BSD

FreeBSD 13 — php70-wddx — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php70-wddx — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 9 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8874 CVE-2016-5766 CVE-2016-5767 CVE-2016-5768 CVE-2016-5769 CVE-2016-5770 CVE-2016-5771 CVE-2016-5772  +1 more Upstream summary: The PHP Group reports: Please reference CVE/URL list for details Table of […]

Read more
FreeBSD 13 — rubygem-nokogiri — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — rubygem-nokogiri — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nokogiri — Security vulnerability Related CVEs: CVE-2019-5477 CVE-2020-26247 Upstream summary: Nokogiri reports: In Nokogiri versions <= 1.11.0.rc3, XML Schemas parsed by Nokogiri::XML::Schema were trusted by default, allowing external resources to […]

Read more
FreeBSD 13 — xemacs — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xemacs — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]

Read more
FreeBSD 12 — py39-httpie — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py39-httpie — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 October 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-httpie — exposure of sensitive information vulnerabilities Related CVEs: CVE-2022-0430 CVE-2022-24737 Upstream summary: Glyph reports: HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help […]

Read more
FreeBSD 13 — linux-firefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — linux-firefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2005-0399 CVE-2005-0402 CVE-2005-0752 CVE-2005-0989 CVE-2005-1476 CVE-2005-1477 CVE-2005-1937 CVE-2005-2260  +12 more Upstream summary: Mozilla Foundation reports: CVE-2019-11751: Malicious code execution through command line parameters CVE-2019-11746: […]

Read more
FreeBSD 13 — palemoon — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — palemoon — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: palemoon — multiple vulnerabilities Related CVEs: CVE-2017-7832 CVE-2017-7835 CVE-2017-7840 CVE-2018-5102 CVE-2018-5122 Upstream summary: Pale Moon reports: CVE-2018-5102: Use-after-free in HTML media elements CVE-2018-5122: Potential integer overflow in DoCrypt Table of […]

Read more
FreeBSD 13 — linux-seamonkey — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — linux-seamonkey — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2006-0749 CVE-2006-1045 CVE-2006-1529 CVE-2006-1530 CVE-2006-1531 CVE-2006-1723 CVE-2006-1724 CVE-2006-1725  +12 more Upstream summary: Mozilla Foundation reports: CVE-2019-11751: Malicious code execution through command line parameters CVE-2019-11746: […]

Read more
FreeBSD 13 — libmysofa — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libmysofa — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libmysoft — Heap-based buffer overflow vulnerability Related CVEs: CVE-2021-3756 Upstream summary: Zhengjie Du reports: There are some heap-buffer-overflows in mysofa2json of libmysofa. They are in function loudness, mysofa_check and readOHDRHeaderMessageDataLayout. […]

Read more
FreeBSD 13 — py38-ipython — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py38-ipython — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 October 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ipython — Execution with Unnecessary Privileges Related CVEs: CVE-2022-21699 Upstream summary: IPython project reports: IPython 8.0.1, 7.31.1 and 5.11 are security releases that change some default values in order to […]

Read more
CHAT