BSD

FreeBSD 13 — postfix-current-base — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — postfix-current-base — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Postfix — memory corruption vulnerability Related CVEs: CVE-2011-0411 CVE-2011-1720 Upstream summary: The Postfix SMTP server has a memory corruption error, when the Cyrus SASL library is used with authentication mechanisms […]

Read more
FreeBSD 13 — w3m-m17n-img — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — w3m-m17n-img — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: w3m — format string vulnerability Related CVEs: CVE-2006-6772 Upstream summary: An anonymous person reports: w3m-0.5.1 crashes when using the -dump or -backend options to open a HTTPS URL with a […]

Read more
FreeBSD 13 — qemu-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — qemu-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qemu — denial of service vulnerability Related CVEs: CVE-2007-1320 CVE-2007-1321 CVE-2007-1322 CVE-2007-1323 CVE-2007-1366 CVE-2007-6227 CVE-2008-0928 CVE-2008-2004  +12 more Upstream summary: Daniel P. Berrange reports: The VNC server websockets decoder will […]

Read more
FreeBSD 13 — php52-exif — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php52-exif — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2011-4566 CVE-2011-4885 Upstream summary: php development team reports: Security Enhancements and Fixes in PHP 5.3.9: Added max_input_vars directive to prevent attacks based on hash […]

Read more
FreeBSD 13 — vault — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — vault — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vault — unauthenticated license read Related CVEs: CVE-2020-35177 CVE-2021-27668 Upstream summary: vault developers report: Limited Unauthenticated License Read: We addressed a security vulnerability that allowed for the unauthenticated reading of […]

Read more
FreeBSD 13 — ghostscript8-nox — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ghostscript8-nox — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2008-6679 CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and […]

Read more
FreeBSD 13 — frontpage — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — frontpage — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: frontpage — cross site scripting vulnerability Related CVEs: CVE-2006-0015 Upstream summary: Esteban Martinez Fayo reports: The FrontPage Server Extensions 2002 (included in Windows Sever 2003 IIS 6.0 and available as […]

Read more
FreeBSD 13 — scponly — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — scponly — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: scponly — local privilege escalation exploits Upstream summary: Max Vozeler reports: If ALL the following conditions are true, administrators using scponly-4.1 or older may be at risk of a local […]

Read more
FreeBSD 13 — fr-wordpress — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — fr-wordpress — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wordpress — multiple issues Upstream summary: wordpress developers reports: This security and maintenance release features 1 bug fix in addition to 3 security fixes. Because this is a security release, […]

Read more
FreeBSD 13 — py37-tensorflow — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py37-tensorflow — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-tensorflow — denial of service vulnerability Related CVEs: CVE-2022-35935 CVE-2022-35941 CVE-2022-35991 Upstream summary: Kang Hong Jin, Neophytos Christou, 刘力源 and Pattarakrit Rattankul report: Another instance of CVE-2022-35935, where `SobolSample` is […]

Read more
CHAT