How To Install Java on FreeBSD 10.1
Java is a popular software platform that allows you to run Java applications and applets.
FreeBSD 12 — e2fsprogs-nobootfsck — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 21 November 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: e2fsprogs — out-of-bounds read/write vulnerability Related CVEs: CVE-2022-1304 Upstream summary: Nils Bars reports: During the processing of [a specially fuzzed disk image], an out-of-bounds write is triggered and causes a […]
FreeBSD 12 — py37-tensorflow — multiple vulnerabilities (3 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 19 November 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-tensorflow — denial of service vulnerability Related CVEs: CVE-2022-35935 CVE-2022-35941 CVE-2022-35991 Upstream summary: Kang Hong Jin, Neophytos Christou, 刘力源 and Pattarakrit Rattankul report: Another instance of CVE-2022-35935, where `SobolSample` is […]
How To Track Network Latency with SmokePing on FreeBSD 11
SmokePing is a network latency tracking tool. Tracking your server’s network latency can give you a useful picture of the overall health and availability of your server. This tutorial will show you how to install and configure SmokePing with Apache on FreeBSD.
FreeBSD 13 — prometheus — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 16 November 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: prometheus2 — basic authentication bypass Related CVEs: CVE-2021-29622 CVE-2022-46146 Upstream summary: Prometheus team reports: Prometheus and its exporters can be secured by a web.yml file that specifies usernames and hashed […]
FreeBSD 12 — py39-py — vulnerability — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 15 November 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py39-py — Regular expression Denial of Service vulnerability Related CVEs: CVE-2022-42969 Upstream summary: SCH227 reports: The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular […]
FreeBSD 12 — eternalterminal — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 13 November 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: net/eternalterminal — Multiple vulnerabilities Related CVEs: CVE-2022-48257 CVE-2022-48258 Upstream summary: Mitre reports: etserver and etclient have predictable logfile names in /tmp and they are world-readable logfiles Table of contents Symptom […]
FreeBSD 12 — py310-tflite — multiple vulnerabilities (2 CVEs) — patch and remediation guide
🟢 Low ⏱ 5–15 min Last verified: 12 November 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-tflite — buffer overflow vulnerability Related CVEs: CVE-2021-37689 CVE-2022-41894 Upstream summary: Thibaut Goetghebuer-Planchon reports: The reference kernel of the CONV_3D_TRANSPOSE TensorFlow Lite operator wrongly increments the data_ptr when adding the […]
FreeBSD 12 — advancecomp — multiple vulnerabilities (11 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 11 November 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: advancecomp — Multiple vulnerabilities Related CVEs: CVE-2018-1056 CVE-2019-8379 CVE-2019-8383 CVE-2019-9210 CVE-2022-35014 CVE-2022-35015 CVE-2022-35016 CVE-2022-35017 +3 more Upstream summary: GitHub advisories reports: Multiple vulnerabilities found in advancecomp including: Three segmentation faults. […]
FreeBSD 12 — py37-matrix-synapse — multiple vulnerabilities (8 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 6 November 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — unbounded recursion in urlpreview Related CVEs: CVE-2019-5885 CVE-2020-26257 CVE-2020-26891 CVE-2021-29471 CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 Upstream summary: Matrix developers report: This release fixes a vulnerability with Synapse's URL preview […]