FreeBSD 14

FreeBSD 14 — p5-Net-DNS — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — p5-Net-DNS — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-Net-DNS — multiple Vulnerabilities Related CVEs: CVE-2007-3377 CVE-2007-3409 Upstream summary: A Secunia Advisory reports: An error exists in the handling of DNS queries where IDs are incremented with a fixed […]

Read more
FreeBSD 14 — py35-wagtail — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py35-wagtail — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Wagtail — potential timing attack vulnerability Related CVEs: CVE-2020-11001 CVE-2020-11037 Upstream summary: Wagtail release notes: CVE-2020-11037: Potential timing attack on password-protected private pages This release addresses a potential timing attack […]

Read more
FreeBSD 14 — silc-toolkit — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — silc-toolkit — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: silc-toolkit — Format string vulnerabilities Related CVEs: CVE-2009-3051 Upstream summary: SILC Changlog reports: An unspecified format string vulnerability exists in silc-toolkit. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
How to Set Up a Private Docker Registry on FreeBSD 14 — step-by-step FreeBSD 14 tutorial on Progressive Robot

How to Set Up a Private Docker Registry on FreeBSD 14

Introduction This guide explains how to Set Up a Private Docker Registry on FreeBSD 14 on FreeBSD 14. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum […]

Read more
FreeBSD 14 — py39-numpy — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py39-numpy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-numpy — Missing return-value validation of the function PyArray_DescrNew Related CVEs: CVE-2021-41495 Upstream summary: Numpy reports: At most call-sites for PyArray_DescrNew, there are no validations of its return, but an […]

Read more
FreeBSD 14 — fsplib — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — fsplib — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fsplib — multiple vulnerabilities Related CVEs: CVE-2007-3961 CVE-2007-3962 Upstream summary: A Secunia Advisory reports: fsplib can be exploited to compromise an application using the library. A boundary error exists in […]

Read more
FreeBSD 14 — zabbix2-server — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — zabbix2-server — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Zabbix — Remote code execution Related CVEs: CVE-2017-2824 Upstream summary: mitre reports: An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted […]

Read more
FreeBSD 14 — transmission-gtk — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — transmission-gtk — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libutp — remote denial of service or arbitrary code execution Related CVEs: CVE-2012-6129 Upstream summary: NVD reports: Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 […]

Read more
FreeBSD 14 — postgresql10-server — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — postgresql10-server — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL Server — execute arbitrary SQL code as DBA user Related CVEs: CVE-2017-15098 CVE-2017-15099 CVE-2018-1052 CVE-2018-1053 CVE-2018-1058 CVE-2018-10915 CVE-2018-10925 CVE-2018-16850  +8 more Upstream summary: The PostgreSQL project reports: Confine additional […]

Read more
FreeBSD 14 — mplayer-gtk-esound — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mplayer-gtk-esound — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 July 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mplayer — vulnerability in STR files processor Related CVEs: CVE-2004-0433 CVE-2004-1187 CVE-2004-1188 CVE-2005-1195 CVE-2006-0579 CVE-2006-1502 CVE-2006-6172 CVE-2007-1246  +8 more Upstream summary: Secunia reports: The vulnerability is caused due to a […]

Read more
CHAT