BSD

OpenBSD 7.4 — perl — errata 007_perl — security advisory — syspatch and remediation — diagnosis and fix on OpenBSD 7.4

OpenBSD 7.4 — perl — errata 007_perl — security advisory — syspatch and remediation

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read  •  Source: OpenBSD 7.4 errata 007_perl Errata topic: Security: perl (All architectures) Issued: November 29, 2023 Related CVEs: CVE-2023-47038 Upstream summary: A crafted regular expression when compiled by perl can cause a one-byte attacker controlled buffer […]

Read more
FreeBSD 12 — py36-wagtail — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py36-wagtail — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 November 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Wagtail — XSS vulnerability Related CVEs: CVE-2020-11001 CVE-2020-11037 CVE-2020-15118 Upstream summary: GitHub Advisory Database: When a form page type is made available to Wagtail editors through the wagtail.contrib.forms app, and […]

Read more
FreeBSD 12 — py27-salt — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py27-salt — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 November 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: salt — multiple vulnerabilities in salt-master process Related CVEs: CVE-2015-6918 CVE-2015-6941 CVE-2015-8034 CVE-2016-1866 CVE-2016-3176 CVE-2017-12791 CVE-2017-14695 CVE-2017-14696  +5 more Upstream summary: F-Secure reports: CVE-2020-11651 – Authentication bypass vulnerabilities The ClearFuncs […]

Read more
OpenBSD 7.5 — freetype — errata 020_freetype — security advisory — syspatch and remediation — diagnosis and fix on OpenBSD 7.5

OpenBSD 7.5 — freetype — errata 020_freetype — security advisory — syspatch and remediation

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: OpenBSD 7.5 📖 ~4 min read  •  Source: OpenBSD 7.5 errata 020_freetype Errata topic: Security: freetype (All architectures) Issued: March 25, 2025 Related CVEs: CVE-2025-27363 Upstream summary: Prevent out-of-bounds write in FreeType heap. CVE-2025-27363 Table of contents Symptom & Impact Environment & […]

Read more
FreeBSD 12 — py36-twisted — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py36-twisted — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 November 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-twisted — multiple vulnerabilities Related CVEs: CVE-2019-12387 CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 CVE-2020-10108 CVE-2020-10109 Upstream summary: Twisted developers reports: All HTTP clients in twisted.web.client now raise a ValueError when called with a […]

Read more
FreeBSD 12 — chocolate-doom — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — chocolate-doom — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 November 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: chocolate-doom — Arbitrary code execution Related CVEs: CVE-2020-14983 Upstream summary: Michal Dardas from LogicalTrust reports: The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players […]

Read more
OpenBSD 7.5 — pffrag — errata 016_pffrag — reliability fix — syspatch and remediation — diagnosis and fix on OpenBSD 7.5

OpenBSD 7.5 — pffrag — errata 016_pffrag — reliability fix — syspatch and remediation

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: OpenBSD 7.5 📖 ~4 min read  •  Source: OpenBSD 7.5 errata 016_pffrag Errata topic: Reliability: pffrag (All architectures) Issued: February 10, 2025 Upstream summary: pf(4) could reassemble overlapping fragments into an incorrect IP packet that was too short. Table of contents Symptom […]

Read more
FreeBSD 12 — payara — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — payara — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 28 October 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Payara — path trasversal flaw via either loc/con parameters in Eclipse Mojarra Related CVEs: CVE-2016-1000031 CVE-2016-5528 CVE-2017-12615 CVE-2017-3239 CVE-2017-3247 CVE-2017-3249 CVE-2017-3250 CVE-2018-14371  +7 more Upstream summary: Payara Releases reports: The […]

Read more
OpenBSD 7.6 — pffrag — errata 007_pffrag — reliability fix — syspatch and remediation — diagnosis and fix on OpenBSD 7.6

OpenBSD 7.6 — pffrag — errata 007_pffrag — reliability fix — syspatch and remediation

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: OpenBSD 7.6 📖 ~4 min read  •  Source: OpenBSD 7.6 errata 007_pffrag Errata topic: Reliability: pffrag (All architectures) Issued: February 10, 2025 Upstream summary: pf(4) could reassemble overlapping fragments into an incorrect IP packet that was too short. Table of contents Symptom […]

Read more
FreeBSD 12 — awstats — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — awstats — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 October 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: www/awstats — Partial absolute pathname Related CVEs: CVE-2005-0116 CVE-2005-0362 CVE-2005-0363 CVE-2005-0435 CVE-2005-0436 CVE-2005-0437 CVE-2005-0438 CVE-2005-1527  +5 more Upstream summary: MITRE reports: It seems #90 is not completely fixed in 7.8. […]

Read more
CHAT