FreeBSD

FreeBSD 14 — wayland — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — wayland — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wayland — integer overflow Related CVEs: CVE-2013-2003 Upstream summary: Tobias Stoeckmann reports: The libXcursor fix for CVE-2013-2003 has never been imported into wayland, leaving it vulnerable to it. Table of […]

Read more
FreeBSD 13 — postgresql13-server — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — postgresql13-server — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 April 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL — vulnerabilities Related CVEs: CVE-2021-23214 CVE-2021-23222 CVE-2021-3677 CVE-2022-1552 CVE-2024-10976 CVE-2024-10978 CVE-2024-7348 CVE-2025-4207  +3 more Upstream summary: PostgreSQL project reports: Tighten security checks in planner estimation functions. Prevent pg_dump scripts […]

Read more
FreeBSD 14 — redmine — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — redmine — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: redmine — information leak vulnerability Related CVEs: CVE-2012-0327 CVE-2014-1985 CVE-2015-8346 CVE-2015-8473 CVE-2015-8474 CVE-2015-8477 CVE-2015-8537 Upstream summary: Redmine reports: Data disclosure in atom feed. Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 14 — py35-rsa — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py35-rsa — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-rsa — Bleichenbacher'06 signature forgery vulnerability Related CVEs: CVE-2016-1494 Upstream summary: Filippo Valsorda reports: python-rsa is vulnerable to a straightforward variant of the Bleichenbacher'06 attack against RSA signature verification with […]

Read more
FreeBSD 14 — py37-pygments — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py37-pygments — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-pygments — multiple DoS vulnerabilities Related CVEs: CVE-2021-20270 CVE-2021-27291 Upstream summary: Red Hat reports: An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of […]

Read more
FreeBSD 13 — viewvc-devel — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — viewvc-devel — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 April 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: viewvc — Arbitrary server filesystem content Related CVEs: CVE-2025-54141 Upstream summary: cmpilato reports: The ViewVC standalone web server (standalone.py) is a script provided in the ViewVC distribution for the purposes […]

Read more
FreeBSD 14 — xtrabackup — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — xtrabackup — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qpress — directory traversal Related CVEs: CVE-2022-45866 Upstream summary: [email protected] reports: qpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup and other products, allows directory traversal […]

Read more
FreeBSD 12 — emacs-canna — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — emacs-canna — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 April 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Emacs — Arbitrary code execution vulnerability Related CVEs: CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2024-30202 CVE-2024-30203 CVE-2024-30204 CVE-2024-30205  +2 more Upstream summary: Problem Description A shell injection vulnerability exists in GNU Emacs […]

Read more
CHAT