BSD

FreeBSD 15 — pure-ftpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — pure-ftpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pureftpd — multiple vulnerabilities Related CVEs: CVE-2011-0418 CVE-2011-1575 Upstream summary: Pure-FTPd development team reports: Support for braces expansion in directory listings has been disabled — Cf. CVE-2011-0418. Fix a STARTTLS […]

Read more
FreeBSD 13 — gstreamer1-plugins — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — gstreamer1-plugins — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 July 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gstreamer1 — multiple vulnerabilities Related CVEs: CVE-2024-47541 CVE-2024-47542 CVE-2024-47600 CVE-2026-1940 CVE-2026-2920 CVE-2026-2921 CVE-2026-2922 CVE-2026-2923  +12 more Upstream summary: The GStreamer project reports multiple security vulnerabilities fixed in the 1.28.3 release: […]

Read more
FreeBSD 13 — gstreamer1-plugins-bad — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — gstreamer1-plugins-bad — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 July 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gstreamer1 — multiple vulnerabilities Related CVEs: CVE-2025-6663 CVE-2025-67326 CVE-2025-67327 CVE-2026-1940 CVE-2026-2920 CVE-2026-2921 CVE-2026-2922 CVE-2026-2923  +12 more Upstream summary: The GStreamer project reports multiple security vulnerabilities fixed in the 1.28.3 release: […]

Read more
FreeBSD 15 — openvpn-polarssl — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — openvpn-polarssl — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenVPN — out-of-bounds write in legacy key-method 1 Related CVEs: CVE-2017-12166 CVE-2017-7478 CVE-2017-7479 CVE-2017-7508 CVE-2017-7512 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 Upstream summary: Steffan Karger reports: The bounds check in read_key() was performed […]

Read more
FreeBSD 15 — rubygem-ruby-saml — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — rubygem-ruby-saml — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ruby-saml — XML signature wrapping attack Related CVEs: CVE-2016-5697 Upstream summary: RubySec reports: ruby-saml prior to version 1.3.0 is vulnerable to an XML signature wrapping attack in the specific scenario […]

Read more
FreeBSD 15 — optipng — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — optipng — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PptiPNG — Global-buffer-overflow Related CVEs: CVE-2008-5101 CVE-2012-4432 CVE-2015-7801 CVE-2015-7802 CVE-2016-2191 CVE-2016-3981 CVE-2016-3982 CVE-2023-43907 Upstream summary: Frank-Z7 reports: Running optipng with the "-zm 3 -zc 1 -zw 256 -snip -out" configuration […]

Read more
FreeBSD 15 — ru-apache+mod_ssl — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — ru-apache+mod_ssl — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2003-0993 CVE-2004-0700 CVE-2004-0885 CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using […]

Read more
FreeBSD 14 — qt6-pdf — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — qt6-pdf — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 July 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qt6-webengine — multiple vulnerabilities Related CVEs: CVE-2024-11477 CVE-2025-0762 CVE-2025-0996 CVE-2025-0998 CVE-2025-0999 CVE-2025-1006 CVE-2025-10200 CVE-2025-10201  +12 more Upstream summary: Qt qtwebengine-chromium repo reports: Backports for 262 security bugs in Chromium: CVE-2025-13223: […]

Read more
FreeBSD 15 — php72-imap — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — php72-imap — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]

Read more
FreeBSD 15 — foswiki — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — foswiki — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 July 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: foswiki — Script Insertion Vulnerability via unchecked user registration fields Related CVEs: CVE-2012-1004 Upstream summary: Foswiki team reports: When a new user registers, the new user can add arbitrary HTML […]

Read more
CHAT