BSD

FreeBSD 14 — postgresql12-server — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — postgresql12-server — multiple vulnerabilities (8 CVEs) — patch and remediation guide

  • November 10, 2024
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 10 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL — SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID Related CVEs: CVE-2020-1720 CVE-2021-23214 CVE-2021-23222 CVE-2021-3677 CVE-2022-1552 CVE-2024-10976 CVE-2024-10978 CVE-2024-7348 Upstream summary: PostgreSQL project reports: Incorrect privilege assignment […]

Read more
FreeBSD 14 — logstash-forwarder — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — logstash-forwarder — security advisory — patch and remediation guide

  • November 10, 2024
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 10 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: logstash-forwarder and logstash — susceptibility to POODLE vulnerability Upstream summary: Elastic reports: The combination of Logstash Forwarder and Lumberjack input (and output) was vulnerable to the POODLE attack in SSLv3 […]

Read more
NetBSD 9.4 — postgresql92-pgcrypto — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — postgresql92-pgcrypto — vulnerability — patch and remediation guide

  • November 10, 2024
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged postgresql92-pgcrypto<9.2.10 for vulnerability class 'buffer-overrun'. Reference: http://secunia.com/advisories/62806 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

Read more
NetBSD 9.4 — libwildmidi — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — libwildmidi — multiple vulnerabilities (5 CVEs) — patch and remediation guide

  • November 10, 2024
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-1000418 CVE-2017-11661 CVE-2017-11662 CVE-2017-11663 CVE-2017-11664 Upstream summary: pkgsrc audit-packages flagged libwildmidi<0.4.2 for vulnerability class 'heap-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-1000418 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
NetBSD 9.4 — squid — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — squid — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • November 10, 2024
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-11945 CVE-2009-0801 CVE-2018-19131 CVE-2018-19132 CVE-2019-13345 CVE-2019-12525 CVE-2019-12527 CVE-2019-12523  +12 more Upstream summary: pkgsrc audit-packages flagged squid<2.4.4 for vulnerability class 'remote-user-shell'. Reference: http://www.squid-cache.org/Advisories/SQUID-2002_1.txt Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 14 — php55-gd — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — php55-gd — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • November 10, 2024
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 10 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2013-7456 CVE-2015-4643 CVE-2015-4644 CVE-2015-8874 CVE-2015-8879 CVE-2016-3074 CVE-2016-4343 CVE-2016-5093  +12 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

Read more
NetBSD 9.4 — file — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — file — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • November 10, 2024
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-1536 CVE-2009-1515 CVE-2014-2270 CVE-2007-2799 CVE-2012-1571 CVE-2014-3587 CVE-2017-1000249 CVE-2018-10360  +12 more Upstream summary: pkgsrc audit-packages flagged file<4.20 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1536 Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 14 — bmon — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — bmon — security advisory — patch and remediation guide

  • November 9, 2024
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 9 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bmon — unsafe set-user-ID application Upstream summary: Jon Nistor reported that the FreeBSD port of bmon was installed set-user-ID root, and executes commands using relative paths. This could allow local […]

Read more
FreeBSD 12 — php81-composer — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php81-composer — multiple vulnerabilities (5 CVEs) — patch and remediation guide

  • November 9, 2024
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 9 November 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Composer — Multiple command injections via malicious git/hg branch names Related CVEs: CVE-2022-24828 CVE-2023-43655 CVE-2024-24821 CVE-2024-35241 CVE-2024-35242 Upstream summary: Composer project reports: The status, reinstall and remove commands with packages […]

Read more
NetBSD 10.0 — liferea — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — liferea — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • November 9, 2024
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-5751 CVE-2023-1350 Upstream summary: pkgsrc audit-packages flagged liferea<0.6.2 for vulnerability class 'unsafe-umask'. Reference: http://sourceforge.net/project/shownotes.php?release_id=282434 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT