🟢 Low ⏱ 5–15 min Last verified: 22 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sendmail — race condition vulnerability Related CVEs: CVE-2006-0058 Upstream summary: Problem Description A race condition has been reported to exist in the handling by sendmail of asynchronous signals. Impact A […]
🟠 High ⏱ 15–60 min Last verified: 22 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2020-2752 CVE-2020-2875 CVE-2020-2922 CVE-2020-2933 CVE-2020-2934 CVE-2021-22570 CVE-2021-22926 CVE-2021-22931 +12 more Upstream summary: Oracle reports: See linked CVE's for details. Table of contents Symptom & […]
Introduction How to Configure the pkg Package Manager on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: radicale — multiple vulnerabilities Related CVEs: CVE-2015-8747 CVE-2015-8748 Upstream summary: Radicale reports: The multifilesystem backend allows access to arbitrary files on all platforms. Prevent regex injection in rights management. Table […]
🟠 High ⏱ 15–60 min Last verified: 21 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ghostscript — Security bypass vulnerabilities Related CVEs: CVE-2015-3228 CVE-2018-15908 CVE-2018-15909 CVE-2018-15910 CVE-2018-15911 CVE-2019-14811 CVE-2019-14812 CVE-2019-14813 +3 more Upstream summary: Cedric Buissart (Red Hat) reports: A flaw was found in, ghostscript […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-graphite-web — Multiple vulnerabilities Related CVEs: CVE-2013-5093 Upstream summary: Graphite developers report: This release contains several security fixes for cross-site scripting (XSS) as well as a fix for a remote-execution […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
Introduction This guide explains how to Use Capsicum Sandboxing on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kdelibs — integer overflow in khtml Related CVEs: CVE-2006-4811 Upstream summary: Red Hat reports: An integer overflow flaw was found in the way Qt handled pixmap images. The KDE khtml […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ppxp — local root exploit Related CVEs: CVE-2005-0392 Upstream summary: A Debian Advisory reports: Jens Steube discovered that ppxp, yet another PPP program, does not release root privileges when opening […]
