FreeBSD 14

FreeBSD 14 — putty — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — putty — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: putty — multiple security vulnerabilities Related CVEs: CVE-2005-0467 CVE-2011-4607 CVE-2013-4206 CVE-2013-4207 CVE-2013-4208 CVE-2013-4852 CVE-2015-2157 CVE-2015-5309  +5 more Upstream summary: Simon Tatham reports: These features are new in PuTTY 0.84: Security […]

Read more
FreeBSD 14 — flock — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — flock — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2007-4879 CVE-2007-5959 CVE-2008-0016 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0417  +12 more Upstream summary: The Mozilla Foundation reports: MFSA 2008-37 UTF-8 URL stack buffer overflow MFSA […]

Read more
FreeBSD 14 — libXcursor — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — libXcursor — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libXcursor — integer overflow that can lead to heap buffer overflow Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: The freedesktop.org project reports: It […]

Read more
FreeBSD 14 — ghostscript-gpl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ghostscript-gpl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — zseticcspace() function buffer overflow vulnerability Related CVEs: CVE-2008-0411 Upstream summary: Chris Evans from the Google Security Team reports: Severity: parsing of evil PostScript file will result in arbitrary […]

Read more
FreeBSD 14 — opus-tools — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — opus-tools — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vorbis-tools, opus-tools — multiple vulnerabilities Related CVEs: CVE-2014-9638 CVE-2014-9639 CVE-2015-6749 Upstream summary: Paris Zoumpouloglou reports: I discovered an integer overflow issue in oggenc, related to the number of channels in […]

Read more
FreeBSD 14 — enscript-a — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — enscript-a — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: enscript — arbitrary code execution vulnerability Related CVEs: CVE-2004-1184 CVE-2004-1185 CVE-2004-1186 CVE-2008-3863 CVE-2008-4306 Upstream summary: Ulf Harnhammar of Secunia Research reports: Stack-based buffer overflow in the read_special_escape function in src/psgen.c […]

Read more
FreeBSD 14 — mariadb-client — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mariadb-client — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL – Multiple vulnerabilities Related CVEs: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858  +3 more Upstream summary: Oracle reports: Critical Patch Update: MySQL Server, version(s) 5.5.45 and prior, 5.6.26 […]

Read more
FreeBSD 14 — py-asyncssh — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py-asyncssh — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-asyncssh — Allows bypass of authentication Upstream summary: mitre.org Reports: The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests […]

Read more
FreeBSD 14 — nbsmtp — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — nbsmtp — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nbsmtp — format string vulnerability Upstream summary: When nbsmtp is executed in debug mode, server messages will be printed to stdout and logged via syslog. Syslog is used insecurely and […]

Read more
FreeBSD 14 — setiathome — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — setiathome — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: seti@home remotely exploitable buffer overflow Upstream summary: The seti@home client contains a buffer overflow in the HTTP response handler. A malicious, spoofed seti@home server can exploit this buffer overflow to […]

Read more
CHAT