FreeBSD 13

FreeBSD 13 — libmad — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libmad — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 17 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libmad — multiple vulnerabilities Related CVEs: CVE-2017-8372 CVE-2017-8373 CVE-2017-8374 Upstream summary: National Vulnerability Database: CVE-2017-8372: The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows […]

Read more
FreeBSD 13 — apache13-modssl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — apache13-modssl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — heap overflow in mod_proxy Related CVEs: CVE-2004-0492 Upstream summary: A buffer overflow exists in mod_proxy which may allow an attacker to launch local DoS attacks and possibly execute […]

Read more
How to Set Up a CI/CD Pipeline with Drone CI on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Set Up a CI/CD Pipeline with Drone CI on FreeBSD 13

Introduction How to Set Up a CI/CD Pipeline with Drone CI on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service […]

Read more
FreeBSD 13 — py310-pyrad — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py310-pyrad — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pyrad — multiple vulnerabilities Related CVEs: CVE-2013-0294 CVE-2013-0342 Upstream summary: Nathaniel McCallum reports: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which […]

Read more
FreeBSD 13 — firebird21-server — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — firebird21-server — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firebird — Remote Stack Buffer Overflow Related CVEs: CVE-2013-2492 Upstream summary: Firebird Project reports: The FirebirdSQL server is vulnerable to a stack buffer overflow that can be triggered when an […]

Read more
How to Install MariaDB on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Install MariaDB on FreeBSD 13

Introduction This guide explains how to Install MariaDB on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege separation. […]

Read more
FreeBSD 13 — kdewebdev — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — kdewebdev — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kdewebdev — kommander untrusted code execution vulnerability Related CVEs: CVE-2005-0754 Upstream summary: A KDE Security Advisory reports: Kommander executes without user confirmation data files from possibly untrusted locations. As they […]

Read more
FreeBSD 13 — hdf — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — hdf — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: hdf5 — multiple vulnerabilities Related CVEs: CVE-2016-4330 CVE-2016-4331 CVE-2016-4332 CVE-2016-4333 Upstream summary: Talos Security reports: CVE-2016-4330 (TALOS-2016-0176) – HDF5 Group libhdf5 H5T_ARRAY Code Execution Vulnerability CVE-2016-4331 (TALOS-2016-0177) – HDF5 Group […]

Read more
FreeBSD 13 — py36-cryptography — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py36-cryptography — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-cryptography — tag forgery vulnerability Related CVEs: CVE-2018-10903 Upstream summary: The Python Cryptographic Authority (PyCA) project reports: finalize_with_tag() allowed tag truncation by default which can allow tag forgery in some […]

Read more
FreeBSD 13 — kio-extras — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — kio-extras — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kio-extras — HTML Thumbnailer automatic remote file access Related CVEs: CVE-2018-19120 Upstream summary: Albert Astals Cid reports: Various KDE applications share a plugin system to create thumbnails of various file […]

Read more
CHAT