🟢 Low ⏱ 5–15 min Last verified: 24 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-bleach — regular expression denial-of-service Related CVEs: CVE-2020-6817 Upstream summary: Bleach developers reports: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to […]
🟢 Low ⏱ 5–15 min Last verified: 24 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — multiple vulnerabilities Related CVEs: CVE-2019-5885 Upstream summary: Matrix developers report: The matrix team releases Synapse 1.2.1 as a critical security update. It contains patches relating to redactions and […]
🟢 Low ⏱ 5–15 min Last verified: 23 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pitivi — code execution Related CVEs: CVE-2015-0855 Upstream summary: Luke Farone reports: Double-clicking a file in the user's media library with a specially-crafted path or filename allows for arbitrary code […]
🟢 Low ⏱ 5–15 min Last verified: 23 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kstars — exploitable set-user-ID application fliccd Related CVEs: CVE-2005-0011 Upstream summary: A KDE Security Advisory explains: Overview KStars includes support for the Instrument Neutral Distributed Interface (INDI). The build system […]
🟡 Medium ⏱ 10–30 min Last verified: 23 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tomcat — XSS vulnerability in sample applications Related CVEs: CVE-2005-2090 CVE-2007-0450 CVE-2007-1355 CVE-2007-1358 Upstream summary: The Apache Project reports: The JSP and Servlet included in the sample application within the […]
Introduction This guide explains how to Configure dnsmasq on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege separation. […]
🟢 Low ⏱ 5–15 min Last verified: 22 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]
🟠 High ⏱ 15–60 min Last verified: 21 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Openfire administration console authentication bypass Related CVEs: CVE-2008-1728 CVE-2008-6508 CVE-2008-6509 CVE-2008-6510 CVE-2008-6511 CVE-2009-0496 CVE-2009-0497 CVE-2009-1595 +2 more Upstream summary: [email protected] reports: Openfire's administrative console, a web-based application, was found to […]
🟢 Low ⏱ 5–15 min Last verified: 21 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SSH.COM SFTP server — format string vulnerability Related CVEs: CVE-2006-0705 Upstream summary: SSH Communications Security Corp reports a format string vulnerability in their SFTP server. This vulnerability could cause a […]
🟠 High ⏱ 15–60 min Last verified: 21 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2009-0385 CVE-2011-4351 CVE-2011-4352 CVE-2011-4353 CVE-2011-4364 CVE-2011-4579 CVE-2012-5150 CVE-2014-4609 +12 more Upstream summary: NVD reports: An issue was discovered in the FFmpeg package, where vp3_decode_frame […]
