FreeBSD 13

FreeBSD 13 — transmission-qt — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — transmission-qt — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libutp — remote denial of service or arbitrary code execution Related CVEs: CVE-2012-6129 Upstream summary: NVD reports: Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 […]

Read more
FreeBSD 13 — pkcs11-helper — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — pkcs11-helper — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pkcs11-helper — deserialize buffer overflow Upstream summary: Alon Bar-Lev reports: util: fix deserialize buffer overflow. thanks to Aarnav Bos. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 13 — xapian-omega — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xapian-omega — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xapian-omega — cross-site scripting vulnerability Related CVEs: CVE-2009-2947 Upstream summary: Olly Betts reports: There's a cross-site scripting issue in Omega – exception messages don't currently get HTML entities escaped, but […]

Read more
FreeBSD 13 — elinks — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — elinks — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: elinks — buffer overflow vulnerability Related CVEs: CVE-2008-7224 Upstream summary: SecurityFocus reports: ELinks is prone to an off-by-one buffer-overflow vulnerability because the application fails to accurately reference the last element […]

Read more
FreeBSD 13 — unbound — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — unbound — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unbound — Possible domain hijacking via promiscuous records in the authority section Related CVEs: CVE-2011-1922 CVE-2011-4528 CVE-2014-8602 CVE-2017-15105 CVE-2019-16866 CVE-2019-18934 CVE-2020-12662 CVE-2020-12663  +10 more Upstream summary: [email protected] reports: NLnet Labs […]

Read more
FreeBSD 13 — xorg-dmx — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xorg-dmx — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xorg-server — Multiple input validation failures in X server XKB extension Related CVEs: CVE-2017-12176 CVE-2017-12177 CVE-2017-12178 CVE-2017-12179 CVE-2017-12180 CVE-2017-12181 CVE-2017-12182 CVE-2017-12183  +12 more Upstream summary: The X.org project reports: These […]

Read more
FreeBSD 13 — tla — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — tla — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: neon format string vulnerabilities Related CVEs: CVE-2004-0179 Upstream summary: Greuff reports that the neon WebDAV client library contains several format string bugs within error reporting code. A malicious server may […]

Read more
FreeBSD 13 — ja-w3m-img — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ja-w3m-img — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: w3m – multiple vulnerabilities Related CVEs: CVE-2006-6772 CVE-2016-9422 CVE-2016-9423 CVE-2016-9424 CVE-2016-9425 CVE-2016-9426 CVE-2016-9428 CVE-2016-9429  +12 more Upstream summary: Tatsuya Kinoshita reports: CVE-2018-6196 * table.c: Prevent negative indent value in feed_table_block_tag(). […]

Read more
FreeBSD 13 — py37-psutil — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py37-psutil — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-psutil — double free vulnerability Related CVEs: CVE-2019-18874 Upstream summary: ret2libc reports: psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a […]

Read more
FreeBSD 13 — konversation — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — konversation — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: konversation — crash in IRC message parsing Related CVEs: CVE-2005-0129 CVE-2005-0130 CVE-2005-0131 CVE-2014-8483 CVE-2017-15923 Upstream summary: KDE reports: Konversation has support for colors in IRC messages. Any malicious user connected […]

Read more
CHAT