FreeBSD

FreeBSD 14 — openssl-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — openssl-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenSSL — Multiple vulnerabilities Related CVEs: CVE-2016-2177 CVE-2016-2178 CVE-2016-2179 CVE-2016-2180 CVE-2016-2181 CVE-2016-2182 CVE-2016-2183 CVE-2016-6302  +12 more Upstream summary: The OpenSSL project reports: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) […]

Read more
FreeBSD 14 — py31-django-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py31-django-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2009-3695 CVE-2010-3082 Upstream summary: The Django project reports: Please reference CVE/URL list for details Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
FreeBSD 14 — py38-kerberos — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py38-kerberos — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-kerberos — DoS and MitM vulnerabilities Related CVEs: CVE-2015-3206 Upstream summary: macosforgebot reports: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows […]

Read more
FreeBSD 14 — darkhttpd — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — darkhttpd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: darkhttpd — DOS vulnerability Related CVEs: CVE-2020-25691 Upstream summary: Mitre reports: flaw was found in darkhttpd. Invalid error handling allows remote attackers to cause denial-of-service by accessing a file with […]

Read more
FreeBSD 14 — accountsservice — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — accountsservice — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: AccountsService — Insufficient path check in user_change_icon_file_authorized_cb() Related CVEs: CVE-2018-14036 Upstream summary: NVD reports: Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check […]

Read more
FreeBSD 14 — drupal6-views — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — drupal6-views — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Drupal Views plugin — cross-site scripting Related CVEs: CVE-2010-4521 Upstream summary: Drupal security team reports: The Views module provides a flexible method for Drupal site designers to control how lists […]

Read more
FreeBSD 14 — mariadb103-client — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mariadb103-client — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MariaDB — Multiple vulnerabilities Related CVEs: CVE-2020-15180 CVE-2020-2574 CVE-2021-46659 CVE-2021-46661 CVE-2021-46663 CVE-2021-46664 CVE-2021-46665 CVE-2021-46668  +12 more Upstream summary: The MariaDB project reports: MariaDB fixed 23 vulnerabilities across all supported versions […]

Read more
FreeBSD 14 — py27-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py27-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]

Read more
FreeBSD 14 — libssh — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — libssh — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libssh — possible heap-buffer overflow vulnerability Related CVEs: CVE-2014-0017 CVE-2015-1782 CVE-2015-3146 CVE-2016-0739 CVE-2018-10933 CVE-2019-14889 CVE-2019-3855 CVE-2019-3856  +9 more Upstream summary: libssh security advisories: The SSH protocol keeps track of two […]

Read more
FreeBSD 14 — isc-dhcp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — isc-dhcp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcpd — format string vulnerabilities Related CVEs: CVE-2004-1006 Upstream summary: The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary […]

Read more
CHAT