FreeBSD 12

FreeBSD 12 — rubygem19-activemodel — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — rubygem19-activemodel — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ruby Activemodel Gem — Circumvention of attr_protected Related CVEs: CVE-2013-0276 Upstream summary: Aaron Patterson reports: The attr_protected method allows developers to specify a blacklist of model attributes which users should […]

Read more
FreeBSD 12 — opera — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — opera — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: opera — moderately severe issue Related CVEs: CVE-2004-0411 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-1156 CVE-2004-1157 CVE-2004-1158 CVE-2004-1160  +12 more Upstream summary: Opera reports: Fixed a moderately severe issue, as reported by Attila […]

Read more
FreeBSD 12 — py37-cairosvg — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py37-cairosvg — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: CairoSVG — Regular Expression Denial of Service vulnerability Upstream summary: CairoSVG security advisories: When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular […]

Read more
FreeBSD 12 — pear-twig-twig — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — pear-twig-twig — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pear-twig — remote code execution Related CVEs: CVE-2015-7809 Upstream summary: Fabien Potencier reports: End users can craft valid Twig code that allows them to execute arbitrary code (RCEs) via the […]

Read more
How to Install and Configure Varnish Cache on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Install and Configure Varnish Cache on FreeBSD 12

Introduction This guide explains how to Install and Configure Varnish Cache on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for […]

Read more
FreeBSD 12 — mod_dosevasive — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mod_dosevasive — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_dosevasive — insecure temporary file creation Upstream summary: An LSS Security Advisory reports: When a denial of service attack is detected, mod_dosevasive will, among other things, create a temporary file […]

Read more
FreeBSD 12 — mnemo — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mnemo — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mnemo — Cross site scripting vulnerabilities in several of the notepad name and note data fields Upstream summary: Announce of Mnemo H3 (2.0.3) (final): This [2.0.3] is a security release […]

Read more
FreeBSD 12 — wpa_supplicant — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wpa_supplicant — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: FreeBSD — EAP-pwd message reassembly issue with unexpected fragment Related CVEs: CVE-2015-1863 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 CVE-2015-5310  +12 more Upstream summary: Problem Description: EAP-pwd implementation in hostapd (EAP […]

Read more
How to Build Grafana Dashboards for FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Build Grafana Dashboards for FreeBSD 12

Introduction This guide explains how to Build Grafana Dashboards for FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege […]

Read more
FreeBSD 12 — de-linux-mozillafirebird — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — de-linux-mozillafirebird — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

Read more
CHAT