FreeBSD

FreeBSD 14 — mariadb55-client — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mariadb55-client — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MariaDB — Vulnerability in C API Related CVEs: CVE-2015-3152 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836  +12 more Upstream summary: MariaDB reports: Difficult to exploit vulnerability allows unauthenticated attacker with […]

Read more
FreeBSD 14 — mod_frontpage — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mod_frontpage — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: frontpage — cross site scripting vulnerability Related CVEs: CVE-2006-0015 Upstream summary: Esteban Martinez Fayo reports: The FrontPage Server Extensions 2002 (included in Windows Sever 2003 IIS 6.0 and available as […]

Read more
FreeBSD 14 — py38-httpie — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py38-httpie — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-httpie — exposure of sensitive information vulnerabilities Related CVEs: CVE-2022-0430 CVE-2022-24737 Upstream summary: Glyph reports: HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help […]

Read more
FreeBSD 14 — py35-buildbot — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py35-buildbot — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: buildbot — OAuth Authentication Vulnerability Related CVEs: CVE-2019-12300 CVE-2019-7313 Upstream summary: Buildbot accepted user-submitted authorization token from OAuth and used it to authenticate user. The vulnerability can lead to malicious […]

Read more
FreeBSD 14 — horde-devel — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — horde-devel — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: horde — cross-site scripting vulnerability in help window Upstream summary: A Horde Team announcement states that a potential cross-site scripting vulnerability in the help window has been corrected. The vulnerability […]

Read more
FreeBSD 14 — ko-helvis — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ko-helvis — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: helvis — arbitrary file deletion problem Related CVEs: CVE-2005-0118 CVE-2005-0119 CVE-2005-0120 Upstream summary: The setuid root elvprsv utility, used to preserve recovery helvis files, can be abused by local users […]

Read more
FreeBSD 14 — sane-backends — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — sane-backends — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Sane — Multiple Vulnerabilities Related CVEs: CVE-2020-12861 CVE-2020-12862 CVE-2020-12863 CVE-2020-12864 CVE-2020-12865 CVE-2020-12866 CVE-2020-12867 Upstream summary: The Sane Project reports: epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory management issues found while […]

Read more
FreeBSD 14 — bip — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — bip — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bip — buffer overflow Related CVEs: CVE-2012-0806 Upstream summary: Julien Tinnes reports, Bip doesn't check if fd is equal or larger than FD_SETSIZE. Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 14 — ganglia-monitor-core — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ganglia-monitor-core — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ganglia — buffer overflow vulnerability Related CVEs: CVE-2009-0241 Upstream summary: Secunia reports: Spike Spiegel has discovered a vulnerability in Ganglia which can be exploited by malicious people to compromise a […]

Read more
FreeBSD 14 — py38-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py38-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]

Read more
CHAT