FreeBSD

FreeBSD 12 — leafnode — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — leafnode — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: leafnode — denial of service vulnerability Related CVEs: CVE-2002-1661 CVE-2003-0744 CVE-2004-2068 CVE-2005-1453 CVE-2005-1911 Upstream summary: Matthias Andree reports: A vulnerability was found in the fetchnews program (the NNTP client) that […]

Read more
FreeBSD 12 — de-netscape — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — de-netscape — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

Read more
FreeBSD 12 — libcdaudio — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libcdaudio — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libcdaudio — remote buffer overflow and code execution Related CVEs: CVE-2005-0706 CVE-2008-5030 Upstream summary: securityfocus reports: The 'libcdaudio' library is prone to a remote heap code in the context of […]

Read more
FreeBSD 12 — py34-borgbackup — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py34-borgbackup — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: borgbackup — remote users can override repository restrictions Related CVEs: CVE-2017-15914 Upstream summary: BorgBackup reports: Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers. […]

Read more
FreeBSD 12 — p5-subversion — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — p5-subversion — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: subversion — heap overflow vulnerability Related CVEs: CVE-2009-2411 Upstream summary: A Subversion Security Advisory reports: Subversion clients and servers have multiple heap overflow issues in the parsing of binary deltas. […]

Read more
FreeBSD 12 — xfs — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — xfs — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xfs — multiple vulnerabilities Related CVEs: CVE-2007-4568 Upstream summary: Matthieu Herrb reports: Problem Description: Several vulnerabilities have been identified in xfs, the X font server. The QueryXBitmaps and QueryXExtents protocol […]

Read more
FreeBSD 12 — ko-netscape-communicator-linux — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ko-netscape-communicator-linux — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]

Read more
FreeBSD 12 — py37-kerberos — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py37-kerberos — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-kerberos — DoS and MitM vulnerabilities Related CVEs: CVE-2015-3206 Upstream summary: macosforgebot reports: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows […]

Read more
FreeBSD 12 — librsvg2-rust — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — librsvg2-rust — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: librsvg2 — multiple vulnerabilities Related CVEs: CVE-2019-20446 Upstream summary: Librsvg2 developers reports: Backport the following fixes from 2.46.x: Librsvg now has limits on the number of loaded XML elements, and […]

Read more
FreeBSD 12 — acme.sh — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — acme.sh — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: acme.sh — closes potential remote vuln Upstream summary: Neil Pang reports: HiCA was injecting arbitrary code/commands into the certificate obtaining process and acme.sh is running them on the client machine. […]

Read more
CHAT