🟢 Low ⏱ 5–15 min Last verified: 7 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-libwww — possibility to remote servers to create file with a .(dot) character Related CVEs: CVE-2010-2253 Upstream summary: lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that […]
Introduction FreeBSD 13 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up configure nginx websocket proxying on freebsd 13 on FreeBSD 13 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux […]
🟡 Medium ⏱ 10–30 min Last verified: 6 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: qpopper — multiple privilege escalation vulnerabilities Related CVEs: CVE-2000-0442 CVE-2005-1151 CVE-2005-1152 Upstream summary: Jens Steube reports that qpopper is vulnerable to a privilege escalation vulnerability. qpopper does not properly drop […]
🟡 Medium ⏱ 10–30 min Last verified: 5 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nss — Use-after-free in TLS 1.2 generating handshake hashes Related CVEs: CVE-2016-2834 CVE-2017-5461 CVE-2017-5462 CVE-2017-7805 Upstream summary: Mozilla reports: During TLS 1.2 exchanges, handshake hashes are generated which point to […]
🟢 Low ⏱ 5–15 min Last verified: 5 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache Maven — multiple vulnerabilities Related CVEs: CVE-2020-13956 CVE-2021-26291 Upstream summary: The Apache Maven project reports: We received a report from Jonathan Leitschuh about a vulnerability of custom repositories in […]
🟢 Low ⏱ 5–15 min Last verified: 5 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache — Insecure LD_LIBRARY_PATH handling Related CVEs: CVE-2011-3192 CVE-2012-0883 Upstream summary: Apache reports: Insecure handling of LD_LIBRARY_PATH was found that could lead to the current working directory to be searched […]
🟢 Low ⏱ 5–15 min Last verified: 5 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ruby — Denial of Service and Unsafe Object Creation Vulnerability in JSON Related CVEs: CVE-2013-0269 Upstream summary: Aaron Patterson reports: When parsing certain JSON documents, the JSON gem can be […]
🟠 High ⏱ 15–60 min Last verified: 5 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2005-0596 CVE-2006-4481 CVE-2006-4482 CVE-2006-4483 +12 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]
Introduction FreeBSD 13 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up configure nginx as a tcp/udp load balancer on freebsd 13 on FreeBSD 13 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently […]
🟠 High ⏱ 15–60 min Last verified: 5 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ffmpeg — remote denial of service in JPEG2000 decoder Related CVEs: CVE-2014-4610 CVE-2015-3395 CVE-2015-6761 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822 +12 more Upstream summary: FFmpeg security reports: FFmpeg 2.8.6 fixes the […]
