FreeBSD 14

FreeBSD 14 — calligra — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — calligra — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Calligra, KOffice — input validation failure Related CVEs: CVE-2012-3455 CVE-2012-3456 Upstream summary: KDE Security Advisory reports: A flaw has been found which can allow malicious code to take advantage of […]

Read more
FreeBSD 14 — libosip — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — libosip — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: osip — Improper Restriction of Operations within the Bounds of a Memory Buffer Related CVEs: CVE-2017-7853 Upstream summary: osip developers reports: In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a […]

Read more
FreeBSD 14 — ja-acroread — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ja-acroread — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: acroread — XML External Entity vulnerability Related CVEs: CVE-2005-1306 Upstream summary: Sverre H. Huseby discovered a vulnerability in Adobe Acrobat and Adobe Reader. Under certain circumstances, using XML scripts it […]

Read more
FreeBSD 14 — py39-configobj — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py39-configobj — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Configobj — Regular Expression Denial of Service attack Related CVEs: CVE-2023-26112 Upstream summary: [email protected] reports: All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) […]

Read more
FreeBSD 14 — py24-django — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py24-django — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2008-2302 CVE-2009-3695 CVE-2010-3082 Upstream summary: The Django project reports: Please reference CVE/URL list for details Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 14 — phpmustache — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — phpmustache — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mustache – Possible Remote Code Execution Related CVEs: CVE-2022-0323 Upstream summary: huntr.dev reports: In Mustache.php v2.0.0 through v2.14.0, Sections tag can lead to arbitrary php code execution even if strict_callables […]

Read more
FreeBSD 14 — global — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — global — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: global — gozilla vulnerability Related CVEs: CVE-2017-17531 Upstream summary: MITRE reports: gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launching the program specified by the BROWSER environment variable, […]

Read more
FreeBSD 14 — ghostscript9-nox — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ghostscript9-nox — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]

Read more
FreeBSD 14 — tor — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — tor — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: security/tor — SOCKS4(a) inversion bug Related CVEs: CVE-2005-2643 CVE-2006-0414 CVE-2009-0414 CVE-2009-0936 CVE-2009-0937 CVE-2009-0938 CVE-2010-1676 CVE-2011-0427  +3 more Upstream summary: The Tor Project reports: TROVE-2022-002: The SafeSocks option for SOCKS4(a) is […]

Read more
FreeBSD 14 — php56-mbstring — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — php56-mbstring — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: oniguruma — multiple vulnerabilities Related CVEs: CVE-2015-8874 CVE-2016-5766 CVE-2016-5767 CVE-2016-5768 CVE-2016-5769 CVE-2016-5770 CVE-2016-5771 CVE-2016-5772  +5 more Upstream summary: the PHP project reports: A stack out-of-bounds read occurs in match_at() during […]

Read more
CHAT