FreeBSD 13

FreeBSD 13 — py39-setuptools — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py39-setuptools — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py39-setuptools — denial of service vulnerability Related CVEs: CVE-2022-40897 Upstream summary: SCH227 reports: Python Packaging Authority (PyPA)'s setuptools is a library designed to facilitate packaging Python projects. Setuptools version 65.5.0 […]

Read more
FreeBSD 13 — leafnode — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — leafnode — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: leafnode — denial of service vulnerability Related CVEs: CVE-2002-1661 CVE-2003-0744 CVE-2004-2068 CVE-2005-1453 CVE-2005-1911 Upstream summary: Matthias Andree reports: A vulnerability was found in the fetchnews program (the NNTP client) that […]

Read more
FreeBSD 13 — gnome-screensaver — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — gnome-screensaver — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gnome-screensaver — Multiple monitor hotplug issues Related CVEs: CVE-2010-0414 CVE-2010-0422 Upstream summary: Ray Strode reports: Under certain circumstances it is possible to circumvent the security of screen locking functionality of […]

Read more
FreeBSD 13 — freexl — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — freexl — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Multiple exploitable heap-based buffer overflow vulnerabilities exists in FreeXL 1.0.3 Related CVEs: CVE-2015-2776 CVE-2017-2923 CVE-2017-2924 Upstream summary: Cisco TALOS reports: An exploitable heap based buffer overflow vulnerability exists in the […]

Read more
FreeBSD 13 — p5-XSLoader — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — p5-XSLoader — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-XSLoader — local arbitrary code execution Related CVEs: CVE-2016-6185 Upstream summary: Jakub Wilk reports: XSLoader tries to load code from a subdirectory in the cwd when called inside a string […]

Read more
FreeBSD 13 — graylog — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — graylog — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: graylog — remote code execution in log4j from user-controlled log input Related CVEs: CVE-2021-44228 CVE-2021-45046 Upstream summary: Apache Software Foundation reports: It was found that the fix to address CVE-2021-44228 […]

Read more
FreeBSD 13 — py34-djblets — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py34-djblets — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-djblets — Self-XSS vulnerability Upstream summary: Djblets Release Notes reports: A recently-discovered vulnerability in the datagrid templates allows an attacker to generate a URL to any datagrid page containing malicious […]

Read more
FreeBSD 13 — php70-gd — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php70-gd — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php-gd and gd — Buffer over-read into uninitialized memory Related CVEs: CVE-2013-7456 CVE-2015-8874 CVE-2015-8879 CVE-2016-3074 CVE-2016-4343 CVE-2016-5093 CVE-2016-5094 CVE-2016-5096  +12 more Upstream summary: PHP developers report: The GIF decoding function […]

Read more
FreeBSD 13 — mariadb102-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — mariadb102-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 April 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL Server — Multiple vulerabilities Related CVEs: CVE-2016-9843 CVE-2017-10155 CVE-2017-10165 CVE-2017-10167 CVE-2017-10203 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]

Read more
CHAT