FreeBSD is a free and open-source operating system that is ideal for server deployments. In this guide we will discuss some of the important differences between FreeBSD and Linux. Understanding these differences can help make the transition to FreeBSD for Linux users less of a struggle.
🟢 Low ⏱ 5–15 min Last verified: 12 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fail2ban — possible RCE vulnerability in mailing action using mailutils Related CVEs: CVE-2021-32749 Upstream summary: Jakub Żoczek reports: Command mail from mailutils package used in mail actions like mail-whois can […]
🟢 Low ⏱ 5–15 min Last verified: 8 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: aiohttp — open redirect vulnerability Related CVEs: CVE-2021-21330 Upstream summary: Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to […]
🟢 Low ⏱ 5–15 min Last verified: 6 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-yaml — FullLoader (still) exploitable for arbitrary command execution Related CVEs: CVE-2017-18342 CVE-2020-1747 Upstream summary: Riccardo Schirone (https://github.com/ret2libc) reports: In FullLoader python/object/new constructor, implemented by construct_python_object_apply, has support for setting […]
🟢 Low ⏱ 5–15 min Last verified: 5 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: syncthing — crash due to malformed relay protocol message Related CVEs: CVE-2021-21404 Upstream summary: syncthing developers report: syncthing can be caused to crash and exit if sent a malformed relay […]
Poudriere is the standard tool on FreeBSD to build, test, and audit packages as well as maintain the package repositories. In this tutorial you’ll configure Poudriere, build a set of desired packages, set up HTTP-base package hosting, and automate the build using Buildbot as a continuous integration platform. Next, you will access the packages from a client machine. Finally, if you want to integrate your own software builds with this process, you’ll step through building an example application.
🟢 Low ⏱ 5–15 min Last verified: 4 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-yaml — FullLoader (still) exploitable for arbitrary command execution Related CVEs: CVE-2017-18342 CVE-2020-1747 Upstream summary: Riccardo Schirone (https://github.com/ret2libc) reports: In FullLoader python/object/new constructor, implemented by construct_python_object_apply, has support for setting […]
🟠 High ⏱ 15–60 min Last verified: 3 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2020-2752 CVE-2020-2875 CVE-2020-2922 CVE-2020-2933 CVE-2020-2934 CVE-2021-22570 CVE-2021-22926 CVE-2021-22931 +12 more Upstream summary: Oracle reports: See linked CVE's for details. Table of contents Symptom & […]
Learn to use the cloud provider’s Block Storage to create encrypted volumes on your FreeBSD servers.
🟢 Low ⏱ 5–15 min Last verified: 1 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-numpy — Missing return-value validation of the function PyArray_DescrNew Related CVEs: CVE-2021-41495 Upstream summary: Numpy reports: At most call-sites for PyArray_DescrNew, there are no validations of its return, but an […]
