FreeBSD 14

FreeBSD 14 — py39-redis — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py39-redis — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py39-redis — can send response data to the client of an unrelated request Related CVEs: CVE-2023-28858 CVE-2023-28859 Upstream summary: drago-balto reports: redis-py through 4.5.3 and 4.4.3 leaves a connection open […]

Read more
FreeBSD 14 — py311-cryptography — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py311-cryptography — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-cryptography — includes a vulnerable copy of OpenSSL Related CVEs: CVE-2023-0286 CVE-2023-23931 Upstream summary: pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography […]

Read more
FreeBSD 14 — py39-wagtail — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py39-wagtail — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-wagtail — stored XSS vulnerability Related CVEs: CVE-2023-28836 CVE-2023-28837 Upstream summary: A stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A user with a […]

Read more
FreeBSD 14 — pt-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — pt-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

Read more
How to Use Prometheus Blackbox Exporter on FreeBSD 14 — step-by-step FreeBSD 14 tutorial on Progressive Robot

How to Use Prometheus Blackbox Exporter on FreeBSD 14

Introduction How to Use Prometheus Blackbox Exporter on FreeBSD 14 is a core administration task for any FreeBSD 14 server operator. FreeBSD 14 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet […]

Read more
How to Set Up OpenTelemetry Collector on FreeBSD 14 — step-by-step FreeBSD 14 tutorial on Progressive Robot

How to Set Up OpenTelemetry Collector on FreeBSD 14

Introduction How to Set Up OpenTelemetry Collector on FreeBSD 14 is a core administration task for any FreeBSD 14 server operator. FreeBSD 14 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet […]

Read more
How to Use Docker Volumes on FreeBSD 14 — step-by-step FreeBSD 14 tutorial on Progressive Robot

How to Use Docker Volumes on FreeBSD 14

Introduction Deploying use docker volumes on freebsd 14 on a FreeBSD 14 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard base […]

Read more
FreeBSD 14 — tk-threads — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — tk-threads — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tcl/tk — buffer overflow in ReadImage function Related CVEs: CVE-2007-5137 Upstream summary: A Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl/Tk, allows remote attackers to execute arbitrary code […]

Read more
FreeBSD 14 — linux-c6-icu — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — linux-c6-icu — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: icu — multiple vulnerabilities Related CVEs: CVE-2017-7867 CVE-2017-7868 Upstream summary: NVD reports: International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer […]

Read more
FreeBSD 14 — age — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — age — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: age — age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution Upstream summary: Filippo Valsorda reports: A plugin name containing a path separator may allow an […]

Read more
CHAT