April 2026 - Page 176 of 199

FreeBSD 15 — libgd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — libgd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libgd — Denial of servica via double free Related CVEs: CVE-2017-6362 CVE-2017-7890 Upstream summary: libgd developers report: Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote […]

Read more
NetBSD 9.4 — yt-dlp — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — yt-dlp — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-35934 CVE-2023-46121 CVE-2026-26331 Upstream summary: pkgsrc audit-packages flagged yt-dlp>=2015.01.25<2023.07.06 for vulnerability class 'open-redirect'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-35934 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
FreeBSD 15 — rubygem-rest-client — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — rubygem-rest-client — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rest-client — plaintext password disclosure Related CVEs: CVE-2015-1820 CVE-2015-3448 Upstream summary: The open sourced vulnerability database reports: REST Client for Ruby contains a flaw that is due to the application […]

Read more
FreeBSD 14 — postgresql16-client — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — postgresql16-client — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 April 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL — Multiple vulnerabilities Related CVEs: CVE-2024-10977 CVE-2024-7348 CVE-2025-1094 CVE-2025-12817 CVE-2025-12818 CVE-2025-4207 CVE-2026-6472 CVE-2026-6473  +9 more Upstream summary: The PostgreSQL project reports: Missing authorization in PostgreSQL CREATE TYPE allows an […]

Read more
FreeBSD 12 — py311-social-auth-app-django — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py311-social-auth-app-django — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2024-32879 CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not […]

Read more
Windows Server 2025 — KB5087424 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Windows Server 2025

Windows Server 2025 — KB5087424 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5087424 • MSRC update-guide entry Related CVEs: CVE-2026-35421 CVE-2026-41089 CVE-2026-32161 CVE-2026-40403 CVE-2026-21530 CVE-2026-33834 CVE-2026-33839 CVE-2026-33841  +12 more Affected components: Windows Server 2025 Microsoft summary: Heap-based buffer overflow in Windows GDI allows an […]

Read more
FreeBSD 15 — py24-pylons — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py24-pylons — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-pylons — Path traversal bug Upstream summary: Pylons team reports: The error.py controller uses paste.fileapp to serve the static resources to the browser. The default error.py controller uses os.path.join to […]

Read more
FreeBSD 15 — setiathome — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — setiathome — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: seti@home remotely exploitable buffer overflow Upstream summary: The seti@home client contains a buffer overflow in the HTTP response handler. A malicious, spoofed seti@home server can exploit this buffer overflow to […]

Read more
NetBSD 9.4 — py-virtualenv — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — py-virtualenv — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-22702 Upstream summary: pkgsrc audit-packages flagged py{27,310,311,312,313,314}-virtualenv<20.36.1 for vulnerability class 'symlink-attack'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-22702 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
CHAT