FreeBSD 12

FreeBSD 12 — handbrake — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — handbrake — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2015-3395 CVE-2015-3417 CVE-2015-6761 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822  +12 more Upstream summary: NVD reports: An issue was discovered in the FFmpeg package, where vp3_decode_frame […]

Read more
FreeBSD 12 — tethereal — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — tethereal — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wireshark — PCNFSD Dissector Denial of Service Vulnerability Related CVEs: CVE-2004-0176 CVE-2004-0365 CVE-2004-0367 CVE-2004-0504 CVE-2004-0505 CVE-2004-0506 CVE-2004-0507 CVE-2004-0633  +12 more Upstream summary: Secunia reports: A vulnerability has been reported in […]

Read more
FreeBSD 12 — linux-f10-pango — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-f10-pango — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pango — integer overflow Related CVEs: CVE-2009-1194 Upstream summary: oCERT reports: Pango suffers from a multiplicative integer overflow which may lead to a potentially exploitable, heap overflow depending on the […]

Read more
How to Configure PostgreSQL Remote Access on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Configure PostgreSQL Remote Access on FreeBSD 12

Introduction How to Configure PostgreSQL Remote Access on FreeBSD 12 is a core administration task for any FreeBSD 12 server operator. FreeBSD 12 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet […]

Read more
FreeBSD 12 — npm — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — npm — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: NPM — Multiple vulnerabilities Related CVEs: CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 Upstream summary: NPM reports: Global node_modules Binary Overwrite Symlink reference outside of node_modules Arbitrary File Write Table of contents Symptom & […]

Read more
FreeBSD 12 — kde-workspace — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — kde-workspace — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kde-workspace — privilege escalation Related CVEs: CVE-2014-8651 Upstream summary: David Edmundson reports: KDE workspace configuration module for setting the date and time has a helper program which runs as root […]

Read more
FreeBSD 12 — heartbeat — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — heartbeat — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: heartbeat — insecure temporary file creation vulnerability Related CVEs: CAN-2005-2231 Upstream summary: Eric Romang reports a temporary file creation vulnerability within heartbeat. The vulnerability is caused by hardcoded temporary file […]

Read more
FreeBSD 12 — apache-openoffice — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — apache-openoffice — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache OpenOffice — master password vulnerabilities Related CVEs: CVE-2014-3575 CVE-2015-1774 CVE-2015-4551 CVE-2015-5212 CVE-2015-5213 CVE-2015-5214 CVE-2016-1513 CVE-2017-12607  +11 more Upstream summary: The Apache Openoffice project reports: Apache OpenOffice supports the storage […]

Read more
FreeBSD 12 — linux-c7-openssl-libs — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — linux-c7-openssl-libs — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenSSL — multiple vulnerabilities Related CVEs: CVE-2016-7055 CVE-2016-8610 CVE-2017-3730 CVE-2017-3731 CVE-2017-3732 Upstream summary: The OpenSSL project reports: Truncated packet could crash via OOB read (CVE-2017-3731) Bad (EC)DHE parameters cause a […]

Read more
CHAT