SLES 15 — libQt6Gui6 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

Tags