Amazon Linux 2 — samba — multiple vulnerabilities (20 CVEs) — patch and remediation guide

April 29, 2022
Linux
Comment off

🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2022-1746 Related CVEs: CVE-2016-2124 CVE-2020-25717 CVE-2021-44142 CVE-2020-14318 CVE-2020-14323 CVE-2020-1472 CVE-2022-38023 CVE-2022-32744 +12 more Upstream summary: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution (CVE-2021-44142) Table of contents […]

IBM AIX 7.3 — CVE-2007-1913 — vulnerability — patch and remediation guide

April 28, 2022
Tutorials
Comment off

🟡 Medium ⏱ 15–45 min Last verified: 28 April 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2007-1913, IBM PSIRT advisory page CVE: CVE-2007-1913 NVD summary: The TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to verify the existence of users and […]

FreeBSD 13 — eternalterminal — multiple vulnerabilities (2 CVEs) — patch and remediation guide

April 28, 2022
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 28 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: net/eternalterminal — Multiple vulnerabilities Related CVEs: CVE-2022-48257 CVE-2022-48258 Upstream summary: Mitre reports: etserver and etclient have predictable logfile names in /tmp and they are world-readable logfiles Table of contents Symptom […]

FreeBSD 12 — py310-pygments — multiple vulnerabilities (2 CVEs) — patch and remediation guide

April 28, 2022
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 28 April 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-pygments — multiple DoS vulnerabilities Related CVEs: CVE-2021-20270 CVE-2021-27291 Upstream summary: Red Hat reports: An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of […]

AlmaLinux 8 — libICE — vulnerability — patch and remediation guide

April 28, 2022
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALBA-2019:3412 Upstream summary: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

FreeBSD 12 — py38-ansible-core — multiple vulnerabilities (2 CVEs) — patch and remediation guide

April 28, 2022
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 28 April 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]

FreeBSD 13 — v — multiple vulnerabilities (5 CVEs) — patch and remediation guide

April 28, 2022
BSD
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 28 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: node, iojs, and v8 — denial of service Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 CVE-2015-5380 Upstream summary: node reports: This release of Node.js fixes a bug that triggers an out-of-band […]

FreeBSD 13 — linux-f8-tiff — multiple vulnerabilities (12 CVEs) — patch and remediation guide

April 28, 2022
BSD
Comment off

🟠 High ⏱ 15–60 min Last verified: 28 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — multiple vulnerabilities Related CVEs: CVE-2017-5225 CVE-2017-7592 CVE-2017-7593 CVE-2017-7594 CVE-2017-7595 CVE-2017-7596 CVE-2017-7597 CVE-2017-7598 +4 more Upstream summary: NVD reports: Please reference CVE/URL list for details Table of contents Symptom […]

Debian 11 — eterm — multiple vulnerabilities (5 CVEs) — patch and remediation guide

April 28, 2022
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 28 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0021 CVE-2003-0068 CVE-2003-0382 CVE-2008-1692 CVE-2021-33477 Upstream summary: The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence […]

FreeBSD 13 — virtualbox — vulnerability — patch and remediation guide

April 28, 2022
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 28 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: virtualbox — privilege escalation Related CVEs: CVE-2009-3692 Upstream summary: Sun reports: A security vulnerability in the VBoxNetAdpCtl configuration tool for certain Sun VirtualBox 3.0 packages may allow local unprivileged users […]

Package Management

Amazon Linux 2 — samba — multiple vulnerabilities (20 CVEs) — patch and remediation guide

IBM AIX 7.3 — CVE-2007-1913 — vulnerability — patch and remediation guide

FreeBSD 13 — eternalterminal — multiple vulnerabilities (2 CVEs) — patch and remediation guide

FreeBSD 12 — py310-pygments — multiple vulnerabilities (2 CVEs) — patch and remediation guide

AlmaLinux 8 — libICE — vulnerability — patch and remediation guide

FreeBSD 12 — py38-ansible-core — multiple vulnerabilities (2 CVEs) — patch and remediation guide

FreeBSD 13 — v — multiple vulnerabilities (5 CVEs) — patch and remediation guide

FreeBSD 13 — linux-f8-tiff — multiple vulnerabilities (12 CVEs) — patch and remediation guide

Debian 11 — eterm — multiple vulnerabilities (5 CVEs) — patch and remediation guide

FreeBSD 13 — virtualbox — vulnerability — patch and remediation guide

Tags