FreeBSD 14

FreeBSD 14 — redmine — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — redmine — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: redmine — information leak vulnerability Related CVEs: CVE-2012-0327 CVE-2014-1985 CVE-2015-8346 CVE-2015-8473 CVE-2015-8474 CVE-2015-8477 CVE-2015-8537 Upstream summary: Redmine reports: Data disclosure in atom feed. Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 14 — py35-rsa — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py35-rsa — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-rsa — Bleichenbacher'06 signature forgery vulnerability Related CVEs: CVE-2016-1494 Upstream summary: Filippo Valsorda reports: python-rsa is vulnerable to a straightforward variant of the Bleichenbacher'06 attack against RSA signature verification with […]

Read more
FreeBSD 14 — py37-pygments — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py37-pygments — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-pygments — multiple DoS vulnerabilities Related CVEs: CVE-2021-20270 CVE-2021-27291 Upstream summary: Red Hat reports: An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of […]

Read more
FreeBSD 14 — xtrabackup — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — xtrabackup — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qpress — directory traversal Related CVEs: CVE-2022-45866 Upstream summary: [email protected] reports: qpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup and other products, allows directory traversal […]

Read more
FreeBSD 14 — toxcore — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — toxcore — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Memory leak bug in Toxcore Upstream summary: The Tox project blog reports: A memory leak bug was discovered in Toxcore that can be triggered remotely to exhaust one’s system memory, […]

Read more
FreeBSD 14 — php52-zip — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — php52-zip — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php-zip — multiple Denial of Service vulnerabilities Related CVEs: CVE-2010-3709 Upstream summary: The following DoS conditions in Zip extension were fixed in PHP 5.3.4 and PHP 5.2.15: Fixed crash in […]

Read more
FreeBSD 14 — libmad — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — libmad — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libmad — multiple vulnerabilities Related CVEs: CVE-2017-8372 CVE-2017-8373 CVE-2017-8374 Upstream summary: National Vulnerability Database: CVE-2017-8372: The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows […]

Read more
FreeBSD 14 — tkdiff — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — tkdiff — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tkdiff — temporary file symlink privilege escalation Related CVEs: CVE-2005-3343 Upstream summary: Javier Fernández-Sanguino Peña reports a vulnerability in tkdiff which allows local users to gain priveleges of the user […]

Read more
FreeBSD 14 — socat — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — socat — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: socat — diffie hellman parameter was not prime Related CVEs: CVE-2012-0219 CVE-2013-3571 CVE-2014-0019 Upstream summary: socat reports: In the OpenSSL address implementation the hard coded 1024 bit DH p parameter […]

Read more
CHAT