BSD

FreeBSD 15 — opus-tools — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — opus-tools — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vorbis-tools, opus-tools — multiple vulnerabilities Related CVEs: CVE-2014-9638 CVE-2014-9639 CVE-2015-6749 Upstream summary: Paris Zoumpouloglou reports: I discovered an integer overflow issue in oggenc, related to the number of channels in […]

Read more
FreeBSD 15 — apache+mod_ssl+mod_accel+mod_deflate — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — apache+mod_ssl+mod_accel+mod_deflate — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

Read more
FreeBSD 15 — php84-composer — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — php84-composer — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PHP Composer — Multiple vulnerabilities Related CVEs: CVE-2026-40176 CVE-2026-40261 Upstream summary: Composer project reports: Fixed command injection via malicious Perforce reference (GHSA-gqw4-4w2p-838q / CVE-2026-40261) Fixed command injection via malicious Perforce […]

Read more
FreeBSD 15 — ldb — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — ldb — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: samba — multiple vulnerabilities Related CVEs: CVE-2015-3223 CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-7540 CVE-2015-8467 Upstream summary: Samba team reports: [CVE-2015-3223] Malicious request can cause Samba LDAP server to hang, spinning using […]

Read more
FreeBSD 12 — py310-ormar — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py310-ormar — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-ormar — vulnerabilities Related CVEs: CVE-2026-26198 CVE-2026-27953 Upstream summary: https://github.com/ormar-orm/ormar/security/advisories reports: SQL Injection in aggregate functions min() and max() Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model […]

Read more
NetBSD 9.4 — caddy — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — caddy — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-21246 CVE-2022-29718 CVE-2022-28923 CVE-2026-27585 CVE-2026-27586 CVE-2026-27587 CVE-2026-27588 CVE-2026-27589  +5 more Upstream summary: pkgsrc audit-packages flagged caddy<0.10.13 for vulnerability class 'authentication-bypass'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-21246 Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 15 — linux-firefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — linux-firefox — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — multiple vulnerabilities Related CVEs: CVE-2005-0399 CVE-2005-0402 CVE-2005-0752 CVE-2005-0989 CVE-2005-1476 CVE-2005-1477 CVE-2005-1937 CVE-2005-2260  +12 more Upstream summary: Mozilla Foundation reports: CVE-2019-11751: Malicious code execution through command line parameters CVE-2019-11746: […]

Read more
NetBSD 9.4 — cups-base — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — cups-base — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-34241 CVE-2023-4504 CVE-2024-47176 CVE-2024-47076 CVE-2024-47175 CVE-2024-47177 CVE-2025-58364 CVE-2019-8675  +10 more Upstream summary: pkgsrc audit-packages flagged cups-base<2.4.6 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-34241 Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 15 — opengtl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — opengtl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]

Read more
CHAT