BSD Link Roundup 5.5

Here’s the month of May roundup of BSD related links ranging from various distros, benchmarks, security notices, themes, and more. Stay safe and stay BSD!

It’s Official But Sad: TrueOS Is Over As Once The Best Desktop BSD OS via Phoronix

Intel Core i9 10980XE: FreeBSD 12.1 vs. GhostBSD 12.02 vs. DragonFlyBSD vs. Ubuntu Linux Benchmarks via Phoronix

Mesa’s DRM Library Now Has Proper FreeBSD Support Upstream via Phoronix

FreeBSD On Laptops Is Still A Big Challenge But The Slimbook Could Soon Be Running Well via Phoronix

FreeBSD : Gitlab — Multiple Vulnerabilities (08fba28b-6f9f-11ea-bd0b-001b217b3468) via Tenable

FreeBSD : phpMyAdmin — SQL injection (97fcc60a-6ec0-11ea-a84a-4c72b94353b5) via Tenable

FreeBSD : zeek — Remote crash vulnerability (f59c4c53-c55f-43fe-9920-82b9d1ea9c3d) via Tenable

FreeBSD : chromium — multiple vulnerabilities (6e3b700a-7ca3-11ea-b594-3065ec8fd3ec) via Tenable

FreeBSD : chromium — multiple vulnerabilities (9cb57a06-7517-11ea-b594-3065ec8fd3ec) via Tenable

FreeBSD : Apache — Multiple vulnerabilities (b360b120-74b1-11ea-a84a-4c72b94353b5) via Tenable

FreeBSD : GnuTLS — flaw in DTLS protocol implementation (d887b3d9-7366-11ea-b81a-001cc0382b2f) via Tenable

FreeBSD : openvpn — illegal client float can break VPN session for other users (8604121c-7fc2-11ea-bcac-7781e90b0c8f) via Tenable

FreeBSD : chromium — use after free (25efe05c-7ffc-11ea-b594-3065ec8fd3ec) via Tenable

FreeBSD : Mbed TLS — Side channel attack on ECDSA (bf1f47c4-7f1b-11ea-bf94-001cc0382b2f) via Tenable

FreeBSD : OpenSSL remote denial of service vulnerability (012809ce-83f3-11ea-92ab-00163e433440) via Tenable

FreeBSD : ansible – subversion password leak from PID (67dbeeb6-80f4-11ea-bafd-815569f3852d) via Tenable

FreeBSD : MySQL Server — Multiple vulerabilities (21d59ea3-8559-11ea-a5e2-d4c9ef517024) via Tenable

FreeBSD : Python — Regular Expression DoS attack against client (a27b0bb6-84fc-11ea-b5b4-641c67a117d8) via Tenable

FreeBSD : vlc — Multiple vulnerabilities fixed in VLC media player (4a10902f-8a48-11ea-8668-e0d55e2a8bf9) via Tenable

FreeBSD : samba — multiple vulnerabilities (3c7911c9-8a29-11ea-8d8c-005056a311d1) via Tenable

FreeBSD : nested filters leads to stack overflow (c7617931-8985-11ea-93ef-b42e99a1b9c3) via Tenable

FreeBSD : py-bleach — regular expression denial-of-service (4c52ec3c-86f3-11ea-b5b4-641c67a117d8) via Tenable

FreeBSD : py-yaml — FullLoader (still) exploitable for arbitrary command execution (aae8fecf-888e-11ea-9714-08002718de91) via Tenable

Vigil@nce – FreeBSD: denial of service via pfctl via Global Security Mag

FreeBSD: VID-D331F691-71F4-11EA-8BB5-6CC21735F730 (CVE-2020-1720): PostgresSQL — ALTER … DEPENDS ON EXTENSION is missing authorization checks via Rapid7

FreeBSD — ipfw invalid mbuf handling via VuXML

FreeBSD up to 11.3/12.1 ioctl Command privilege escalation via VULDB

Not-actually Linux distro review: FreeBSD 12.1-RELEASE via Ars Technica

NetBSD 8.2 is available!

Install NetBSD on a Vintage Computer via DesignSpark

pfSense 2.4.5-RELEASE Now Available via Netgate