HEADS UP: FreeBSD is stopping all 32-bit Hardware support except ARMv7

rbranco said:
And some are not updated and have security vulnerabilities:

Bash: 
# pkg_admin -K /usr/pkg/pkgdb fetch-pkg-vulnerabilities
# pkg_admin audit
Package perl-5.38.2 has a symlink-attack vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2011-4116
Package perl-5.38.2 has a sensitive-information-disclosure vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2023-31484
Package perl-5.38.2 has a sensitive-information-disclosure vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2023-31486
Package libxml2-2.10.4nb6 has a use-after-free vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2023-45322
Package gnutls-3.8.2 has a timing-side-channel vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2023-0553
Package pcre-8.45 has reached end-of-life (eol), see http://cdn.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages
Package libssh2-1.11.0nb2 has a integer-overflow vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2019-17498
Package gnupg2-2.4.3nb2 has a out-of-bounds-write vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2022-3219
Package wget-1.21.4nb2 has a sensitive-information-disclosure vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2021-31879
Click to expand...
That isn't fair.
FreeBSD VuXML Documenting security issues in FreeBSD and the FreeBSD Ports Collection

2009-11-03vlc -- stack overflow in MPA, AVI and ASF demuxer
2009-11-02KDE -- multiple vulnerabilities
2009-10-31opera -- multiple vulnerabilities
2009-10-28Enhanced cTorrent -- stack-based overflow
mozilla -- multiple vulnerabilities
2009-10-25elinks -- buffer overflow vulnerability
2009-10-22squidGuard -- multiple vulnerabilities
2009-10-20Xpdf -- Multiple Vulnerabilities
2009-10-16django -- denial-of-service attack
2009-10-13phpmyadmin -- XSS and SQL injection vulnerabilities
2009-10-12php5 -- Multiple security issues
2009-10-07virtualbox -- privilege escalation
2009-10-06FreeBSD -- Devfs / VFS NULL pointer race condition
FreeBSD -- kqueue pipe race conditions
2023-08-31Borg (Backup) -- flaw in cryptographic authentication scheme in Borg allowed an attacker to fake archives and indirectly cause backup data loss.
electron22 -- multiple vulnerabilities
electron24 -- multiple vulnerabilities
electron25 -- multiple vulnerabilities
FreeBSD -- bhyve privileged guest escape via fwctl
FreeBSD -- GELI silently omits the keyfile if read from stdin
FreeBSD -- Multiple vulnerabilities in Heimdal
FreeBSD -- Multiple vulnerabilities in OpenSSL
FreeBSD -- Network authentication attack via pam_krb5
FreeBSD -- Network authentication attack via pam_krb5
FreeBSD -- OpenSSH pre-authentication double free
FreeBSD -- Potential remote code execution via ssh-agent forwarding
FreeBSD -- Remote denial of service in IPv6 fragment reassembly
FreeBSD -- ssh-add does not honor per-hop destination constraints
FreeBSD -- Stack overflow in ping(8)
 
"cy@, post: 641586, member:
The backward compatibility problem is a much larger issue. Remember how badly 64 bit inodes went? This would be worse. Much worse."

Does not ring a bell. The more bits the less I care.
PD: I have the answer. Install Windows in all the desktops you have.
 
Last edited:
You must log in or register to reply here.
Back
Top