BSD

FreeBSD 15 — zabbix32-proxy — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — zabbix32-proxy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Zabbix — Remote code execution Related CVEs: CVE-2017-2824 Upstream summary: mitre reports: An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted […]

Read more
FreeBSD 15 — sudo-rs — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — sudo-rs — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sudo-rs — Authenticating user not recorded properly in timestamp Related CVEs: CVE-2025-64170 CVE-2025-64517 Upstream summary: Trifecta Tech Foundation reports: With Defaults targetpw (or Defaults rootpw) enabled, the password of the […]

Read more
FreeBSD 15 — py310-wagtail — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py310-wagtail — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-wagtail — stored XSS vulnerability Related CVEs: CVE-2023-28836 CVE-2023-28837 Upstream summary: A stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A user with a […]

Read more
NetBSD 9.4 — polkit — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — polkit — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2013-4288 CVE-2021-4034 CVE-2021-3560 CVE-2018-19788 CVE-2019-6133 CVE-2025-7519 CVE-2018-1116 CVE-2021-4115 Upstream summary: pkgsrc audit-packages flagged polkit<0.112 for vulnerability class 'privilege-escalation'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4288 Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 13 — openvpn — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — openvpn — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenVPN — server DOS and data leak in TLS handshake vulnerabilities Related CVEs: CVE-2005-2531 CVE-2005-2532 CVE-2005-2533 CVE-2005-2534 CVE-2005-3393 CVE-2005-3409 CVE-2006-1629 CVE-2013-2061  +12 more Upstream summary: Gert Doering reports: [Security fixes […]

Read more
FreeBSD 15 — w3m — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — w3m — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: w3m – multiple vulnerabilities Related CVEs: CVE-2006-6772 CVE-2016-9422 CVE-2016-9423 CVE-2016-9424 CVE-2016-9425 CVE-2016-9426 CVE-2016-9428 CVE-2016-9429  +12 more Upstream summary: Tatsuya Kinoshita reports: CVE-2018-6196 * table.c: Prevent negative indent value in feed_table_block_tag(). […]

Read more
FreeBSD 15 — wireshark-lite — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — wireshark-lite — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wireshark — multiple security issues Related CVEs: CVE-2007-3389 CVE-2007-3390 CVE-2007-3391 CVE-2007-3392 CVE-2007-3393 CVE-2007-6112 CVE-2007-6113 CVE-2007-6114  +12 more Upstream summary: wireshark developers reports: wnpa-sec-2018-05. IEEE 802.11 dissector crash. (CVE-2018-7335) wnpa-sec-2018-06. Large […]

Read more
NetBSD 10.0 — openbabel — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — openbabel — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-10994 CVE-2025-10995 CVE-2025-10996 CVE-2025-10997 CVE-2025-10998 CVE-2025-10999 CVE-2025-11000 CVE-2026-2704  +2 more Upstream summary: pkgsrc audit-packages flagged openbabel-[0-9]* for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-10994 Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 15 — py37-requests — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py37-requests — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: www/py-requests — Information disclosure vulnerability Upstream summary: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which […]

Read more
FreeBSD 15 — py-asyncssh — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py-asyncssh — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-asyncssh — Allows bypass of authentication Upstream summary: mitre.org Reports: The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests […]

Read more
CHAT