Introduction Deploying configure tekton ci/cd on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base […]
🟠 High ⏱ 15–60 min Last verified: 21 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: go — excessive resource consumption Related CVEs: CVE-2015-5739 CVE-2015-5740 CVE-2015-5741 CVE-2015-8618 CVE-2016-3959 CVE-2019-16276 CVE-2020-16845 CVE-2020-24553 +12 more Upstream summary: The Go project reports: Within HostnameError.Error(), when constructing an error string, […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: serendipity — multiple cross site scripting vulnerabilities Related CVEs: CVE-2008-1385 CVE-2008-1386 Upstream summary: Hanno Boeck reports: The installer of serendipity 1.3 has various Cross Site Scripting issues. This is considered […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnupg — attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output Related CVEs: CVE-2016-6313 Upstream summary: Werner Koch reports: There was a […]
🟢 Low ⏱ 5–15 min Last verified: 20 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: abiword, koffice — stack based buffer overflow vulnerabilities Related CVEs: CAN-2005-2972 Upstream summary: Chris Evans reports that AbiWord is vulnerable to multiple stack-based buffer overflow vulnerabilities. This is caused by […]
Introduction Deploying configure zfs snapshots and rollback on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openslp — denial of service vulnerability Related CVEs: CVE-2015-5155 Upstream summary: Qinghao Tang reports: The function ParseExtension() in openslp 1.2.1 contains vulnerability: an attacker can cause a denial of service […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: LibYAML input sanitization errors Related CVEs: CVE-2013-6393 CVE-2014-2525 Upstream summary: oCERT reports: The LibYAML project is an open source YAML 1.1 parser and emitter written in C. The library is […]
🟢 Low ⏱ 5–15 min Last verified: 19 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-bleach — regular expression denial-of-service Related CVEs: CVE-2020-6817 Upstream summary: Bleach developers reports: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nettle 3.7.2 — fix serious ECDSA signature verify bug Upstream summary: Niels Möller reports: I've prepared a new bug-fix release of Nettle, a low-level cryptographics library, to fix a serious […]
