FreeBSD

FreeBSD 12 — git-lite — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — git-lite — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 August 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: git — Multiple vulnerabilities Related CVEs: CVE-2015-7545 CVE-2016-2324 CVE-2018-11233 CVE-2018-11235 CVE-2020-11008 CVE-2020-5260 CVE-2022-39253 CVE-2022-39260  +2 more Upstream summary: git developers reports: This update includes 2 security fixes: CVE-2023-25652: By feeding […]

Read more
FreeBSD 12 — openssl-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — openssl-devel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 August 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenSSL — Multiple vulnerabilities Related CVEs: CVE-2016-2177 CVE-2016-2178 CVE-2016-2179 CVE-2016-2180 CVE-2016-2181 CVE-2016-2182 CVE-2016-2183 CVE-2016-6302  +12 more Upstream summary: The OpenSSL project reports: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) […]

Read more
FreeBSD 12 — py310-borgbackup — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py310-borgbackup — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 August 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Borg (Backup) — flaw in cryptographic authentication scheme in Borg allowed an attacker to fake archives and indirectly cause backup data loss. Related CVEs: CVE-2023-36811 Upstream summary: Thomas Waldmann reports: […]

Read more
FreeBSD 13 — py37-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py37-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 August 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Django — multiple vulnerabilities Related CVEs: CVE-2018-16984 CVE-2019-11358 CVE-2019-12308 CVE-2019-12781 CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235  +12 more Upstream summary: Django reports: CVE-2023-31047: Potential bypass of validation when uploading multiple files using […]

Read more
FreeBSD 13 — ghostscript7-jpnfont — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ghostscript7-jpnfont — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 August 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — exploitable buffer overflow in (T)BCP in PS interpreter Related CVEs: CVE-2023-28879 Upstream summary: [email protected] reports: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential […]

Read more
FreeBSD 13 — py39-redis — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py39-redis — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 August 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py39-redis — can send response data to the client of an unrelated request Related CVEs: CVE-2023-28858 CVE-2023-28859 Upstream summary: drago-balto reports: redis-py through 4.5.3 and 4.4.3 leaves a connection open […]

Read more
FreeBSD 13 — open-vm-tools — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — open-vm-tools — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 July 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: open-vm-tools — Multiple vulnerabilities Related CVEs: CVE-2023-34058 CVE-2023-34059 Upstream summary: VMware reports: This update includes 2 security fixes: High CVE-2023-34058: SAML token signature bypass vulnerability High CVE-2023-34059: File descriptor hijack […]

Read more
FreeBSD 13 — cpu-microcode-intel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — cpu-microcode-intel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 July 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Intel CPUs — multiple vulnerabilities Related CVEs: CVE-2023-22655 CVE-2023-28746 CVE-2023-38575 CVE-2023-39368 CVE-2023-42667 CVE-2023-43490 CVE-2023-43758 CVE-2023-45733  +12 more Upstream summary: Intel reports: A potential security vulnerability in some Intel Processors may […]

Read more
FreeBSD 12 — mantis-php — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mantis-php — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 July 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mantis — multiple vulnerabilities Related CVEs: CVE-2018-16514 CVE-2019-15715 CVE-2019-8331 CVE-2020-25288 CVE-2020-25781 CVE-2020-25830 CVE-2020-28413 CVE-2020-35849  +7 more Upstream summary: Mantis 2.25.8 release reports: Security and maintenance release 0032432: Update guzzlehttp/psr7 to […]

Read more
FreeBSD 12 — routinator — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — routinator — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 July 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: routinator — Possible path traversal when storing RRDP responses Related CVEs: CVE-2021-43172 CVE-2021-43173 CVE-2021-43174 CVE-2022-3029 CVE-2022-39915 CVE-2022-39916 CVE-2023-39916 Upstream summary: [email protected] reports: NLnet Labs Routinator 0.9.0 up to and including […]

Read more
CHAT