Package Management

FreeBSD 13 — xapian-omega — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xapian-omega — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xapian-omega — cross-site scripting vulnerability Related CVEs: CVE-2009-2947 Upstream summary: Olly Betts reports: There's a cross-site scripting issue in Omega – exception messages don't currently get HTML entities escaped, but […]

Read more
openSUSE Tumbleweed — miller — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — miller — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2020-15167 Upstream summary: In Miller (command line utility) using the configuration file support introduced in version 5.9.0, it is possible for an attacker to cause Miller to run arbitrary […]

Read more
FreeBSD 13 — elinks — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — elinks — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: elinks — buffer overflow vulnerability Related CVEs: CVE-2008-7224 Upstream summary: SecurityFocus reports: ELinks is prone to an off-by-one buffer-overflow vulnerability because the application fails to accurately reference the last element […]

Read more
FreeBSD 13 — unbound — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — unbound — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unbound — Possible domain hijacking via promiscuous records in the authority section Related CVEs: CVE-2011-1922 CVE-2011-4528 CVE-2014-8602 CVE-2017-15105 CVE-2019-16866 CVE-2019-18934 CVE-2020-12662 CVE-2020-12663  +10 more Upstream summary: [email protected] reports: NLnet Labs […]

Read more
FreeBSD 13 — xorg-dmx — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xorg-dmx — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xorg-server — Multiple input validation failures in X server XKB extension Related CVEs: CVE-2017-12176 CVE-2017-12177 CVE-2017-12178 CVE-2017-12179 CVE-2017-12180 CVE-2017-12181 CVE-2017-12182 CVE-2017-12183  +12 more Upstream summary: The X.org project reports: These […]

Read more
FreeBSD 13 — tla — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — tla — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: neon format string vulnerabilities Related CVEs: CVE-2004-0179 Upstream summary: Greuff reports that the neon WebDAV client library contains several format string bugs within error reporting code. A malicious server may […]

Read more
openSUSE Tumbleweed — groovy — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — groovy — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2020:2367-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-17521 Upstream summary: Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was […]

Read more
Ubuntu 16.04 — libhibernate3-java — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libhibernate3-java — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2021 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6845-1 Related CVEs: CVE-2020-25638 Upstream summary: It was discovered that Hibernate incorrectly handled certain inputs with unsanitized literals. If a user or an automated system were tricked into opening a […]

Read more
Ubuntu 20.04 — linux-azure-5.8 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — linux-azure-5.8 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5120-1 Related CVEs: CVE-2019-19449 CVE-2020-26541 CVE-2020-36311 CVE-2021-22543 CVE-2021-3612 CVE-2021-3759 CVE-2021-38199 CVE-2021-38207  +12 more Upstream summary: It was discovered that the f2fs file system in the Linux kernel did not properly […]

Read more
FreeBSD 13 — ja-w3m-img — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ja-w3m-img — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: w3m – multiple vulnerabilities Related CVEs: CVE-2006-6772 CVE-2016-9422 CVE-2016-9423 CVE-2016-9424 CVE-2016-9425 CVE-2016-9426 CVE-2016-9428 CVE-2016-9429  +12 more Upstream summary: Tatsuya Kinoshita reports: CVE-2018-6196 * table.c: Prevent negative indent value in feed_table_block_tag(). […]

Read more
CHAT