FreeBSD

FreeBSD 13 — magento — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — magento — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: magento — multiple vulnerabilities Related CVEs: CVE-2012-3363 Upstream summary: Magento, Inc. reports: SUPEE-6482 – This patch addresses two issues related to APIs and two cross-site scripting risks. SUPEE-6285 – This […]

Read more
FreeBSD 13 — py36-aiohttp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py36-aiohttp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: aiohttp — open redirect vulnerability Related CVEs: CVE-2021-21330 Upstream summary: Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to […]

Read more
FreeBSD 13 — rubygem18-rack — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — rubygem18-rack — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ruby Rack Gem — Multiple Issues Related CVEs: CVE-2013-0262 CVE-2013-0263 Upstream summary: Rack developers report: Today we are proud to announce the release of Rack 1.4.5. Fix CVE-2013-0263, timing attack […]

Read more
FreeBSD 13 — wu-ftpd+ipv — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — wu-ftpd+ipv — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wu-ftpd — remote globbing DoS vulnerability Related CVEs: CVE-2004-0148 CVE-2005-0256 Upstream summary: An iDEFENSE Security Advisory reports: Remote exploitation of an input validation vulnerability in version 2.6.2 of WU-FPTD could […]

Read more
FreeBSD 13 — rubygem-jquery-rails — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — rubygem-jquery-rails — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rubygem-rails — multiple vulnerabilities Related CVEs: CVE-2015-1840 CVE-2015-3224 CVE-2015-3225 CVE-2015-3226 CVE-2015-3227 Upstream summary: Ruby on Rails blog: Rails 3.2.22, 4.1.11 and 4.2.2 have been released, along with web console and […]

Read more
FreeBSD 13 — giflib — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — giflib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: giflib — heap overflow Related CVEs: CVE-2015-7555 Upstream summary: Hans Jerry Illikainen reports: A heap overflow may occur in the giffix utility included in giflib-5.1.1 when processing records of the […]

Read more
FreeBSD 13 — cvs+ipv — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — cvs+ipv — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cvsbug — race condition Related CVEs: CAN-2005-2693 CVE-2004-0180 CVE-2004-0405 CVE-2004-0414 CVE-2004-0416 CVE-2004-0417 CVE-2004-0418 CVE-2004-0778 Upstream summary: Problem description A temporary file is created, used, deleted, and then re-created with the […]

Read more
FreeBSD 13 — zabbix3-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — zabbix3-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Zabbix — Remote code execution Related CVEs: CVE-2017-2824 CVE-2020-11800 Upstream summary: Zabbix reports: Fixed security vulnerability cve-2020-11800 (remote code execution). (ZBX-17600) Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 13 — unzoo — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — unzoo — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unzoo — Directory Traversal Vulnerability Upstream summary: Secunia reports: Doubles has discovered a vulnerability in Unzoo, which potentially can be exploited by malicious people to compromise a user's system. The […]

Read more
FreeBSD 13 — dircproxy-devel — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — dircproxy-devel — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 December 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dircproxy — remote denial of service Related CVEs: CVE-2007-5226 Upstream summary: Securiweb reports: dircproxy allows remote attackers to cause a denial of service (segmentation fault) via an ACTION command without […]

Read more
CHAT