FreeBSD 12

FreeBSD 12 — mutt-devel-lite — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mutt-devel-lite — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mutt — Remote Buffer Overflow Vulnerability Upstream summary: SecurityFocus reports: Mutt is prone to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied […]

Read more
FreeBSD 12 — opus-tools — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — opus-tools — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vorbis-tools, opus-tools — multiple vulnerabilities Related CVEs: CVE-2014-9638 CVE-2014-9639 CVE-2015-6749 Upstream summary: Paris Zoumpouloglou reports: I discovered an integer overflow issue in oggenc, related to the number of channels in […]

Read more
FreeBSD 12 — scponly — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — scponly — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: scponly — local privilege escalation exploits Upstream summary: Max Vozeler reports: If ALL the following conditions are true, administrators using scponly-4.1 or older may be at risk of a local […]

Read more
How to Set Up a Git Server with Gitea on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Set Up a Git Server with Gitea on FreeBSD 12

Introduction How to Set Up a Git Server with Gitea on FreeBSD 12 is a core administration task for any FreeBSD 12 server operator. FreeBSD 12 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, […]

Read more
FreeBSD 12 — gd — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — gd — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libgd — integer overflow which could lead to heap buffer overflow Related CVEs: CVE-2004-0990 CVE-2007-3472 CVE-2007-3473 CVE-2007-3474 CVE-2007-3475 CVE-2007-3476 CVE-2007-3477 CVE-2007-3478  +5 more Upstream summary: LibGD reports: An integer overflow […]

Read more
FreeBSD 12 — cyrus-imspd — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — cyrus-imspd — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Cyrus IMSPd multiple vulnerabilities Upstream summary: The Cyrus team reported multiple vulnerabilities in older versions of Cyrus IMSPd: These releases correct a recently discovered buffer overflow vulnerability, as well as […]

Read more
FreeBSD 12 — syslog-ng — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — syslog-ng — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: syslog-ng2 — startup directory leakage in the chroot environment Related CVEs: CVE-2008-5110 Upstream summary: Florian Grandel reports: I have not had the time to analyze all of syslog-ng code. But […]

Read more
FreeBSD 12 — nagios-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — nagios-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nagios — Command Injection Vulnerability Related CVEs: CVE-2007-5803 CVE-2009-2288 Upstream summary: Secunia reports: A vulnerability has been reported in Nagios, which can be exploited by malicious users to potentially compromise […]

Read more
FreeBSD 12 — tor — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — tor — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: security/tor — SOCKS4(a) inversion bug Related CVEs: CVE-2005-2643 CVE-2006-0414 CVE-2009-0414 CVE-2009-0936 CVE-2009-0937 CVE-2009-0938 CVE-2010-1676 CVE-2011-0427  +3 more Upstream summary: The Tor Project reports: TROVE-2022-002: The SafeSocks option for SOCKS4(a) is […]

Read more
FreeBSD 12 — plans — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — plans — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: plans — multiple vulnerabilities Upstream summary: Secunia reports: A vulnerability has been reported in Plans, which can be exploited by malicious people to conduct SQL injection attacks. Input passed to […]

Read more
CHAT