FreeBSD

FreeBSD 13 — fr-cups-lpr — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — fr-cups-lpr — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cups-lpr — lppasswd multiple vulnerabilities Related CVEs: CVE-2004-1268 CVE-2004-1269 CVE-2004-1270 Upstream summary: D. J. Bernstein reports that Bartlomiej Sieka has discovered several security vulnerabilities in lppasswd, which is part of […]

Read more
FreeBSD 13 — mysql55-client — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — mysql55-client — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mysql — denial of service vulnerability Related CVEs: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858  +12 more Upstream summary: Openwall reports: C client library for MySQL (libmysqlclient.so) has use-after-free […]

Read more
FreeBSD 13 — postgresql94-client — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — postgresql94-client — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL vulnerabilities Related CVEs: CVE-2016-5423 CVE-2016-5424 Upstream summary: The PostgreSQL project reports: Security Fixes nested CASE expressions + database and role names with embedded special characters CVE-2017-7484: selectivity estimators bypass […]

Read more
FreeBSD 13 — py36-borgbackup — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py36-borgbackup — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: borgbackup — remote users can override repository restrictions Related CVEs: CVE-2017-15914 Upstream summary: BorgBackup reports: Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers. […]

Read more
FreeBSD 13 — ja-wordpress-ja — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ja-wordpress-ja — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wordpress — XSS Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block type Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 13 — php4-dtc — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php4-dtc — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2005-0596 CVE-2006-4481 CVE-2006-4482 CVE-2006-4483  +12 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]

Read more
FreeBSD 13 — dpkg — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — dpkg — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dpkg — stack-based buffer overflow Related CVEs: CVE-2015-0860 Upstream summary: Salvatore Bonaccorso reports: Hanno Boeck discovered a stack-based buffer overflow in the dpkg-deb component of dpkg, the Debian package management […]

Read more
FreeBSD 13 — isc-dhcpd — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — isc-dhcpd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcpd — format string vulnerabilities Related CVEs: CVE-2004-1006 Upstream summary: The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary […]

Read more
FreeBSD 13 — kdepim — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — kdepim — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kdepim exploitable buffer overflow in VCF reader Related CVEs: CVE-2003-0988 Upstream summary: A buffer overflow is present in some versions of the KDE personal information manager (kdepim) which may be […]

Read more
FreeBSD 13 — postgresql-contrib — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — postgresql-contrib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: postgresql-contrib — insecure temporary file creation Related CVEs: CVE-2004-0977 Upstream summary: The make_oidjoins_check script in the PostgreSQL RDBMS has insecure handling of temporary files, which could lead to an attacker […]

Read more
CHAT