BSD

FreeBSD 12 — compat5x-sparc — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — compat5x-sparc — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openssl — potential SSL 2.0 rollback Related CVEs: CVE-2005-2969 Upstream summary: Vulnerability: Such applications are affected if they use the option SSL_OP_MSIE_SSLV2_RSA_PADDING. This option is implied by use of SSL_OP_ALL, […]

Read more
FreeBSD 12 — py37-notebook — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py37-notebook — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jupyter notebook — open redirect vulnerability Related CVEs: CVE-2019-10255 Upstream summary: Jupyter reports: 6.1.5 is a security release, fixing one vulnerability: Fix open redirect vulnerability GHSA-c7vm-f5p4-8fqh (CVE to be assigned) […]

Read more
FreeBSD 12 — ImageMagick-nox — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ImageMagick-nox — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ImageMagick — denial of service via a crafted font file Related CVEs: CVE-2004-0827 CVE-2004-0981 CVE-2005-0005 CVE-2005-0397 CVE-2006-5868 CVE-2007-4985 CVE-2007-4986 CVE-2007-4987  +12 more Upstream summary: MITRE reports: The ReadCAPTIONImage function in […]

Read more
FreeBSD 12 — xpm — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xpm — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpm — image decoding vulnerabilities Related CVEs: CVE-2004-0687 CVE-2004-0688 Upstream summary: Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow […]

Read more
FreeBSD 12 — rubygem19-json — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — rubygem19-json — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ruby — Denial of Service and Unsafe Object Creation Vulnerability in JSON Related CVEs: CVE-2013-0269 Upstream summary: Aaron Patterson reports: When parsing certain JSON documents, the JSON gem can be […]

Read more
FreeBSD 12 — se-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — se-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

Read more
FreeBSD 12 — ssh — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ssh — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: SSH.COM SFTP server — format string vulnerability Related CVEs: CVE-2006-0705 Upstream summary: SSH Communications Security Corp reports a format string vulnerability in their SFTP server. This vulnerability could cause a […]

Read more
FreeBSD 12 — mule-common — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mule-common — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]

Read more
FreeBSD 12 — ethereal — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ethereal — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wireshark — PCNFSD Dissector Denial of Service Vulnerability Related CVEs: CVE-2004-0176 CVE-2004-0365 CVE-2004-0367 CVE-2004-0504 CVE-2004-0505 CVE-2004-0506 CVE-2004-0507 CVE-2004-0633  +12 more Upstream summary: Secunia reports: A vulnerability has been reported in […]

Read more
FreeBSD 12 — gnupg — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gnupg — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gnupg — AEAD key import overflow Related CVEs: CVE-2003-0971 CVE-2005-0366 CVE-2006-0049 CVE-2006-0455 CVE-2006-3082 CVE-2006-6235 CVE-2008-1530 CVE-2013-4402  +5 more Upstream summary: Importing an OpenPGP key having a preference list for AEAD […]

Read more
CHAT