BSD

FreeBSD 14 — openhab-addons — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — openhab-addons — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenHAB CometVisu addon — Multiple vulnerabilities Upstream summary: OpenHAB reports: This patch release addresses the following security advisories: SSRF/XSS (CometVisu) – GHSA-v7gr-mqpj-wwh3 Sensitive information disclosure (CometVisu) – GHSA-3g4c-hjhr-73rj RCE through […]

Read more
NetBSD 9.4 — ImageMagick — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — ImageMagick — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2005-4601 CVE-2006-0082 CVE-2006-5456 CVE-2007-1797 CVE-2008-1096 CVE-2010-4167 CVE-2012-0247 CVE-2014-1958  +12 more Upstream summary: pkgsrc audit-packages flagged ImageMagick<6.2.6.0 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4601 Table of contents Symptom & Impact Environment […]

Read more
NetBSD 9.4 — lout — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — lout — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-19917 CVE-2019-19918 Upstream summary: pkgsrc audit-packages flagged lout-[0-9]* for vulnerability class 'buffer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-19917 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
FreeBSD 14 — routinator — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — routinator — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: routinator — Possible path traversal when storing RRDP responses Related CVEs: CVE-2021-43172 CVE-2021-43173 CVE-2021-43174 CVE-2022-3029 CVE-2022-39915 CVE-2022-39916 CVE-2023-39916 Upstream summary: [email protected] reports: NLnet Labs Routinator 0.9.0 up to and including […]

Read more
NetBSD 9.4 — oniguruma — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — oniguruma — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-13224 CVE-2017-9224 CVE-2017-9225 CVE-2017-9226 CVE-2017-9227 CVE-2017-9228 CVE-2019-13225 CVE-2019-19012  +6 more Upstream summary: pkgsrc audit-packages flagged oniguruma<6.9.3 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-13224 Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 14 — dokuwiki-devel — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — dokuwiki-devel — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dokuwiki — Local File Inclusion with register_globals on Related CVEs: CVE-2006-4674 CVE-2006-4675 CVE-2006-4679 CVE-2006-5098 CVE-2006-5099 CVE-2007-3930 CVE-2009-1960 Upstream summary: DokuWiki reports: A security hole was discovered which allows an attacker […]

Read more
FreeBSD 14 — fi-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — fi-openoffice — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

Read more
FreeBSD 14 — monotone — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — monotone — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 December 2023 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: monotone — remote denial of service in default setup Upstream summary: The monotone developers report: Running "mtn ''" or "mtn ls ''" doesn't cause an internal error anymore. In monotone […]

Read more
NetBSD 9.4 — ffmpeg2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — ffmpeg2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2014-7933 CVE-2016-10190 CVE-2016-10191 CVE-2016-10192 CVE-2020-13904 CVE-2014-2263 CVE-2015-3395 CVE-2015-8218  +12 more Upstream summary: pkgsrc audit-packages flagged ffmpeg2<2.5.1 for vulnerability class 'use-after-free'. Reference: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7933 Table of contents Symptom & Impact Environment […]

Read more
NetBSD 9.4 — bash — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — bash — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2014-6271 CVE-2014-7169 CVE-2014-6277 CVE-2014-6278 CVE-2016-0634 CVE-2019-18276 CVE-2012-3410 CVE-2016-7543  +7 more Upstream summary: pkgsrc audit-packages flagged bash>=4.3<4.3.025 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271 Table of contents Symptom & Impact Environment […]

Read more
CHAT