BSD

NetBSD 9.4 — p5-Digest — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — p5-Digest — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged p5-Digest<1.17 for vulnerability class 'remote-system-access'. Reference: http://secunia.com/advisories/46279/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

Read more
NetBSD 9.4 — squid4 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — squid4 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-25097 CVE-2021-31807 CVE-2021-28116 CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31808  +2 more Upstream summary: pkgsrc audit-packages flagged squid4<4.14 for vulnerability class 'http-request-smuggling'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-25097 Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 14 — punbb — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — punbb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: punbb — NULL byte injection vulnerability Related CVEs: CVE-2006-4759 Upstream summary: CVE Mitre reports: PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows remote […]

Read more
FreeBSD 13 — krb5-devel — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — krb5-devel — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 December 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: krb5 — Double-free in KDC TGS processing Related CVEs: CVE-2017-11368 CVE-2017-11462 CVE-2022-42898 CVE-2023-39975 Upstream summary: The MIT krb5 Team reports: When issuing a ticket for a TGS renew or validate […]

Read more
FreeBSD 14 — typo3-8-php — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — typo3-8-php — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: TYPO3 — multiple vulnerabilities Related CVEs: CVE-2019-10912 CVE-2019-12747 CVE-2019-12748 Upstream summary: TYPO3 news: Please read the corresponding Security Advisories for details. Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 14 — ark — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ark — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ark — extraction outside of extraction directory Related CVEs: CVE-2020-16116 CVE-2020-24654 Upstream summary: Albert Astals Cid reports: Overview A maliciously crafted TAR archive containing symlink entries would install files anywhere […]

Read more
NetBSD 9.4 — postgresql10-server — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — postgresql10-server — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-25696 CVE-2018-16850 CVE-2019-10130 CVE-2019-10164 CVE-2019-10208 CVE-2020-1720 CVE-2020-14349 CVE-2020-14350  +8 more Upstream summary: pkgsrc audit-packages flagged postgresql10-server<10.15 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-25696 Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 14 — peercast — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — peercast — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: peercast — arbitrary code execution Related CVEs: CVE-2007-6454 CVE-2008-2040 Upstream summary: Nico Golde discovered that PeerCast, a P2P audio and video streaming server, is vulnerable to a buffer overflow in […]

Read more
FreeBSD 12 — sdl2_sound — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — sdl2_sound — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 December 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sdl2_sound — multiple vulnerabilities Related CVEs: CVE-2023-45676 CVE-2023-45677 CVE-2023-45680 CVE-2023-45681 CVE-2023-45682 Upstream summary: GitHub Security Lab reports: stb_image.h and stb_vorbis libraries contain several memory access violations of different severity Wild […]

Read more
CHAT