Package Management

FreeBSD 14 — pound — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — pound — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pound remotely exploitable vulnerability Upstream summary: An unknown remotely exploitable vulnerability was disclosed. Robert Segall writes: a security vulnerability was brought to my attention (many thanks to Akira Higuchi). Everyone […]

Read more
FreeBSD 14 — isakmpd — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — isakmpd — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isakmpd payload handling denial-of-service vulnerabilities Related CVEs: CVE-2004-0218 CVE-2004-0219 CVE-2004-0220 CVE-2004-0221 CVE-2004-0222 Upstream summary: Numerous errors in isakmpd's input packet validation lead to denial-of-service vulnerabilities. From the Rapid7 advisory: The […]

Read more
NetBSD 10.0 — netatalk3 — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — netatalk3 — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-1160 CVE-2022-23125 CVE-2022-23124 CVE-2022-23123 CVE-2022-23122 CVE-2022-23121 CVE-2022-0194 CVE-2022-43634 Upstream summary: pkgsrc audit-packages flagged netatalk3<3.1.12 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-1160 Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 14 — postgresql90-server — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — postgresql90-server — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: End of Life Ports Related CVEs: CVE-2014-8161 CVE-2015-0241 CVE-2015-0242 CVE-2015-0243 CVE-2015-0244 CVE-2015-3165 CVE-2015-3166 CVE-2015-3167  +2 more Upstream summary: These packages have reached End of Life status and/or have been removed […]

Read more
Debian 12 — feh — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — feh — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-2246 CVE-2011-0702 CVE-2011-1031 CVE-2017-7875 Upstream summary: feh before 1.8, when the –wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a […]

Read more
AlmaLinux 8 — perl-String-ShellQuote — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — perl-String-ShellQuote — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALSA-2024:10219 Related CVEs: CVE-2024-45321 Upstream summary: The panminus is a script to get, unpack, build and install modules from CPAN. Security Fix(es): * perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability […]

Read more
FreeBSD 14 — kdebase-workspace — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — kdebase-workspace — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: KDM — local privilege escalation vulnerability Related CVEs: CVE-2010-0436 Upstream summary: KDE Security Advisory reports: KDM contains a race condition that allows local attackers to make arbitrary files on the […]

Read more
Debian 12 — commons-daemon — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — commons-daemon — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-2729 Upstream summary: native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and […]

Read more
openSUSE Tumbleweed — keepalived — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — keepalived — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2086-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-44225 CVE-2018-19044 CVE-2018-19045 CVE-2018-19046 CVE-2024-41184 Upstream summary: In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to […]

Read more
Debian 12 — jquery-minicolors — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — jquery-minicolors — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-32850 Upstream summary: jQuery MiniColors is a color picker built on jQuery. Prior to version 2.3.6, jQuery MiniColors is prone to cross-site scripting when handling untrusted color names. […]

Read more
CHAT