AlmaLinux 8 — wavpack — multiple vulnerabilities (7 CVEs) — patch and remediation guide

April 20, 2022
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2022:7558 Related CVEs: CVE-2021-44269 CVE-2018-19840 CVE-2018-19841 CVE-2019-1010315 CVE-2019-1010317 CVE-2019-1010319 CVE-2019-11498 Upstream summary: WavPack is a completely open audio compression format providing lossless, high-quality lossy and a unique hybrid compression mode. Security Fix(es): […]

FreeBSD 13 — py311-slixmpp — vulnerability — patch and remediation guide

April 20, 2022
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 20 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Slixmpp — Lack of SSL Certificate hostname validation in XMLStream Related CVEs: CVE-2022-45197 Upstream summary: NIST reports: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker […]

AlmaLinux 8 — libomp — vulnerability — patch and remediation guide

April 20, 2022
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2021:4743 Related CVEs: CVE-2021-42574 Upstream summary: LLVM Toolset provides the LLVM compiler infrastructure framework, the Clang compiler for the C and C++ languages, the LLDB debugger, and related tools for code analysis. […]

FreeBSD 13 — py35-matrix-synapse — vulnerability — patch and remediation guide

April 20, 2022
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 20 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — users of single-sign-on are vulnerable to phishing Related CVEs: CVE-2019-5885 Upstream summary: Matrix developers report: [The 1.11.1] release includes a security fix impacting installations using Single Sign-On (i.e. […]

FreeBSD 13 — wget — multiple vulnerabilities (10 CVEs) — patch and remediation guide

April 20, 2022
BSD
Comment off

🟠 High ⏱ 15–60 min Last verified: 20 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wget — security flaw in caching credentials passed as a part of the URL Related CVEs: CVE-2004-1487 CVE-2004-1488 CVE-2010-2252 CVE-2014-4877 CVE-2016-4971 CVE-2016-7098 CVE-2017-13089 CVE-2017-13090 +2 more Upstream summary: Gynvael Coldwind […]

FreeBSD 13 — hylafax — multiple vulnerabilities (2 CVEs) — patch and remediation guide

April 20, 2022
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 20 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: comms/hylafax — Malformed fax sender remote code execution in JPEG support Related CVEs: CVE-2004-1182 CVE-2018-17141 Upstream summary: A malicious sender that sets both JPEG and MH,MR,MMR or JBIG in the […]

AlmaLinux 8 — tar — vulnerability — patch and remediation guide

April 20, 2022
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2023:0842 Related CVEs: CVE-2022-48303 Upstream summary: The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fix(es): * tar: heap buffer overflow at from_header() […]

Debian 11 — postgresql-ocaml — vulnerability — patch and remediation guide

April 20, 2022
Linux
Comment off

🟢 Low ⏱ 5–15 min Last verified: 20 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-2943 Upstream summary: The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping […]

FreeBSD 13 — libmusicbrainz — vulnerability — patch and remediation guide

April 20, 2022
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 20 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libmusicbrainz — multiple buffer overflow vulnerabilities Related CVEs: CVE-2006-4197 Upstream summary: SecurityFocus reports about libmusicbrainz: The libmusicbrainz library is prone to multiple buffer-overflow vulnerabilities because the application fails to check […]

openSUSE Tumbleweed — python38-lxml — multiple vulnerabilities (2 CVEs) — patch and remediation guide

April 20, 2022
Linux
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:0803-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-19787 CVE-2021-43818 Upstream summary: An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, […]

Package Management

AlmaLinux 8 — wavpack — multiple vulnerabilities (7 CVEs) — patch and remediation guide

FreeBSD 13 — py311-slixmpp — vulnerability — patch and remediation guide

AlmaLinux 8 — libomp — vulnerability — patch and remediation guide

FreeBSD 13 — py35-matrix-synapse — vulnerability — patch and remediation guide

FreeBSD 13 — wget — multiple vulnerabilities (10 CVEs) — patch and remediation guide

FreeBSD 13 — hylafax — multiple vulnerabilities (2 CVEs) — patch and remediation guide

AlmaLinux 8 — tar — vulnerability — patch and remediation guide

Debian 11 — postgresql-ocaml — vulnerability — patch and remediation guide

FreeBSD 13 — libmusicbrainz — vulnerability — patch and remediation guide

openSUSE Tumbleweed — python38-lxml — multiple vulnerabilities (2 CVEs) — patch and remediation guide

Tags