FreeBSD

FreeBSD 14 — py37-ansible-core — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py37-ansible-core — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]

Read more
FreeBSD 14 — linux-flashplayer — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — linux-flashplayer — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Flash Player — arbitrary code execution Related CVEs: CVE-2017-11213 CVE-2017-11215 CVE-2017-11225 CVE-2017-11281 CVE-2017-11282 CVE-2017-11292 CVE-2017-2925 CVE-2017-2926  +12 more Upstream summary: Adobe reports: This update resolves a NULL pointer dereference vulnerability […]

Read more
FreeBSD 14 — oops — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — oops — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: oops — format string vulnerability Related CVEs: CVE-2005-1121 Upstream summary: A RST/GHC Advisory reports that there is an format string vulnerability in oops. The vulnerability can be found in the […]

Read more
FreeBSD 14 — py39-Elixir — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py39-Elixir — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py39-Elixir — weak use of cryptography Related CVEs: CVE-2012-2146 Upstream summary: Red Hat Security Response Team reports: Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector […]

Read more
FreeBSD 14 — py23-django — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py23-django — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2008-2302 CVE-2009-3695 CVE-2010-3082 Upstream summary: The Django project reports: Please reference CVE/URL list for details Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 14 — rubygem-actionmailer — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — rubygem-actionmailer — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rails — multiple vulnerabilities Related CVEs: CVE-2013-4491 CVE-2013-6414 CVE-2013-6415 CVE-2013-6416 CVE-2013-6417 Upstream summary: Rails weblog: Rails 3.2.16 and 4.0.2 have been released! These two releases contain important security fixes, so […]

Read more
FreeBSD 12 — py38-matrix-synapse — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py38-matrix-synapse — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 November 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — federation denial of service via malformed events Related CVEs: CVE-2020-26257 CVE-2020-26891 CVE-2021-29471 CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 CVE-2024-31208  +7 more Upstream summary: element-hq/synapse developers report: A malicious server can […]

Read more
FreeBSD 14 — php56-bcmath — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — php56-bcmath — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2016-3074 Upstream summary: The PHP Group reports: BCMath: Fixed bug #72093 (bcpowmod accepts negative scale and corrupts _one_ definition). Exif: Fixed bug #72094 (Out […]

Read more
FreeBSD 14 — xpcd — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — xpcd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpcd — buffer overflow Related CVEs: CVE-2005-0074 Upstream summary: Debian Project reports: Erik Sjolund discovered a buffer overflow in pcdsvgaview, an SVGA PhotoCD viewer. xpcd-svga is part of xpcd and […]

Read more
FreeBSD 14 — intel-nvmupdate — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — intel-nvmupdate — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Intel(R) NVMUpdate — Intel(R) Ethernet Controller X710/XL710 NVM Security Vulnerability Related CVEs: CVE-2016-8106 Upstream summary: Intel Corporation reports: A security vulnerability in the Intel(R) Ethernet Controller X710 and Intel(R) Ethernet […]

Read more
CHAT