BSD

FreeBSD 15 — messagelib — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — messagelib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: messagelib — HTML email can open browser window automatically Related CVEs: CVE-2018-19516 Upstream summary: Albert Astals Cid reports: messagelib is the library used by KMail to display emails. messagelib by […]

Read more
FreeBSD 15 — mupad — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — mupad — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpm — image decoding vulnerabilities Related CVEs: CVE-2004-0687 CVE-2004-0688 Upstream summary: Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow […]

Read more
NetBSD 9.4 — py-cryptography — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — py-cryptography — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-9243 CVE-2020-25659 CVE-2020-36242 CVE-2023-23931 CVE-2023-49083 CVE-2024-26130 CVE-2026-26007 CVE-2018-10903 Upstream summary: pkgsrc audit-packages flagged py{27,34,35,36}-cryptography<1.5.2 for vulnerability class 'weak-cryptography'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9243 Table of contents Symptom & Impact Environment & Reproduction […]

Read more
NetBSD 9.4 — mold — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — mold — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-3994 Upstream summary: pkgsrc audit-packages flagged mold-[0-9]* for vulnerability class 'heap-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3994 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
NetBSD 9.4 — janet — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — janet — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-30763 CVE-2026-2240 CVE-2026-2241 CVE-2026-2242 CVE-2026-2869 Upstream summary: pkgsrc audit-packages flagged janet<1.22.0 for vulnerability class 'array-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-30763 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
FreeBSD 15 — php52-sqlite — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — php52-sqlite — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php5-sqlite — open_basedir bypass Related CVEs: CVE-2012-3365 Upstream summary: MITRE CVE team reports: The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via […]

Read more
FreeBSD 15 — libvorbis — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — libvorbis — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libvorbis — two vulnerabilities Related CVEs: CVE-2007-3106 CVE-2008-1419 CVE-2008-1420 CVE-2008-1423 CVE-2009-3379 CVE-2017-14160 CVE-2017-14632 CVE-2017-14633  +3 more Upstream summary: Two vulnerabilities were fixed in the upstream repository: The bark_noise_hybridmp function allows […]

Read more
FreeBSD 15 — firebird-server — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — firebird-server — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firebird — multiple remote buffer overflow vulnerabilities Upstream summary: RISE Security reports: There exists multiple vulnerabilities within functions of Firebird Relational Database, which when properly exploited can lead to remote […]

Read more
FreeBSD 12 — libXpm — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libXpm — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libXpm — Out-of-bounds read in xpmNextWord() Related CVEs: CVE-2004-0687 CVE-2004-0688 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 CVE-2023-43788 CVE-2023-43789 CVE-2026-4367 Upstream summary: The X.Org project reports: libXpm uses a number of internal helper functions […]

Read more
FreeBSD 15 — compat5x-alpha — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — compat5x-alpha — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openssl — potential SSL 2.0 rollback Related CVEs: CVE-2005-2969 Upstream summary: Vulnerability: Such applications are affected if they use the option SSL_OP_MSIE_SSLV2_RSA_PADDING. This option is implied by use of SSL_OP_ALL, […]

Read more
CHAT