FreeBSD

FreeBSD 13 — php55-bcmath — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php55-bcmath — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2016-3074 Upstream summary: The PHP Group reports: BCMath: Fixed bug #72093 (bcpowmod accepts negative scale and corrupts _one_ definition). Exif: Fixed bug #72094 (Out […]

Read more
FreeBSD 13 — py310-markdown — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py310-markdown — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-markdown2 — regular expression denial of service vulnerability Related CVEs: CVE-2020-11888 CVE-2021-26813 Upstream summary: Ben Caller reports: markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of […]

Read more
FreeBSD 13 — rinetd — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — rinetd — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fd_set — bitmap index overflow in multiple applications Upstream summary: 3APA3A reports: If programmer fails to check socket number before using select() or fd_set macros, it's possible to overwrite memory […]

Read more
FreeBSD 13 — py27-imaging — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py27-imaging — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-imaging, py-pillow — Buffer overflow in PCD decoder Related CVEs: CVE-2016-0775 Upstream summary: The Pillow maintainers report: In all versions of Pillow, dating back at least to the last PIL […]

Read more
FreeBSD 13 — qt4-imageformats — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — qt4-imageformats — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qt4-imageformats, qt4-gui, qt5-gui — Multiple Vulnerabilities in Qt Image Format Handling Related CVEs: CVE-2014-0190 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 Upstream summary: Richard J. Moore reports: Due to two recent vulnerabilities identified in […]

Read more
FreeBSD 13 — php56-fileinfo — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php56-fileinfo — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Upstream summary: The PHP Group reports: Fileinfo: Fixed bug #71527 (Buffer over-write in finfo_open with malformed magic file). mbstring: Fixed bug #71906 (AddressSanitizer: negative-size-param (-1) in […]

Read more
FreeBSD 13 — linux-mozilla — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — linux-mozilla — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — code execution via Quicktime media-link files Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-0722 CVE-2004-0757  +12 more Upstream summary: The Mozilla Foundation reports a vulnerability within the […]

Read more
FreeBSD 13 — age — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — age — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: age — age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution Upstream summary: Filippo Valsorda reports: A plugin name containing a path separator may allow an […]

Read more
FreeBSD 13 — linux-f10-dbus-glib — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — linux-f10-dbus-glib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dbus-glib — privledge escalation Related CVEs: CVE-2013-0292 Upstream summary: Sebastian Krahmer reports: A privilege escalation flaw was found in the way dbus-glib, the D-Bus add-on library to integrate the standard […]

Read more
CHAT