FreeBSD 14

FreeBSD 14 — postgresql13-plperl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — postgresql13-plperl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL — PL/Perl environment variable changes execute arbitrary code Related CVEs: CVE-2024-10979 Upstream summary: PostgreSQL project reports: Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user […]

Read more
FreeBSD 14 — sendmail — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — sendmail — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sendmail — race condition vulnerability Related CVEs: CVE-2006-0058 Upstream summary: Problem Description A race condition has been reported to exist in the handling by sendmail of asynchronous signals. Impact A […]

Read more
FreeBSD 14 — node-devel — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — node-devel — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: node, iojs, and v8 — denial of service Related CVEs: CVE-2015-5380 Upstream summary: node reports: This release of Node.js fixes a bug that triggers an out-of-band write in V8's utf-8 […]

Read more
FreeBSD 14 — pdflib — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — pdflib — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]

Read more
FreeBSD 14 — librsvg2-rust — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — librsvg2-rust — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: librsvg2 — multiple vulnerabilities Related CVEs: CVE-2019-20446 Upstream summary: Librsvg2 developers reports: Backport the following fixes from 2.46.x: Librsvg now has limits on the number of loaded XML elements, and […]

Read more
FreeBSD 14 — squidGuard — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — squidGuard — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: squidGuard — multiple vulnerabilities Related CVEs: CVE-2009-3700 CVE-2009-3826 Upstream summary: SquidGuard website reports: Patch 20091015 fixes one buffer overflow problem in sgLog.c when overlong URLs are requested. SquidGuard will then […]

Read more
FreeBSD 14 — torcs — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — torcs — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: plib — remote code execution via buffer overflow Related CVEs: CVE-2010-3384 CVE-2011-4620 Upstream summary: Secunia reports: A vulnerability has been discovered in PLIB, which can be exploited by malicious people […]

Read more
FreeBSD 14 — mingw32-libyaml — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mingw32-libyaml — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: LibYAML input sanitization errors Related CVEs: CVE-2014-2525 Upstream summary: oCERT reports: The LibYAML project is an open source YAML 1.1 parser and emitter written in C. The library is affected […]

Read more
FreeBSD 14 — GraphicsMagick-nox — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — GraphicsMagick-nox — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ImageMagick and GraphicsMagick — DoS via specially crafted PNG file Related CVEs: CVE-2012-3438 Upstream summary: Kurt Seifried reports: There is an issue in ImageMagick that is also present in GraphicsMagick. […]

Read more
FreeBSD 14 — pecl-phar — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — pecl-phar — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pecl-phar — format string vulnerability Related CVEs: CVE-2010-2094 Upstream summary: Entry for CVE-2010-2094 says: Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers […]

Read more
CHAT