Alpine Linux 3.18 — firefox-esr — multiple vulnerabilities (20 CVEs) — patch and remediation guide

April 3, 2024
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.18 / fixed in 91.9.1-r0 📖 ~4 min read • Source: Alpine secdb entry — firefox-esr 91.9.1-r0 Related CVEs: CVE-2022-1529 CVE-2022-1802 CVE-2022-29909 CVE-2022-29911 CVE-2022-29912 CVE-2022-29914 CVE-2022-29916 CVE-2022-29917 +12 more Upstream summary: Alpine community repository for vv3.18 ships firefox-esr 91.9.1-r0 which […]

Debian 12 — freedroidrpg — multiple vulnerabilities (2 CVEs) — patch and remediation guide

April 2, 2024
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 2 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-14938 CVE-2020-14939 Upstream summary: An issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from […]

Amazon Linux 2023 — dbus — multiple vulnerabilities (4 CVEs) — patch and remediation guide

April 2, 2024
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-213 Related CVEs: CVE-2023-34969 CVE-2022-42010 CVE-2022-42011 CVE-2022-42012 Upstream summary: D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using […]

AlmaLinux 8 — openldap — vulnerability — patch and remediation guide

April 2, 2024
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2024:4264 Related CVEs: CVE-2023-2953 Upstream summary: OpenLDAP is an open-source suite of Lightweight Directory Access Protocol (LDAP) applications and development tools. LDAP is a set of protocols used to access and maintain […]

Debian 12 — gawk — vulnerability — patch and remediation guide

April 2, 2024
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 2 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-4156 Upstream summary: A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to […]

Debian 12 — dibbler — multiple vulnerabilities (4 CVEs) — patch and remediation guide

April 2, 2024
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 2 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-5028 CVE-2007-5029 CVE-2007-5030 CVE-2007-5031 Upstream summary: Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors. Table […]

openSUSE Tumbleweed — opencv — multiple vulnerabilities (3 CVEs) — patch and remediation guide

April 2, 2024
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0246-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-4863 CVE-2019-14491 CVE-2019-15939 Upstream summary: Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform […]

Debian 12 — gtk+3.0 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

April 2, 2024
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 2 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7447 CVE-2014-1949 CVE-2024-6655 Upstream summary: Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly […]

SLES 15 — libcares2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

April 2, 2024
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 2 April 2024 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1135-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-25629 CVE-2022-4904 CVE-2016-5180 CVE-2017-1000381 Upstream summary: c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as […]

Alpine Linux 3.19 — privoxy — multiple vulnerabilities (17 CVEs) — patch and remediation guide

April 2, 2024
Linux
Comment off

🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux 3.19 / fixed in 3.0.33-r0 📖 ~4 min read • Source: Alpine secdb entry — privoxy 3.0.33-r0 Related CVEs: CVE-2021-44540 CVE-2021-44541 CVE-2021-44542 CVE-2021-44543 CVE-2021-20272 CVE-2021-20273 CVE-2021-20274 CVE-2021-20275 +9 more Upstream summary: Alpine main repository for vv3.19 ships privoxy 3.0.33-r0 which […]

Linux

Alpine Linux 3.18 — firefox-esr — multiple vulnerabilities (20 CVEs) — patch and remediation guide

Debian 12 — freedroidrpg — multiple vulnerabilities (2 CVEs) — patch and remediation guide

Amazon Linux 2023 — dbus — multiple vulnerabilities (4 CVEs) — patch and remediation guide

AlmaLinux 8 — openldap — vulnerability — patch and remediation guide

Debian 12 — gawk — vulnerability — patch and remediation guide

Debian 12 — dibbler — multiple vulnerabilities (4 CVEs) — patch and remediation guide

openSUSE Tumbleweed — opencv — multiple vulnerabilities (3 CVEs) — patch and remediation guide

Debian 12 — gtk+3.0 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

SLES 15 — libcares2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

Alpine Linux 3.19 — privoxy — multiple vulnerabilities (17 CVEs) — patch and remediation guide

Tags