Systemd Services

FreeBSD 13 — ja-wordpress-ja — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — ja-wordpress-ja — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wordpress — XSS Upstream summary: The WordPress team reports: A cross-site scripting (XSS) vulnerability affecting the Avatar block type Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 13 — php4-dtc — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — php4-dtc — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2005-0596 CVE-2006-4481 CVE-2006-4482 CVE-2006-4483  +12 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]

Read more
How to Configure SSH Hardening on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Configure SSH Hardening on FreeBSD 13

Introduction This guide explains how to Configure SSH Hardening on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained privilege […]

Read more
Debian 11 — libmaxminddb — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libmaxminddb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-28241 Upstream summary: libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

Read more
Debian 11 — kde-cli-tools — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — kde-cli-tools — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-7787 Upstream summary: A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super […]

Read more
Oracle Linux 8 — libgcrypt — security and stability fixes — required update — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — libgcrypt — security and stability fixes — required update (ELSA-2021-4409)

🟡 Medium   ⏱ 10–30 min  Last verified: 23 October 2021 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-4409 Related CVEs: CVE-2021-33560 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
FreeBSD 13 — dpkg — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — dpkg — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dpkg — stack-based buffer overflow Related CVEs: CVE-2015-0860 Upstream summary: Salvatore Bonaccorso reports: Hanno Boeck discovered a stack-based buffer overflow in the dpkg-deb component of dpkg, the Debian package management […]

Read more
Debian 11 — virtualbox-guest-additions-iso — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — virtualbox-guest-additions-iso — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 October 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-2300 CVE-2012-0105 CVE-2014-0405 CVE-2014-2441 CVE-2014-6540 CVE-2018-2693 Upstream summary: Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local users to affect confidentiality, integrity, […]

Read more
FreeBSD 13 — isc-dhcpd — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — isc-dhcpd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 October 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcpd — format string vulnerabilities Related CVEs: CVE-2004-1006 Upstream summary: The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary […]

Read more
How to Set Up iocage Jail Storage on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Set Up iocage Jail Storage on FreeBSD 13

Introduction How to Set Up iocage Jail Storage on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for […]

Read more
CHAT