FreeBSD 14

FreeBSD 14 — xv-m17n — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — xv-m17n — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xv — exploitable buffer overflows Upstream summary: In a Bugtraq posting, infamous41md(at)hotpop.com reported: there are at least 5 exploitable buffer and heap overflows in the image handling code. this allows […]

Read more
FreeBSD 14 — mysql57-client — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mysql57-client — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2016-3492 CVE-2016-5616 CVE-2016-5617 CVE-2016-5624 CVE-2016-5625 CVE-2016-5626 CVE-2016-5629 CVE-2016-6662  +9 more Upstream summary: Oracle reports: This Critical Patch Update contains 34 new security patches for […]

Read more
FreeBSD 14 — py38-aiohttp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py38-aiohttp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: aiohttp — open redirect vulnerability Related CVEs: CVE-2021-21330 Upstream summary: Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to […]

Read more
FreeBSD 14 — py38-cairosvg — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py38-cairosvg — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: CairoSVG — Regular Expression Denial of Service vulnerability Upstream summary: CairoSVG security advisories: When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular […]

Read more
FreeBSD 14 — zabbix2-agent — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — zabbix2-agent — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zabbix — shell command injection vulnerability Related CVEs: CVE-2013-6824 Upstream summary: Recurity Labs Team project reports: Zabbix agent is vulnerable to remote command execution from the Zabbix server in some […]

Read more
FreeBSD 14 — gstreamer1-plugins-ogg — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — gstreamer1-plugins-ogg — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gstreamer1-plugins-ogg — Out-of-bounds write in Ogg demuxer Related CVEs: CVE-2024-47615 Upstream summary: The GStreamer Security Center reports: An out-of-bounds write in the Ogg demuxer that can cause crashes for certain […]

Read more
FreeBSD 14 — msmtp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — msmtp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: msmtp — certificate-verification issue Related CVEs: CVE-2019-8337 Upstream summary: msmtp developers report: In msmtp 1.8.2, when tls_trust_file has its default configuration, certificate-verification results are not properly checked. Table of contents […]

Read more
FreeBSD 14 — ru-apache+mod_ssl — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ru-apache+mod_ssl — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2003-0993 CVE-2004-0700 CVE-2004-0885 CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using […]

Read more
FreeBSD 14 — ImageMagick6-nox — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ImageMagick6-nox — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ImageMagick6 — multiple vulnerabilities Related CVEs: CVE-2019-10131 CVE-2019-10649 CVE-2019-10650 CVE-2019-10714 CVE-2019-11470 CVE-2019-11472 CVE-2019-11597 CVE-2019-11598  +9 more Upstream summary: CVE reports: Several vulnerabilities have been discovered in ImageMagick: CVE-2021-20309: A flaw […]

Read more
CHAT