BSD

NetBSD 9.4 — mongrel — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — mongrel — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-6612 Upstream summary: pkgsrc audit-packages flagged mongrel>=1.0.4<1.1.3 for vulnerability class 'directory-traversal'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6612 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
FreeBSD 13 — emacs — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — emacs — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 February 2024 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Emacs — Arbitrary code execution vulnerability Related CVEs: CVE-2005-0100 CVE-2008-3949 CVE-2012-3479 CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2024-30202  +5 more Upstream summary: Problem Description A shell injection vulnerability exists in GNU Emacs […]

Read more
FreeBSD 14 — automake — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — automake — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: automake — Insecure 'distcheck' recipe granted world-writable distdir Related CVEs: CVE-2012-3386 Upstream summary: GNU reports: The recipe of the 'distcheck' target granted temporary world-write permissions on the extracted distdir. This […]

Read more
FreeBSD 12 — libgit — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libgit — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 February 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Libgit2 — multiple vulnerabilities Related CVEs: CVE-2018-10887 CVE-2018-10888 CVE-2018-11235 CVE-2018-17456 CVE-2024-24577 Upstream summary: Git community reports: A bug in git_revparse_single is fixed that could have caused the function to enter […]

Read more
NetBSD 9.4 — gnupg — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — gnupg — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-1263 CVE-2012-6085 CVE-2013-4242 CVE-2013-4576 CVE-2013-4351 CVE-2013-4402 CVE-2019-14855 CVE-2006-3082  +5 more Upstream summary: pkgsrc audit-packages flagged gnupg<1.0.4 for vulnerability class 'weak-authentication'. Reference: http://www.gnupg.org/whatsnew.html#rn20001017 Table of contents Symptom & Impact Environment […]

Read more
NetBSD 9.4 — drupal-4.7.[0-1]* — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — drupal — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged drupal for vulnerability class 'arbitrary-code-execution'. Reference: http://drupal.org/node/66763 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

Read more
FreeBSD 14 — ko-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ko-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 February 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

Read more
NetBSD 9.4 — php-gmp — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — php-gmp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-7963 Upstream summary: pkgsrc audit-packages flagged php{56,70,71}-gmp-[0-9]* for vulnerability class 'denial-of-service'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7963 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
NetBSD 9.4 — asterisk-13.* — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — asterisk — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged asterisk for vulnerability class 'eol'. Reference: https://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

Read more
NetBSD 9.4 — wpa_supplicant — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — wpa_supplicant — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2014-3686 CVE-2019-16275 CVE-2015-4141 CVE-2015-0210 CVE-2019-9494 CVE-2019-9495 CVE-2019-9496 CVE-2019-9497  +12 more Upstream summary: pkgsrc audit-packages flagged wpa_supplicant<2.3 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3686 Table of contents Symptom & Impact Environment […]

Read more
CHAT