FreeBSD

FreeBSD 14 — jruby — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — jruby — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Multiple implementations — DoS via hash algorithm collision Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 Upstream summary: oCERT reports: A variety of programming languages suffer from a denial-of-service (DoS) condition against […]

Read more
FreeBSD 14 — libexo — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — libexo — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: XFCE — Allows executing malicious .desktop files pointing to remote code Related CVEs: CVE-2022-32278 Upstream summary: XFCE Project reports: Prevent executing possibly malicious .desktop files from online sources (ftp://, http:// […]

Read more
FreeBSD 14 — pear-PEAR — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — pear-PEAR — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pear-PEAR — PEAR installer arbitrary code execution vulnerability Upstream summary: Gregory Beaver reports: A standard feature of the PEAR installer implemented in all versions of PEAR can lead to the […]

Read more
FreeBSD 14 — helvis — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — helvis — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: helvis — arbitrary file deletion problem Related CVEs: CVE-2005-0118 CVE-2005-0119 CVE-2005-0120 Upstream summary: The setuid root elvprsv utility, used to preserve recovery helvis files, can be abused by local users […]

Read more
FreeBSD 14 — gnutls-devel — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — gnutls-devel — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gnutls — multiple certificate verification issues Related CVEs: CVE-2006-4790 CVE-2009-1415 CVE-2009-1416 CVE-2009-1417 CVE-2009-2730 CVE-2012-1569 CVE-2012-1573 CVE-2014-0092  +1 more Upstream summary: GnuTLS project reports: A vulnerability was discovered that affects the […]

Read more
FreeBSD 14 — xzgv — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — xzgv — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zgv, xzgv — heap overflow vulnerability Related CVEs: CVE-2004-0994 CVE-2006-1060 Upstream summary: Gentoo reports: Andrea Barisani of Gentoo Linux discovered xzgv and zgv allocate insufficient memory when rendering images with […]

Read more
FreeBSD 14 — de-linux-mozillafirebird — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — de-linux-mozillafirebird — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

Read more
FreeBSD 14 — firefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — firefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox — Memory safety bugs present in Firefox 150 Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-0722 CVE-2004-0758  +12 more Upstream summary: https://www.mozilla.org/en-US/security/advisories/mfsa2026-40/ reports: Memory safety bugs present in […]

Read more
FreeBSD 14 — zhcon — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — zhcon — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zhcon — unauthorized file access Related CVEs: CVE-2005-0072 Upstream summary: Martin Joey Schulze reports: Erik Sjöund discovered that zhcon, a fast console CJK system using the Linux framebuffer, accesses a […]

Read more
FreeBSD 14 — WebCalendar-devel — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — WebCalendar-devel — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: WebCalendar — multiple vulnerabilities Related CVEs: CVE-2012-0846 CVE-2012-1495 CVE-2012-1496 Upstream summary: Hanno Boeck reports: Fixes [are now available] for various security vulnerabilities including LFI (local file inclusion), XSS (cross site […]

Read more
CHAT