BSD

OpenBSD 7.6 — ssh — errata 003_ssh — reliability fix — syspatch and remediation — diagnosis and fix on OpenBSD 7.6

OpenBSD 7.6 — ssh — errata 003_ssh — reliability fix — syspatch and remediation

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: OpenBSD 7.6 📖 ~4 min read  •  Source: OpenBSD 7.6 errata 003_ssh Errata topic: Reliability: ssh (hppa m88k mips64 powerpc powerpc64 sh sparc64) Issued: October 29, 2024 Upstream summary: mlkem768x25519-sha256 byte order bug on big-endian machines. Table of contents Symptom & Impact […]

Read more
OpenBSD 7.4 — bgpd — errata 017_bgpd — reliability fix — syspatch and remediation — diagnosis and fix on OpenBSD 7.4

OpenBSD 7.4 — bgpd — errata 017_bgpd — reliability fix — syspatch and remediation

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: OpenBSD 7.4 📖 ~4 min read  •  Source: OpenBSD 7.4 errata 017_bgpd Errata topic: Reliability: bgpd (All architectures) Issued: June 26, 2024 Upstream summary: Repair a withdraw desyncronization problem in bgpd(8). Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 12 — weechat — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — weechat — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 September 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: WeeChat — Multiple vulnerabilities Related CVEs: CVE-2012-5854 CVE-2017-14727 CVE-2017-8073 CVE-2020-8955 Upstream summary: The Weechat project reports: Multiple integer and buffer overflows in WeeChat core. Table of contents Symptom & Impact […]

Read more
FreeBSD 12 — apache-ant — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — apache-ant — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 September 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache Ant leaks sensitive information via the java.io.tmpdir Related CVEs: CVE-2020-1945 Upstream summary: Apache reports: Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified […]

Read more
OpenBSD 7.6 — expat — errata 005_expat — security advisory — syspatch and remediation — diagnosis and fix on OpenBSD 7.6

OpenBSD 7.6 — expat — errata 005_expat — security advisory — syspatch and remediation

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: OpenBSD 7.6 📖 ~4 min read  •  Source: OpenBSD 7.6 errata 005_expat Errata topic: Security: expat (All architectures) Issued: November 15, 2024 Related CVEs: CVE-2024-50602 Upstream summary: In libexpat fix crash within function XML_ResumeParser. CVE-2024-50602 Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 12 — trafficserver — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — trafficserver — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 September 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: trafficserver — resource consumption Related CVEs: CVE-2012-0256 CVE-2014-3525 CVE-2020-9494 Upstream summary: Bryan Call reports: ATS is vulnerable to certain types of HTTP/2 HEADERS frames that can cause the server to […]

Read more
FreeBSD 12 — p11-kit — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — p11-kit — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 September 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p11-kit — Multiple vulnerabilities Related CVEs: CVE-2020-29361 CVE-2020-29362 CVE-2020-29363 Upstream summary: The p11-glue project reports: CVE-2020-29363: Out-of-bounds write in p11_rpc_buffer_get_byte_array_value function A heap-based buffer overflow has been discovered in the […]

Read more
FreeBSD 12 — typo3-10-php — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — typo3-10-php — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 September 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: typo3 — XSS vulnerability in svg-sanitize Related CVEs: CVE-2020-11063 CVE-2020-11064 CVE-2020-11065 CVE-2020-11066 CVE-2020-11067 CVE-2020-11069 CVE-2020-15098 CVE-2020-15099  +1 more Upstream summary: The TYPO3 project reports: The SVG sanitizer library enshrined/svg-sanitize before […]

Read more
FreeBSD 12 — spamassassin — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — spamassassin — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 September 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: spamassassin — Malicious rule configuration (.cf) files can be configured to run system commands Related CVEs: CVE-2016-1238 CVE-2017-15705 CVE-2018-11780 CVE-2018-11781 CVE-2018-11805 CVE-2019-12420 CVE-2020-1930 CVE-2020-1931  +1 more Upstream summary: The Apache […]

Read more
FreeBSD 12 — py311-Flask-Cors — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py311-Flask-Cors — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 September 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-Flask-Cors — directory traversal vulnerability Related CVEs: CVE-2020-25032 Upstream summary: praetorian-colby-morgan reports: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal […]

Read more
CHAT