FreeBSD 12

FreeBSD 12 — FreeBSD-kernel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — FreeBSD-kernel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • December 4, 2019
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 4 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: FreeBSD — Missing validation in ptrace(PT_SC_REMOTE) Related CVEs: CVE-2004-0230 CVE-2013-3077 CVE-2013-4851 CVE-2013-5209 CVE-2014-1453 CVE-2014-3000 CVE-2014-3711 CVE-2014-3873  +12 more Upstream summary: Problem Description: ptrace(PT_SC_REMOTE) failed to properly validate parameters for the […]

Read more
FreeBSD 12 — linux-c7-graphite — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-c7-graphite — vulnerability — patch and remediation guide

  • December 3, 2019
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: graphite2 — out-of-bounds write with malicious font Related CVEs: CVE-2017-5436 Upstream summary: Mozilla Foundation reports: An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. […]

Read more
FreeBSD 12 — wget — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wget — multiple vulnerabilities (10 CVEs) — patch and remediation guide

  • December 3, 2019
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wget — security flaw in caching credentials passed as a part of the URL Related CVEs: CVE-2004-1487 CVE-2004-1488 CVE-2010-2252 CVE-2014-4877 CVE-2016-4971 CVE-2016-7098 CVE-2017-13089 CVE-2017-13090  +2 more Upstream summary: Gynvael Coldwind […]

Read more
FreeBSD 12 — lxr — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — lxr — vulnerability — patch and remediation guide

  • December 3, 2019
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: lxr — multiple XSS vulnerabilities Related CVEs: CVE-2009-4497 Upstream summary: Dan Rosenberg reports: There are several cross-site scripting vulnerabilities in LXR. These vulnerabilities could allow an attacker to execute scripts […]

Read more
FreeBSD 12 — libXtst — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libXtst — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • December 3, 2019
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: X.org libraries — multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered […]

Read more
FreeBSD 12 — asterisk — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — asterisk — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • December 3, 2019
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 3 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: asterisk – path traversal Related CVEs: CVE-2004-0097 CVE-2006-1827 CVE-2011-1507 CVE-2011-2216 CVE-2011-2529 CVE-2011-2535 CVE-2011-2536 CVE-2011-3389  +12 more Upstream summary: [email protected] reports: An issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 […]

Read more
FreeBSD 12 — ja-squirrelmail — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ja-squirrelmail — multiple vulnerabilities (7 CVEs) — patch and remediation guide

  • December 2, 2019
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 2 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: squirrelmail — random variable overwrite vulnerability Related CVEs: CVE-2004-1036 CVE-2005-0075 CVE-2005-0103 CVE-2005-0104 CVE-2005-1769 CVE-2005-2095 CVE-2006-4019 Upstream summary: The SquirrelMail developers report: A logged in user could overwrite random variables in […]

Read more
How to Harden PHP on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Harden PHP on FreeBSD 12

  • December 1, 2019
  • FreeBSD
  • Comment off

Introduction Deploying harden php on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base + […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT