🟡 Medium ⏱ 10–30 min Last verified: 1 February 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vorbistools — heap buffer overflow in oggenc Related CVEs: CVE-2008-1686 CVE-2014-9638 CVE-2014-9639 CVE-2015-6749 CVE-2023-43361 Upstream summary: Frank-Z7 reports: Heap buffer overflow when vorbis-tools/oggenc converts WAV files to Ogg files. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 30 January 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Kanboard — Multiple vulnerabilities Related CVEs: CVE-2023-32685 CVE-2023-33956 CVE-2023-33968 CVE-2023-33969 CVE-2023-33970 Upstream summary: Kanboard is project management software that focuses on the Kanban methodology. The last update includes 4 vulnerabilities: […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_gnutls — Infinite Loop on request read timeout Related CVEs: CVE-2023-25824 Upstream summary: The mod_gnutls project reports: Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions from […]
🟠 High ⏱ 15–60 min Last verified: 18 January 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: typo3 — multiple vulnerabilities Related CVEs: CVE-2022-23499 CVE-2022-23500 CVE-2022-23501 CVE-2022-23502 CVE-2022-23503 CVE-2022-23504 CVE-2022-23638 CVE-2023-37905 +2 more Upstream summary: TYPO3 reports: TYPO3-CORE-SA-2023-002: By-passing Cross-Site Scripting Protection in HTML Sanitizer TYPO3-CORE-SA-2023-003: Information […]
🟡 Medium ⏱ 10–30 min Last verified: 17 January 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: git — Multiple vulnerabilities Related CVEs: CVE-2022-39253 CVE-2022-39260 CVE-2023-25652 CVE-2023-29007 Upstream summary: git developers reports: This update includes 2 security fixes: CVE-2023-25652: By feeding specially crafted input to `git apply […]
🟢 Low ⏱ 5–15 min Last verified: 15 January 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: www/varnish-libvmod-digest — base64 decoding vulnerability Related CVEs: CVE-2023-41104 Upstream summary: varnish developers report: Common usage of vmod-digest is for basic HTTP authentication, in which case it may be possible for […]
🟡 Medium ⏱ 10–30 min Last verified: 14 January 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-tensorflow — denial of service vulnerability Related CVEs: CVE-2022-35935 CVE-2022-35941 CVE-2022-35991 Upstream summary: Kang Hong Jin, Neophytos Christou, 刘力源 and Pattarakrit Rattankul report: Another instance of CVE-2022-35935, where `SobolSample` is […]
Introduction How to Install Ruby with rbenv on FreeBSD 12 is a core administration task for any FreeBSD 12 server operator. FreeBSD 12 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet […]
🟢 Low ⏱ 5–15 min Last verified: 12 January 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-cinder — unauthorized data access Related CVEs: CVE-2014-3641 CVE-2022-47951 Upstream summary: Utkarsh Gupta reports: An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before […]
🟠 High ⏱ 15–60 min Last verified: 10 January 2023 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: element-web — several vulnerabilities Related CVEs: CVE-2021-40823 CVE-2021-40824 CVE-2022-36059 CVE-2022-36060 CVE-2022-39236 CVE-2022-39249 CVE-2022-39250 CVE-2022-39251 +8 more Upstream summary: Element team reports: Versions of Element Web and Desktop earlier than 1.11.85 […]
