BSD

NetBSD 9.4 — py-authlib — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — py-authlib — multiple vulnerabilities (8 CVEs) — patch and remediation guide

  • January 30, 2026
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-59420 CVE-2025-68158 CVE-2026-28802 CVE-2026-27962 CVE-2026-28490 CVE-2026-28498 CVE-2025-61920 CVE-2025-62706 Upstream summary: pkgsrc audit-packages flagged py{27,39,310,311,312,313}-authlib<1.6.4 for vulnerability class 'security-bypass'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-59420 Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 15 — py310-markdown — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py310-markdown — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • January 30, 2026
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 30 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-markdown2 — regular expression denial of service vulnerability Related CVEs: CVE-2020-11888 CVE-2021-26813 Upstream summary: Ben Caller reports: markdown2 &gt;=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of […]

Read more
FreeBSD 15 — couchdb — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — couchdb — multiple vulnerabilities (8 CVEs) — patch and remediation guide

  • January 30, 2026
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 30 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: couchdb — information sharing via couchjs processes Related CVEs: CVE-2012-5650 CVE-2017-12635 CVE-2017-12636 CVE-2018-11769 CVE-2018-17188 CVE-2018-8007 CVE-2021-39205 CVE-2023-26268 Upstream summary: Nick Vatamane reports: Design documents with matching document IDs, from databases […]

Read more
NetBSD 9.4 — qt6-qtbase — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — qt6-qtbase — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • January 30, 2026
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-5991 CVE-2025-5455 CVE-2025-5992 Upstream summary: pkgsrc audit-packages flagged qt6-qtbase>=6.9.0<6.9.1 for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-5991 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
FreeBSD 15 — typo3-9-php — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — typo3-9-php — multiple vulnerabilities (11 CVEs) — patch and remediation guide

  • January 29, 2026
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: typo3 — multiple vulnerabilities Related CVEs: CVE-2019-10912 CVE-2019-12747 CVE-2019-12748 CVE-2020-11063 CVE-2020-11064 CVE-2020-11065 CVE-2020-11066 CVE-2020-11067  +3 more Upstream summary: Typo3 Team reports: In case an attacker manages to generate a valid […]

Read more
FreeBSD 15 — emacs — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — emacs — multiple vulnerabilities (13 CVEs) — patch and remediation guide

  • January 29, 2026
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Emacs — Arbitrary code execution vulnerability Related CVEs: CVE-2005-0100 CVE-2008-3949 CVE-2012-3479 CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2024-30202  +5 more Upstream summary: Problem Description A shell injection vulnerability exists in GNU Emacs […]

Read more
NetBSD 10.0 — yt-dlp — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — yt-dlp — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • January 29, 2026
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-35934 CVE-2023-46121 CVE-2026-26331 Upstream summary: pkgsrc audit-packages flagged yt-dlp>=2015.01.25<2023.07.06 for vulnerability class 'open-redirect'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-35934 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
FreeBSD 15 — postgresql91-server — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — postgresql91-server — multiple vulnerabilities (14 CVEs) — patch and remediation guide

  • January 29, 2026
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL — Denial-of-Service and Code Injection Vulnerabilities Related CVEs: CVE-2014-8161 CVE-2015-0241 CVE-2015-0242 CVE-2015-0243 CVE-2015-0244 CVE-2015-3165 CVE-2015-3166 CVE-2015-3167  +6 more Upstream summary: PostgreSQL project reports: Security Fixes nested CASE expressions + […]

Read more
FreeBSD 15 — sudosh — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — sudosh — security advisory — patch and remediation guide

  • January 29, 2026
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sudosh — buffer overflow Upstream summary: ISS reports: sudosh2 and sudosh3 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the replay() function. By persuading a […]

Read more
FreeBSD 15 — php5-cli — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — php5-cli — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • January 29, 2026
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2006-4481 CVE-2006-4482 CVE-2006-4483 CVE-2006-4484  +12 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT