FreeBSD 12

FreeBSD 12 — phpmyadmin — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — phpmyadmin — multiple vulnerabilities (20 CVEs) — patch and remediation guide (PATCH-REMEDIATION-2)

🟠 High   ⏱ 15–60 min  Last verified: 16 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: phpmyadmin — multiple vulnerabilities Related CVEs: CVE-2005-0543 CVE-2005-0544 CVE-2005-0567 CVE-2005-0653 CVE-2005-0992 CVE-2007-6100 CVE-2016-1927 CVE-2016-2038  +12 more Upstream summary: the phpmyadmin team reports: This security fix is part of an ongoing […]

Read more
FreeBSD 12 — node — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — node — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: NodeJS — Vulnerabilities Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 CVE-2015-0278 CVE-2015-5380 CVE-2016-0702 CVE-2016-0705  +12 more Upstream summary: Node.js reports: Code injection and privilege escalation through Linux capabilities- (High) http: Reading […]

Read more
FreeBSD 12 — krb5-appl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — krb5-appl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: krb5-appl — telnetd code execution vulnerability Related CVEs: CVE-2011-4862 Upstream summary: The MIT Kerberos Team reports: When an encryption key is supplied via the TELNET protocol, its length is not […]

Read more
FreeBSD 12 — sharutils — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — sharutils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sharutils — unshar insecure temporary file creation Related CVEs: CVE-2005-0990 Upstream summary: An Ubuntu Advisory reports: Joey Hess discovered that "unshar" created temporary files in an insecure manner. This could […]

Read more
FreeBSD 12 — py32-pycrypto — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py32-pycrypto — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pycrypto — PRNG reseed race condition Related CVEs: CVE-2013-1445 Upstream summary: Dwayne Litzenberger reports: In PyCrypto before v2.6.1, the Crypto.Random pseudo-random number generator (PRNG) exhibits a race condition that may […]

Read more
FreeBSD 12 — apache22-event-mpm — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — apache22-event-mpm — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache22 — chunk header parsing defect Related CVEs: CVE-2012-0833 CVE-2012-2687 CVE-2012-3499 CVE-2012-4558 CVE-2013-1862 CVE-2013-1896 CVE-2013-5704 CVE-2013-6438  +5 more Upstream summary: Apache Foundation reports: CVE-2015-3183 core: Fix chunk header parsing defect. […]

Read more
FreeBSD 12 — nettle — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — nettle — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nettle 3.7.2 — fix serious ECDSA signature verify bug Upstream summary: Niels Möller reports: I've prepared a new bug-fix release of Nettle, a low-level cryptographics library, to fix a serious […]

Read more
How to Configure PHP-FPM with Nginx on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Configure PHP-FPM with Nginx on FreeBSD 12

Introduction How to Configure PHP-FPM with Nginx on FreeBSD 12 is a core administration task for any FreeBSD 12 server operator. FreeBSD 12 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet […]

Read more
FreeBSD 12 — bftpd — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — bftpd — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bftpd — Multiple vulnerabilities Upstream summary: Bftpd project reports: Bftpd is vulnerable to out of bounds memory access, file descriptor leak and a potential buffer overflow. Table of contents Symptom […]

Read more
FreeBSD 12 — oops — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — oops — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 November 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: oops — format string vulnerability Related CVEs: CVE-2005-1121 Upstream summary: A RST/GHC Advisory reports that there is an format string vulnerability in oops. The vulnerability can be found in the […]

Read more
CHAT