Updating pfSense-core repository catalogue. (CVE-2018-6921) - A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that could lead to local privilege escalation. Proceed with upgrade (y/N) y > Removing vital flag from lang/php72. Unprivileged authenticated local users may be able to access small amounts of privileged kernel data. It is, therefore, affected by multiple vulnerabilities: - In FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel memory may be disclosed to userland processes. At this time, pfSense 2.3. Description According to its self-reported version number, the remote pfSense install is a version 2.3.x prior to 2.3.5-p2 or 2.4.x prior to 2.4.3-p1. For a complete list of changes, see the 2.4.3-p1 Release Notes and 2.3.5-p2 Release Notes.

Synopsis The remote firewall host is affected by multiple vulnerabilities. Upload the pfSense-CE-2.3.5-RELEASE-2g-amd64-nanobsd.img image to the created directory using for example FileZilla or WinSCP.

Download pfsense 2.3