Package Management

AlmaLinux 8 — dotnet-build-reference-packages — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — dotnet-build-reference-packages — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALEA-2022:0322 Upstream summary: .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fix(es) and Enhancement(s): […]

Read more
FreeBSD 13 — bind98-base — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — bind98-base — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bind — denial of service vulnerability Related CVEs: CVE-2012-5166 CVE-2012-5688 CVE-2013-2266 CVE-2013-3919 CVE-2013-4854 CVE-2014-0591 CVE-2014-8500 CVE-2014-8680 Upstream summary: ISC reports: We have today posted updated versions of 9.9.6 and 9.10.1 […]

Read more
FreeBSD 13 — xfce4-tumbler — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xfce4-tumbler — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: XFCE tumbler — Vulnerability in the GStreamer plugin Upstream summary: The XFCE project reports: Added mime type check to the gst-thumbnailer plugin to fix an undisclosed vulnerability. Table of contents […]

Read more
Debian 11 — liboggz — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — liboggz — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3377 Upstream summary: Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application […]

Read more
Debian 11 — node-mqtt-packet — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-mqtt-packet — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-5432 Upstream summary: A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 – 4.1.3, 5.0.0 – 5.6.1, 6.0.0 – 6.1.2 […]

Read more
AlmaLinux 8 — man-pages-overrides — vulnerability — patch and remediation guide — diagnosis and fix on AlmaLinux 8

AlmaLinux 8 — man-pages-overrides — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read  •  Source: AlmaLinux ALSA ALBA-2022:1951 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
Debian 11 — dpic — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — dpic — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-32420 CVE-2021-32421 CVE-2021-32422 CVE-2021-33388 CVE-2021-33390 Upstream summary: dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
Debian 11 — logol — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — logol — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-3453 Upstream summary: logol 1.5.0 uses world writable permissions for the /var/lib/logol/results directory, which allows local users to delete or overwrite arbitrary files. Table of contents Symptom & […]

Read more
CHAT