FreeBSD

FreeBSD 13 — piwik — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — piwik — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: piwik — XSS vulnerability Related CVEs: CVE-2009-4137 CVE-2010-1453 CVE-2010-2786 CVE-2015-7815 CVE-2015-7816 Upstream summary: Piwik reports: We have identified and fixed several XSS security issues in this release. Table of contents […]

Read more
FreeBSD 13 — libproxy-perl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libproxy-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libproxy — stack-based buffer overflow Related CVEs: CVE-2012-4504 Upstream summary: Tomas Hoger reports: A buffer overflow flaw was discovered in the libproxy's url::get_pac() used to download proxy.pac proxy auto-configuration file. […]

Read more
FreeBSD 13 — kodi — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — kodi — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2015-3395 CVE-2015-3885 CVE-2015-6761 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822  +12 more Upstream summary: NVD reports: The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does […]

Read more
FreeBSD 13 — typo3-lts — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — typo3-lts — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: typo3 — Missing access check in Extbase Related CVEs: CVE-2016-5091 Upstream summary: TYPO3 reports: Extbase request handling fails to implement a proper access check for requested controller/ action combinations, which […]

Read more
FreeBSD 13 — firebird25-server — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — firebird25-server — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firebird — Remote Stack Buffer Overflow Related CVEs: CVE-2013-2492 Upstream summary: Firebird Project reports: The FirebirdSQL server is vulnerable to a stack buffer overflow that can be triggered when an […]

Read more
FreeBSD 12 — sogo2-activesync — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — sogo2-activesync — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 November 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: SOGo — SAML user authentication impersonation Related CVEs: CVE-2021-33054 Upstream summary: sogo.nu reports: SOGo was not validating the signatures of any SAML assertions it received. This means any actor with […]

Read more
FreeBSD 13 — otrs — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — otrs — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OTRS — Multiple vulnerabilities Related CVEs: CVE-2010-0438 CVE-2010-2080 CVE-2010-4071 CVE-2011-1518 CVE-2011-2746 CVE-2012-2582 CVE-2012-4600 CVE-2012-4751  +12 more Upstream summary: OTRS reports: An attacker who is logged into OTRS as an agent […]

Read more
FreeBSD 13 — xorg-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xorg-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xorg-server — Multiple vulnerabilities Related CVEs: CVE-2005-2495 CVE-2006-0745 CVE-2007-5760 CVE-2007-5958 CVE-2007-6427 CVE-2007-6428 CVE-2007-6429 CVE-2008-0006  +12 more Upstream summary: X.Org project reports: Multiple issues have been found in the X server […]

Read more
FreeBSD 13 — rubygem-actionmailer — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — rubygem-actionmailer — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rails — multiple vulnerabilities Related CVEs: CVE-2013-4491 CVE-2013-6414 CVE-2013-6415 CVE-2013-6416 CVE-2013-6417 Upstream summary: Rails weblog: Rails 3.2.16 and 4.0.2 have been released! These two releases contain important security fixes, so […]

Read more
FreeBSD 13 — pjsip-extsrtp — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — pjsip-extsrtp — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: asterisk and pjsip — multiple vulnerabilities Upstream summary: The Asterisk project reports: AST-2018-002 – By crafting an SDP message with an invalid media format description Asterisk crashes when using the […]

Read more
CHAT