FreeBSD 14

FreeBSD 14 — krb5 — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — krb5 — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: krb5 — Double-free in KDC TGS processing Related CVEs: CVE-2014-5352 CVE-2014-5353 CVE-2014-5354 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423 CVE-2015-2694 CVE-2016-3120  +4 more Upstream summary: The MIT krb5 Team reports: When issuing a ticket […]

Read more
FreeBSD 14 — php5-dba — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — php5-dba — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — ini database truncation inside dba_replace() function Related CVEs: CVE-2008-7068 Upstream summary: securityfocus research reports: A bug that leads to the emptying of the INI file contents if the […]

Read more
FreeBSD 14 — linux-firefox-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — linux-firefox-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Mozilla — multiple vulnerabilities Related CVEs: CVE-2006-3113 CVE-2006-3677 CVE-2006-3801 CVE-2006-3802 CVE-2006-3803 CVE-2006-3804 CVE-2006-3805 CVE-2006-3806  +12 more Upstream summary: The Mozilla Project reports: MFSA 2011-12 Miscellaneous memory safety hazards MFSA 2011-13 […]

Read more
FreeBSD 14 — pear-Net_Ping — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — pear-Net_Ping — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PEAR — Net_Ping and Net_Traceroute remote arbitrary command injection Related CVEs: CVE-2009-4024 CVE-2009-4025 Upstream summary: PEAR Security Advisory reports: Multiple remote arbitrary command injections have been found in the Net_Ping […]

Read more
FreeBSD 14 — linux_base — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — linux_base — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: linux_base — vulnerabilities in Red Hat 7.1 libraries Related CVEs: CVE-2002-0029 CVE-2004-0083 CVE-2004-0084 CVE-2004-0106 CVE-2004-0687 CVE-2004-0688 CVE-2004-0692 CVE-2004-0914 Upstream summary: Trevor Johnson reported that the Red Hat Linux RPMs used […]

Read more
FreeBSD 14 — py39-pygments — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py39-pygments — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-pygments — multiple DoS vulnerabilities Related CVEs: CVE-2021-20270 CVE-2021-27291 Upstream summary: Red Hat reports: An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of […]

Read more
FreeBSD 14 — fuser — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — fuser — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fuser — missing user's privileges check Upstream summary: Denis Barov reports: sysutils/fuser allows user to send any signal to any process when installed with suid bit. Table of contents Symptom […]

Read more
FreeBSD 14 — mplayer — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mplayer — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — remote denial of service in JPEG2000 decoder Related CVEs: CVE-2004-0433 CVE-2004-1187 CVE-2004-1188 CVE-2005-1195 CVE-2006-0579 CVE-2006-1502 CVE-2006-6172 CVE-2007-1246  +12 more Upstream summary: FFmpeg security reports: FFmpeg 2.8.6 fixes the […]

Read more
FreeBSD 14 — lynis — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — lynis — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Several issues in Lynis Upstream summary: lynis update: This release resolves two security issues CVE-2020-13882 – Discovered by Sander Bos, code submission by Katarina Durechova CVE-2019-13033 – Discovered by Sander […]

Read more
CHAT