FreeBSD 14

FreeBSD 14 — rubygem19-rack — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — rubygem19-rack — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ruby Rack Gem — Multiple Issues Related CVEs: CVE-2013-0262 CVE-2013-0263 Upstream summary: Rack developers report: Today we are proud to announce the release of Rack 1.4.5. Fix CVE-2013-0263, timing attack […]

Read more
FreeBSD 14 — ossec-hids-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ossec-hids-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: security/ossec-hids-* — root escalation via syscheck feature Related CVEs: CVE-2014-5284 CVE-2015-3222 Upstream summary: OSSEC reports: The CVE-2015-3222 vulnerability, which allows for root escalation via sys check has been fixed in […]

Read more
FreeBSD 14 — ghostscript8-nox — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ghostscript8-nox — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2008-6679 CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and […]

Read more
FreeBSD 14 — Unreal — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — Unreal — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unreal — denial of service Upstream summary: Unreal reports: Summary: If SASL support is enabled in UnrealIRCd (this is not the default) and is also enabled in your services package […]

Read more
FreeBSD 14 — xwayland — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — xwayland — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xwayland — Multiple vulnerabilities Related CVEs: CVE-2017-12176 CVE-2017-12177 CVE-2017-12178 CVE-2017-12179 CVE-2017-12180 CVE-2017-12181 CVE-2017-12182 CVE-2017-12183  +12 more Upstream summary: X.Org project reports: Multiple issues have been found in the X server […]

Read more
How to Set Up Two-Factor Authentication for SSH on FreeBSD 14 — step-by-step FreeBSD 14 tutorial on Progressive Robot

How to Set Up Two-Factor Authentication for SSH on FreeBSD 14

Introduction Deploying set up two-factor authentication for ssh on freebsd 14 on a FreeBSD 14 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within […]

Read more
FreeBSD 14 — rclone — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — rclone — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rclone — Multiple vulnerabilities Related CVEs: CVE-2023-45286 CVE-2023-48795 Upstream summary: Multiple vulnerabilities in ssh and golang CVE-2023-45286: HTTP request body disclosure in go-resty disclosure across requests. CVE-2023-48795: The SSH transport […]

Read more
FreeBSD 14 — py36-aiohttp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py36-aiohttp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: aiohttp — open redirect vulnerability Related CVEs: CVE-2021-21330 Upstream summary: Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to […]

Read more
How to Deploy a Flask App with Gunicorn on FreeBSD 14 — step-by-step FreeBSD 14 tutorial on Progressive Robot

How to Deploy a Flask App with Gunicorn on FreeBSD 14

Introduction How to Deploy a Flask App with Gunicorn on FreeBSD 14 is a core administration task for any FreeBSD 14 server operator. FreeBSD 14 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf […]

Read more
FreeBSD 14 — kdepim — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — kdepim — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 October 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kdepim exploitable buffer overflow in VCF reader Related CVEs: CVE-2003-0988 Upstream summary: A buffer overflow is present in some versions of the KDE personal information manager (kdepim) which may be […]

Read more
CHAT