FreeBSD

FreeBSD 13 — lbreakout — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — lbreakout — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: lbreakout2 vulnerability in environment variable handling Related CVEs: CVE-2004-0158 Upstream summary: Ulf Härnhammar discovered an exploitable vulnerability in lbreakout2's environmental variable handling. In several instances, the contents of the HOME […]

Read more
FreeBSD 13 — mozilla — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — mozilla — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 10 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-0722 CVE-2004-0757  +12 more Upstream summary: [email protected] reports: Memory safety bugs present in Firefox 134 and Thunderbird 134. […]

Read more
FreeBSD 13 — syncthing — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — syncthing — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: syncthing — crash due to malformed relay protocol message Related CVEs: CVE-2021-21404 Upstream summary: syncthing developers report: syncthing can be caused to crash and exit if sent a malformed relay […]

Read more
FreeBSD 13 — php5-session — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php5-session — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 9 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2007-0905 CVE-2007-0906 CVE-2007-0907 CVE-2007-0908 CVE-2007-0909 CVE-2007-0910 CVE-2007-0988 CVE-2007-1001 Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 and PHP […]

Read more
FreeBSD 13 — mosquitto — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — mosquitto — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mosquitto — NULL pointer dereference Upstream summary: Roger Light reports: If an authenticated client connected with MQTT v5 sent a malformed CONNACK message to the broker a NULL pointer dereference […]

Read more
FreeBSD 13 — libmms — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libmms — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libmms — stack-based buffer overflow Related CVEs: CVE-2006-2200 Upstream summary: Mitre CVE reports: Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, […]

Read more
FreeBSD 13 — openjdk — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — openjdk — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: java — multiple vulnerabilities Related CVEs: CVE-2012-4681 CVE-2013-0433 CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 25 new security fixes for […]

Read more
FreeBSD 13 — perl-threaded — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — perl-threaded — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: perl — denial of service via algorithmic complexity attack on hashing routines Related CVEs: CVE-2004-0452 CVE-2005-0155 CVE-2005-0156 CVE-2007-5116 CVE-2013-1667 Upstream summary: Perl developers report: In order to prevent an algorithmic […]

Read more
FreeBSD 13 — metamail — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — metamail — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: metamail format string bugs and buffer overflows Related CVEs: CVE-2004-0104 CVE-2004-0105 Upstream summary: Ulf Härnhammar reported four bugs in metamail: two are format string bugs and two are buffer overflows. […]

Read more
CHAT