Package Management

FreeBSD 13 — netqmail-mysql — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — netqmail-mysql — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 9 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qmail — 64 bit integer overflows with possible remote code execution on large SMTP requests Related CVEs: CVE-2005-1513 CVE-2005-1514 CVE-2005-1515 Upstream summary: Georgi Guninski writes: There are several issues with […]

Read more
Gentoo Linux — media-video/atomicparsley-wez — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — media-video/atomicparsley-wez — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202305-01 Related CVEs: CVE-2021-37231 CVE-2021-37232 Upstream summary: Multiple vulnerabilities have been discovered in AtomicParsley. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
Debian 11 — goffice — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — goffice — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-2491 Upstream summary: Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers […]

Read more
Debian 11 — libemail-address-list-perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libemail-address-list-perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-1474 CVE-2018-18898 Upstream summary: Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU […]

Read more
Debian 11 — racket — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — racket — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 9 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-3476 CVE-2007-3477 CVE-2007-3996 CVE-2009-3546 CVE-2021-32773 Upstream summary: Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial […]

Read more
Gentoo Linux — sci-libs/matio — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Gentoo Linux

Gentoo Linux — sci-libs/matio — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read  •  Source: Gentoo GLSA GLSA-202408-26 Related CVEs: CVE-2020-36428 CVE-2021-36977 Upstream summary: Multiple vulnerabilities have been discovered in matio. Please review the CVE identifiers referenced below for details. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
Ubuntu 16.04 — graphite-web — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — graphite-web — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 9 June 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6243-1 Related CVEs: CVE-2017-18638 CVE-2022-4728 CVE-2022-4729 CVE-2022-4730 Upstream summary: It was discovered that Graphite-Web incorrectly handled certain inputs. If a user or an automated system were tricked into opening a […]

Read more
Ubuntu 22.04 — onionshare — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — onionshare — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 June 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7625-1 Related CVEs: CVE-2018-19960 CVE-2022-21689 Upstream summary: It was discovered that OnionShare could be exploited when run with the –debug argument. A local attacker could possibly use this issue to […]

Read more
Ubuntu 18.04 — mumble — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — mumble — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 June 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5195-1 Related CVEs: CVE-2021-27229 Upstream summary: It was discovered that the Mumble client supported websites for public servers with arbitrary URL schemes. If a user were tricked into visiting a […]

Read more
SLES 15 — libswscale5_9 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on SLES 15

SLES 15 — libswscale5_9 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 June 2022 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-33815 CVE-2019-11338 CVE-2019-11339 CVE-2019-15942 CVE-2018-7751 CVE-2020-35964 Upstream summary: dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly checked. […]

Read more
CHAT