FreeBSD

FreeBSD 14 — linux-f10-nas-libs — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — linux-f10-nas-libs — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nas — multiple vulnerabilities Related CVEs: CVE-2013-4256 CVE-2013-4257 CVE-2013-4258 Upstream summary: Hamid Zamani reports: multiple security problems (buffer overflows, format string vulnerabilities and missing input sanitising), which could lead to […]

Read more
FreeBSD 14 — ruby_r — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ruby_r — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ruby — CGI DoS Related CVEs: CVE-2004-0983 Upstream summary: The Ruby CGI.rb module contains a bug which can cause the CGI module to go into an infinite loop, thereby causing […]

Read more
FreeBSD 14 — rubygem-json — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — rubygem-json — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rubygem-json — Unsafe Objection Creation Vulnerability in JSON (Additional fix) Related CVEs: CVE-2020-10663 Upstream summary: When parsing certain JSON documents, the json gem (including the one bundled with Ruby) can […]

Read more
FreeBSD 14 — avahi-app — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — avahi-app — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: avahi — denial of service Related CVEs: CVE-2010-2244 CVE-2011-1002 Upstream summary: Avahi developers reports: A vulnerability has been reported in Avahi, which can be exploited by malicious people to cause […]

Read more
FreeBSD 14 — rubygem-sinatra — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — rubygem-sinatra — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sinatra — XSS vulnerability Related CVEs: CVE-2018-11627 Upstream summary: Sinatra blog: Sinatra had a critical vulnerability since v2.0.0. The purpose of this release is to fix CVE-2018-11627. The vulnerability is […]

Read more
FreeBSD 14 — linux-c6-nspr — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — linux-c6-nspr — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2015-4513 CVE-2015-4514 CVE-2015-4515 CVE-2015-4518 CVE-2015-7181 CVE-2015-7182 CVE-2015-7183 CVE-2015-7185  +12 more Upstream summary: The Mozilla Project reports: MFSA 2015-133 NSS and NSPR memory corruption issues […]

Read more
FreeBSD 14 — snort — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — snort — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: snort — DCE/RPC preprocessor vulnerability Related CVEs: CVE-2006-5276 Upstream summary: A IBM Internet Security Systems Protection Advisory reports: Snort is vulnerable to a stack-based buffer overflow as a result of […]

Read more
FreeBSD 14 — py39-pysaml — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py39-pysaml — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pysaml2 — multiple vulnerabilities Related CVEs: CVE-2021-21238 CVE-2021-21239 Upstream summary: pysaml2 Releases: Fix processing of invalid SAML XML documents – CVE-2021-21238 Fix unspecified xmlsec1 key-type preference – CVE-2021-21239 Table of […]

Read more
FreeBSD 14 — emil — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — emil — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Buffer overflows and format string bugs in Emil Related CVEs: CVE-2004-0152 CVE-2004-0153 Upstream summary: Ulf Härnhammar reports multiple buffer overflows in Emil, some of which are triggered during the parsing […]

Read more
FreeBSD 14 — pdftohtml — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — pdftohtml — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpdf — stack based buffer overflow Related CVEs: CVE-2004-1125 CVE-2005-0064 CVE-2007-3387 Upstream summary: The KDE Team reports: kpdf, the KDE pdf viewer, shares code with xpdf. xpdf contains a vulnerability […]

Read more
CHAT