🟡 Medium ⏱ 10–30 min Last verified: 22 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bash — remote code execution Related CVEs: CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187 Upstream summary: Note that this is different than the public "Shellshock" issue. Specially crafted environment variables could […]
🟡 Medium ⏱ 5–30 min Last verified: 22 July 2021 Affected versions: Ubuntu 20.04 LTS Ubuntu 20.04 Ubuntu 20.04.6 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]
🟢 Low ⏱ 5–15 min Last verified: 22 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]
Introduction This guide explains how to Back Up PostgreSQL with pg_dump on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for […]
🟡 Medium ⏱ 5–30 min Last verified: 22 July 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟢 Low ⏱ 5–15 min Last verified: 22 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SquirrelMail — Plug-ins compromise Upstream summary: Problem Description: The SquirrelMail Web Server has been compromised, and three plugins are affected. The port of squirrelmail-sasql-plugin is safe (right MD5), and change_pass […]
🟢 Low ⏱ 5–15 min Last verified: 22 July 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4338-2 Related CVEs: CVE-2020-11958 Upstream summary: USN-4338-1 fixed vulnerabilities in re2c. This update provides the corresponding update for Ubuntu 20.04 LTS. Original advisory details: Agostino Sarubbo discovered that re2c incorrectly […]
🟠 High ⏱ 15–60 min Last verified: 22 July 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-3755 Related CVEs: CVE-2021-38498 CVE-2021-32810 CVE-2021-38497 CVE-2021-38496 CVE-2021-38501 CVE-2021-38500 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
Introduction Debian 9 Stretch is built around the ethos of stability and free software. Setting up configure rate limiting in nginx on debian 9 on Stretch leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Stretch freeze. Follow each step carefully […]
🟠 High ⏱ 15–60 min Last verified: 22 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]
