FreeBSD 14

FreeBSD 14 — isc-dhcp3-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — isc-dhcp3-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcpd — format string vulnerabilities Related CVEs: CVE-2004-0460 CVE-2004-1006 Upstream summary: The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute […]

Read more
FreeBSD 14 — py311-slixmpp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py311-slixmpp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Slixmpp — Lack of SSL Certificate hostname validation in XMLStream Related CVEs: CVE-2022-45197 Upstream summary: NIST reports: Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker […]

Read more
FreeBSD 14 — py38-pysaml — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py38-pysaml — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pysaml2 — multiple vulnerabilities Related CVEs: CVE-2021-21238 CVE-2021-21239 Upstream summary: pysaml2 Releases: Fix processing of invalid SAML XML documents – CVE-2021-21238 Fix unspecified xmlsec1 key-type preference – CVE-2021-21239 Table of […]

Read more
FreeBSD 14 — gtk — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — gtk — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gdk-pixbuf — image decoding vulnerabilities Related CVEs: CVE-2004-0782 CVE-2004-0783 CVE-2004-0788 Upstream summary: Chris Evans discovered several flaws in the gdk-pixbuf XPM image decoder: Heap-based overflow in pixbuf_create_from_xpm Stack-based overflow in […]

Read more
FreeBSD 14 — py39-pymatgen — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py39-pymatgen — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-pymatgen — regular expression denial of service Related CVEs: CVE-2022-42964 Upstream summary: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an […]

Read more
FreeBSD 14 — py37-pymatgen — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py37-pymatgen — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-pymatgen — regular expression denial of service Related CVEs: CVE-2022-42964 Upstream summary: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an […]

Read more
FreeBSD 14 — unrar — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — unrar — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rar — password prompt buffer overflow vulnerability Related CVEs: CVE-2007-0855 Upstream summary: iDefense reports: Remote exploitation of a stack based buffer overflow vulnerability in RARLabs Unrar may allow an attacker […]

Read more
FreeBSD 14 — gatekeeper — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — gatekeeper — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: GNU gatekeeper — denial of service Related CVEs: CVE-2012-3534 Upstream summary: Jan Willamowius reports: GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which […]

Read more
CHAT