FreeBSD 12

FreeBSD 12 — rubygem-rails-html-sanitizer — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — rubygem-rails-html-sanitizer — multiple vulnerabilities (7 CVEs) — patch and remediation guide

  • February 22, 2020
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rails-html-sanitizer — possible XSS vulnerability Related CVEs: CVE-2015-7576 CVE-2015-7577 CVE-2015-7581 CVE-2016-0751 CVE-2016-0752 CVE-2016-0753 CVE-2018-3741 Upstream summary: OSS-Security list: There is a possible XSS vulnerability in rails-html-sanitizer. The gem allows non-whitelisted […]

Read more
FreeBSD 12 — mencoder — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mencoder — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • February 22, 2020
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 22 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — remote denial of service in JPEG2000 decoder Related CVEs: CVE-2014-4610 CVE-2015-3395 CVE-2015-6761 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822  +12 more Upstream summary: FFmpeg security reports: FFmpeg 2.8.6 fixes the […]

Read more
FreeBSD 12 — py27-radicale — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py27-radicale — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • February 21, 2020
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 21 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: radicale — multiple vulnerabilities Related CVEs: CVE-2015-8747 CVE-2015-8748 Upstream summary: Radicale reports: The multifilesystem backend allows access to arbitrary files on all platforms. Prevent regex injection in rights management. Table […]

Read more
How to Configure the pkg Package Manager on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Configure the pkg Package Manager on FreeBSD 12

  • February 21, 2020
  • FreeBSD
  • Comment off

Introduction FreeBSD 12 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up configure the pkg package manager on freebsd 12 on FreeBSD 12 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any […]

Read more
FreeBSD 12 — libxine — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libxine — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • February 21, 2020
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 21 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libxine — multiple vulnerabilities Related CVEs: CVE-2004-0433 CVE-2004-1187 CVE-2004-1188 CVE-2004-1300 CVE-2004-1379 CVE-2005-1195 CVE-2005-2967 CVE-2006-1664  +12 more Upstream summary: xine developers report: Fix another possible int overflow in the 4XM demuxer. […]

Read more
FreeBSD 12 — kde-runtime — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — kde-runtime — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • February 21, 2020
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 21 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kde-runtime — kdesu: displayed command truncated by unicode string terminator Related CVEs: CVE-2013-7252 CVE-2014-8600 CVE-2016-7787 Upstream summary: Albert Aastals Cid reports: A maliciously crafted command line for kdesu can result […]

Read more
FreeBSD 12 — squid-devel — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — squid-devel — multiple vulnerabilities (8 CVEs) — patch and remediation guide

  • February 20, 2020
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 20 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: squid — Vulnerable to Denial of Service attack Related CVEs: CVE-2016-10002 CVE-2016-10003 CVE-2016-4553 CVE-2016-4554 CVE-2016-4555 CVE-2016-4556 CVE-2018-1000024 CVE-2018-1000027 Upstream summary: Louis Dion-Marcil reports: Due to incorrect pointer handling Squid is […]

Read more
How to Configure auditd on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Configure auditd on FreeBSD 12

  • February 20, 2020
  • FreeBSD
  • Comment off

Introduction This guide explains how to Configure auditd on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege separation. […]

Read more
FreeBSD 12 — busybox — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — busybox — vulnerability — patch and remediation guide

  • February 20, 2020
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: LZO — potential buffer overrun when processing malicious input data Related CVEs: CVE-2014-4608 Upstream summary: Markus Franz Xaver Johannes Oberhumer reports, in the package's NEWS file: Fixed a potential integer […]

Read more
FreeBSD 12 — py33-foolscap — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py33-foolscap — security advisory — patch and remediation guide

  • February 20, 2020
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-foolscap — local file inclusion Upstream summary: Brian Warner reports: The "flappserver" feature was found to have a vulnerability in the service-lookup code which, when combined with an attacker who […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT