FreeBSD 13

FreeBSD 13 — redis — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — redis — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: redis — Bug in XACKDEL may lead to stack overflow and potential RCE Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 CVE-2013-7458 CVE-2015-4335 CVE-2021-21309 CVE-2021-29477  +12 more Upstream summary: Google Big Sleep […]

Read more
FreeBSD 13 — mariadb101-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — mariadb101-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL Server — Multiple vulerabilities Related CVEs: CVE-2015-3194 CVE-2016-0639 CVE-2016-0640 CVE-2016-0641 CVE-2016-0642 CVE-2016-0643 CVE-2016-0644 CVE-2016-0646  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]

Read more
FreeBSD 13 — linux-c6-flashplugin — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — linux-c6-flashplugin — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: flash — multiple vulnerabilities Related CVEs: CVE-2014-0547 CVE-2014-0548 CVE-2014-0549 CVE-2014-0550 CVE-2014-0551 CVE-2014-0552 CVE-2014-0553 CVE-2014-0554  +12 more Upstream summary: Adobe reports: These updates resolve type confusion vulnerabilities that could lead to […]

Read more
FreeBSD 13 — globus — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — globus — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: globus — Multiple tmpfile races Related CVEs: CVE-2006-4232 CVE-2006-4233 Upstream summary: The Globus Alliance reports: The proxy generation tool (grid-proxy-init) creates the file, secures the file to provide access only […]

Read more
FreeBSD 13 — evince-lite — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — evince-lite — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: evince and atril — command injection vulnerability in CBT handler Related CVEs: CVE-2017-1000083 Upstream summary: GNOME reports: The comic book backend in evince 3.24.0 (and earlier) is vulnerable to a […]

Read more
FreeBSD 13 — py34-amf — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py34-amf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-amf — input sanitization errors Related CVEs: CVE-2015-8549 Upstream summary: oCERT reports: A specially crafted AMF payload, containing malicious references to XML external entities, can be used to trigger Denial […]

Read more
FreeBSD 13 — apache-peruser — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — apache-peruser — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache — Insecure LD_LIBRARY_PATH handling Related CVEs: CVE-2011-3192 CVE-2012-0883 Upstream summary: Apache reports: Insecure handling of LD_LIBRARY_PATH was found that could lead to the current working directory to be searched […]

Read more
FreeBSD 13 — it-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — it-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

Read more
FreeBSD 13 — pg_partman — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — pg_partman — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PG Partition Manager — arbitrary code execution Related CVEs: CVE-2021-33204 Upstream summary: PG Partition Manager reports: In the pg_partman (aka PG Partition Manager) extension before 4.5.1 for PostgreSQL, arbitrary code […]

Read more
FreeBSD 13 — kf5-kconfig — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — kf5-kconfig — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: KDE Frameworks — malicious .desktop files execute code Related CVEs: CVE-2019-14744 Upstream summary: The KDE Community has released a security announcement: The syntax Key[$e]=$(shell command) in *.desktop files.directory files, and […]

Read more
CHAT