Introduction How to Install FreeBSD 13 on a Server is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet filtering, […]
🟡 Medium ⏱ 10–30 min Last verified: 27 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: serendipity — XSS Related CVEs: CVE-2008-1385 CVE-2008-1386 CVE-2019-11870 Upstream summary: MITRE: Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/media_choose.tpl Editor Preview feature or the […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pureftpd — multiple vulnerabilities Related CVEs: CVE-2011-0418 CVE-2011-1575 Upstream summary: Pure-FTPd development team reports: Support for braces expansion in directory listings has been disabled — Cf. CVE-2011-0418. Fix a STARTTLS […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libutp — remote denial of service or arbitrary code execution Related CVEs: CVE-2012-6129 Upstream summary: NVD reports: Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Vinyl/Varnish — HTTP/2 parsing deficiency Upstream summary: Vinyl Development Team reports: A deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync attack (request smuggling), which […]
🟠 High ⏱ 15–60 min Last verified: 27 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Matrix clients — mxc uri validation in js sdk Related CVEs: CVE-2021-40823 CVE-2021-40824 CVE-2022-36059 CVE-2022-36060 CVE-2022-39236 CVE-2022-39249 CVE-2022-39250 CVE-2022-39251 +3 more Upstream summary: matrix-js-sdk upstream reports: matrix-js-sdk before 34.11.0 is […]
🟠 High ⏱ 15–60 min Last verified: 27 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — multiple vulnerabilities Related CVEs: CVE-2009-2347 CVE-2015-8665 CVE-2015-8683 CVE-2016-5314 CVE-2016-5320 CVE-2016-5875 CVE-2017-5225 CVE-2017-7592 +10 more Upstream summary: NVD reports: Please reference CVE/URL list for details Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 27 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache OpenOffice — master password vulnerabilities Related CVEs: CVE-2014-3575 CVE-2015-1774 CVE-2015-4551 CVE-2015-5212 CVE-2015-5213 CVE-2015-5214 CVE-2016-1513 CVE-2017-12607 +11 more Upstream summary: The Apache Openoffice project reports: Apache OpenOffice supports the storage […]
🟢 Low ⏱ 5–15 min Last verified: 27 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: grip — CDDB response multiple matches buffer overflow vulnerability Related CVEs: CVE-2005-0706 Upstream summary: Joseph VanAndel reports that grip is vulnerability to a buffer overflow vulnerability when receiving more than […]
Introduction How to Configure GlusterFS on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet filtering, and […]
