FreeBSD

FreeBSD 12 — chasen-base — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — chasen-base — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ChaSen — buffer overflow Related CVEs: CVE-2011-4000 Upstream summary: JVN iPedia reports: ChaSen provided by Nara Institute of Science and Technology is a software for morphologically analyzing Japanese. ChaSen contains […]

Read more
FreeBSD 12 — isc-dhcp30-client — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — isc-dhcp30-client — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcp-client — Stack overflow vulnerability Related CVEs: CVE-2009-0692 Upstream summary: US-CERT reports: The ISC DHCP dhclient application contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to […]

Read more
FreeBSD 12 — php56-mysql — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php56-mysql — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mysql — SSL Downgrade Related CVEs: CVE-2015-3152 Upstream summary: Duo Security reports: Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker […]

Read more
FreeBSD 12 — libpgf — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libpgf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libpgf — use-after-free Related CVEs: CVE-2015-6673 Upstream summary: Pengsu Cheng reports: An use-after-free issue in Decoder.cpp was reported to upstream. The problem is due to lack of validation of ColorTableSize. […]

Read more
FreeBSD 12 — py31-pycrypto — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py31-pycrypto — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pycrypto — PRNG reseed race condition Related CVEs: CVE-2013-1445 Upstream summary: Dwayne Litzenberger reports: In PyCrypto before v2.6.1, the Crypto.Random pseudo-random number generator (PRNG) exhibits a race condition that may […]

Read more
FreeBSD 12 — zh-mutt-devel — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zh-mutt-devel — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mutt — Remote Buffer Overflow Vulnerability Upstream summary: SecurityFocus reports: Mutt is prone to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied […]

Read more
FreeBSD 12 — py39-twisted — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py39-twisted — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-twisted — cookie and authorization headers are leaked when following cross-origin redirects Upstream summary: Twisted developers report: Cookie and Authorization headers are leaked when following cross-origin redirects in twited.web.client.RedirectAgent and […]

Read more
FreeBSD 12 — jpgraph — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — jpgraph — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jpgraph2 — XSS vulnerability Upstream summary: Martin Barbella reports: JpGraph is an object oriented library for PHP that can be used to create various types of graphs which also contains […]

Read more
FreeBSD 12 — libXrender — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libXrender — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 April 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: X.org libraries — multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered […]

Read more
CHAT