FreeBSD

FreeBSD 13 — openoffice — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — openoffice — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — arbitrary command execution vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 CVE-2007-2834 Upstream summary: iDefense reports: Remote exploitation of multiple integer overflow vulnerabilities within OpenOffice, as included in various vendors' operating […]

Read more
FreeBSD 13 — percona-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — percona-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL — multiple vulnerabilities Related CVEs: CVE-2012-4414 CVE-2012-5611 CVE-2012-5612 CVE-2012-5615 CVE-2012-5627 CVE-2015-3194 CVE-2016-0639 CVE-2016-0640  +12 more Upstream summary: Oracle reports reports: Critical Patch Update contains 31 new security fixes for […]

Read more
FreeBSD 13 — prozilla — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — prozilla — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ProZilla — server response buffer overflow vulnerabilities Related CVEs: CVE-2004-1120 Upstream summary: Buffer overflow vulnerabilities have been reported to exist in this software package. The vulnerabilities can be triggered by […]

Read more
FreeBSD 13 — py38-flask-caching — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py38-flask-caching — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-flask-caching — remote code execution or local privilege escalation vulnerabilities Related CVEs: CVE-2021-33026 Upstream summary: subnix reports: The Flask-Caching extension through 2.0.2 for Flask relies on Pickle for serialization, which […]

Read more
FreeBSD 13 — chocolate-doom — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — chocolate-doom — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: chocolate-doom — Arbitrary code execution Related CVEs: CVE-2020-14983 Upstream summary: Michal Dardas from LogicalTrust reports: The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players […]

Read more
FreeBSD 13 — squidclamav — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — squidclamav — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: squidclamav — cross-site scripting in default virus warning pages Related CVEs: CVE-2012-3501 CVE-2012-4667 Upstream summary: SquidClamav developers report: This release fix several security issues by escaping CGI parameters. Prior to […]

Read more
FreeBSD 13 — ja-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ja-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

Read more
FreeBSD 13 — xterm — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xterm — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xterm — DECRQSS remote command execution vulnerability Related CVEs: CVE-2008-2383 Upstream summary: SecurityFocus reports: The xterm program is prone to a remote command-execution vulnerability because it fails to sufficiently validate […]

Read more
FreeBSD 13 — py36-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py36-urllib — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: urllib3 — multiple vulnerabilities Related CVEs: CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 Upstream summary: NIST reports: (by search in the range 2018/01/01 – 2019/11/10): urllib3 before version 1.23 does not remove the Authorization […]

Read more
CHAT