BSD

FreeBSD 13 — ruby_static — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ruby_static — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: End of Life Ports Related CVEs: CVE-2005-1992 CVE-2005-2337 CVE-2006-3694 CVE-2006-5467 CVE-2006-6303 CVE-2008-2726 Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. […]

Read more
FreeBSD 13 — cinepaint — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — cinepaint — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]

Read more
FreeBSD 13 — php73-imap — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php73-imap — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]

Read more
FreeBSD 13 — linux-f10-flashplugin — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — linux-f10-flashplugin — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: flash — multiple vulnerabilities Related CVEs: CVE-2008-4546 CVE-2009-3793 CVE-2009-3794 CVE-2009-3796 CVE-2009-3797 CVE-2009-3798 CVE-2009-3799 CVE-2009-3800  +12 more Upstream summary: Adobe reports: These updates resolve type confusion vulnerabilities that could lead to […]

Read more
FreeBSD 13 — uk-gd — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — uk-gd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gd — integer overflow Related CVEs: CVE-2004-0990 Upstream summary: infamous41md reports about the GD Graphics Library: There is an integer overflow when allocating memory in the routine that handles loading […]

Read more
FreeBSD 13 — kdebase — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — kdebase — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: KDM — local privilege escalation vulnerability Related CVEs: CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-1156 CVE-2004-1157 CVE-2004-1158 CVE-2004-1160 CVE-2004-1171  +6 more Upstream summary: KDE Security Advisory reports: KDM contains a race condition that […]

Read more
FreeBSD 13 — a2ps-a — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — a2ps-a — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: a2ps — insecure temporary file creation Related CVEs: CVE-2004-1170 CVE-2004-1377 Upstream summary: A Secunia Security Advisory reports that Javier Fernández-Sanguino Peña has found temporary file creation vulnerabilities in the fixps […]

Read more
FreeBSD 13 — horde-php — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — horde-php — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: horde — various problems in dereferrer Related CVEs: CVE-2005-0961 CVE-2005-3759 CVE-2006-1491 CVE-2006-2195 CVE-2006-3548 Upstream summary: Horde 3.1.2 release announcement: Security Fixes: Closed XSS problems in dereferrer (IE only), help viewer […]

Read more
FreeBSD 13 — postsrsd — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — postsrsd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: postsrsd — Denial of service vulnerability Related CVEs: CVE-2020-35573 Upstream summary: postsrsd developer reports: PostSRSd could be tricked into consuming a lot of CPU time with an SRS address that […]

Read more
FreeBSD 13 — py38-markdown — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py38-markdown — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-markdown2 — regular expression denial of service vulnerability Related CVEs: CVE-2020-11888 CVE-2021-26813 Upstream summary: Ben Caller reports: markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of […]

Read more
CHAT