BSD

FreeBSD 15 — py312-dj51-social-auth-app-django — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py312-dj51-social-auth-app-django — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]

Read more
FreeBSD 15 — ja-tdiary — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — ja-tdiary — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tdiary — injection vulnerability Related CVEs: CVE-2006-6174 Upstream summary: An undisclosed eRuby injection vulnerability had been discovered in tDiary. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 15 — py37-wagtail — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py37-wagtail — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-wagtail — stored XSS vulnerability Related CVEs: CVE-2020-11001 CVE-2020-11037 CVE-2020-15118 CVE-2023-28836 CVE-2023-28837 Upstream summary: A stored cross-site scripting (XSS) vulnerability exists on ModelAdmin views within the Wagtail admin interface. A […]

Read more
FreeBSD 15 — linux-sun-jdk — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — linux-sun-jdk — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: java 7.x — security manager bypass Related CVEs: CVE-2004-1029 CVE-2005-1080 CVE-2007-5232 CVE-2012-4681 CVE-2013-0433 Upstream summary: US CERT reports: Java 7 Update 10 and earlier versions of Java 7 contain a […]

Read more
FreeBSD 15 — atril — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — atril — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: evince and atril — command injection vulnerability in CBT handler Related CVEs: CVE-2017-1000083 Upstream summary: GNOME reports: The comic book backend in evince 3.24.0 (and earlier) is vulnerable to a […]

Read more
FreeBSD 15 — libofx — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — libofx — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libofx — exploitable buffer overflow Related CVEs: CVE-2017-2816 Upstream summary: Talos developers report: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted […]

Read more
FreeBSD 13 — rubygem-resolv — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — rubygem-resolv — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rubygem-resolv — Possible denial of service Related CVEs: CVE-2025-24294 Upstream summary: Manu reports: The vulnerability is caused by an insufficient check on the length of a decompressed domain name within […]

Read more
FreeBSD 15 — xdelta — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — xdelta — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xdelta3 — buffer overflow vulnerability Related CVEs: CVE-2014-9765 Upstream summary: Stepan Golosunov reports: Buffer overflow was found and fixed in xdelta3 binary diff tool that allows arbitrary code execution from […]

Read more
NetBSD 9.4 — nnn — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — nnn — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-13566 Upstream summary: pkgsrc audit-packages flagged nnn-[0-9]* for vulnerability class 'double-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-13566 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
FreeBSD 15 — py27-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py27-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Django — potential SQL injection vulnerability Related CVEs: CVE-2012-3442 CVE-2012-3443 CVE-2012-3444 CVE-2013-0305 CVE-2013-0306 CVE-2013-1443 CVE-2013-1664 CVE-2013-1665  +12 more Upstream summary: MITRE CVE reports: Django 1.11 before 1.11.29, 2.2 before 2.2.11, […]

Read more
CHAT