🟢 Low ⏱ 5–15 min Last verified: 20 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — zseticcspace() function buffer overflow vulnerability Related CVEs: CVE-2008-0411 Upstream summary: Chris Evans from the Google Security Team reports: Severity: parsing of evil PostScript file will result in arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 20 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Axis2 — Security vulnerability on dependency Apache Commons FileUpload Related CVEs: CVE-2010-3981 CVE-2012-6153 CVE-2014-3577 CVE-2016-1000031 Upstream summary: Apache Axis2 reports: The commons-fileupload dependency has been updated to a version that […]
🟠 High ⏱ 15–60 min Last verified: 20 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: java — multiple vulnerabilities Related CVEs: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 25 new security fixes for […]
🟢 Low ⏱ 5–15 min Last verified: 19 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: giflib — heap overflow Related CVEs: CVE-2015-7555 Upstream summary: Hans Jerry Illikainen reports: A heap overflow may occur in the giffix utility included in giflib-5.1.1 when processing records of the […]
🟢 Low ⏱ 5–15 min Last verified: 19 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: smarty3 — shell injection in math Upstream summary: The smarty project reports: bugfix {math} shell injection vulnerability Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟠 High ⏱ 15–60 min Last verified: 19 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: RT — XSS via calendar invitations Related CVEs: CVE-2009-3585 CVE-2011-0009 CVE-2011-1685 CVE-2011-1686 CVE-2011-1687 CVE-2011-1688 CVE-2011-1689 CVE-2011-1690 +12 more Upstream summary: Mateusz Szymaniec and CERT Polska Reports: RT is vulnerable to […]
🟠 High ⏱ 15–60 min Last verified: 19 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Gitlab — vulnerabilities Related CVEs: CVE-2018-14364 CVE-2018-14601 CVE-2018-14602 CVE-2018-14603 CVE-2018-14604 CVE-2018-14605 CVE-2018-14606 CVE-2018-15472 +12 more Upstream summary: Gitlab reports: Cross-site Scripting issue in Analytics dashboard chart rendering impacts GitLab EE […]
Introduction Deploying set up nexus repository manager on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the […]
🟢 Low ⏱ 5–15 min Last verified: 18 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openssl — potential SSL 2.0 rollback Related CVEs: CVE-2005-2969 Upstream summary: Vulnerability: Such applications are affected if they use the option SSL_OP_MSIE_SSLV2_RSA_PADDING. This option is implied by use of SSL_OP_ALL, […]
Introduction This guide explains how to Detect Rootkits with rkhunter on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained […]
