FreeBSD

FreeBSD 12 — postgresql90-server — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — postgresql90-server — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: End of Life Ports Related CVEs: CVE-2014-8161 CVE-2015-0241 CVE-2015-0242 CVE-2015-0243 CVE-2015-0244 CVE-2015-3165 CVE-2015-3166 CVE-2015-3167  +2 more Upstream summary: These packages have reached End of Life status and/or have been removed […]

Read more
FreeBSD 12 — rubygem-activemodel — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — rubygem-activemodel — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rails — multiple vulnerabilities Related CVEs: CVE-2012-2660 CVE-2012-2661 CVE-2013-4491 CVE-2013-6414 CVE-2013-6415 CVE-2013-6416 CVE-2013-6417 CVE-2015-7576  +5 more Upstream summary: Ruby on Rails blog: Rails 5.0.0.beta1.1, 4.2.5.1, 4.1.14.1, and 3.2.22.1 have been […]

Read more
FreeBSD 12 — mgetty+sendfax — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mgetty+sendfax — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mgetty+sendfax — symlink attack via insecure temporary files Related CVEs: CVE-2008-4936 Upstream summary: Debian reports: Faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack […]

Read more
FreeBSD 12 — lynx — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — lynx — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: lynx — SSL certificate validation error Related CVEs: CVE-2005-3120 CVE-2014-3566 CVE-2016-9179 Upstream summary: Axel Beckert reports: […] I was able to capture the password given on the commandline in traffic […]

Read more
FreeBSD 12 — linux-c6-tiff — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-c6-tiff — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tiff — multiple vulnerabilities Related CVEs: CVE-2015-8665 CVE-2015-8683 CVE-2015-8870 CVE-2016-5314 CVE-2016-5320 CVE-2016-5652 CVE-2016-5875 CVE-2016-9533  +12 more Upstream summary: NVD reports: Please reference CVE/URL list for details Table of contents Symptom […]

Read more
FreeBSD 12 — wzdftpd — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wzdftpd — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wzdftpd — remote DoS Upstream summary: wzdftpd contains a potential remote Denial-of-Service. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]

Read more
FreeBSD 12 — cups-base — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — cups-base — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cups — multiple vulnerabilities Related CVEs: CVE-2004-0558 CVE-2004-0888 CVE-2004-0889 CVE-2004-0923 CVE-2004-1125 CVE-2004-1267 CVE-2005-0064 CVE-2005-2097  +12 more Upstream summary: CUPS development team reports: The new release addresses two security vulnerabilities, add […]

Read more
FreeBSD 12 — brotli — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — brotli — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: brotli — buffer overflow Related CVEs: CVE-2016-1624 CVE-2016-1968 Upstream summary: Google Chrome Releases reports: [583607] High CVE-2016-1624: Buffer overflow in Brotli. Credit to lukezli. Mozilla Foundation reports: Security researcher Luke […]

Read more
FreeBSD 12 — mohawk — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mohawk — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mohawk — multiple vulnerabilities Upstream summary: The mohawk project reports: Segfault when parsing malformed / unescaped url, coredump when setting syslog facility. Table of contents Symptom & Impact Environment & […]

Read more
CHAT