BSD

FreeBSD 14 — postgresql95-contrib — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — postgresql95-contrib — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL — minor security problems. Related CVEs: CVE-2016-2193 CVE-2016-3065 Upstream summary: PostgreSQL project reports: Security Fixes for RLS, BRIN This release closes security hole CVE-2016-2193 (https://access.redhat.com/security/cve/CVE-2016-2193), where a query plan […]

Read more
FreeBSD 14 — atheme-services — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — atheme-services — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: atheme-services — multiple vulnerabilities Related CVEs: CVE-2014-9773 CVE-2016-4478 Upstream summary: Mitre reports: modules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS behavior by registering and dropping […]

Read more
FreeBSD 14 — postgresql-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — postgresql-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 16 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL server — Potentially allowing authenicated database users to see data that they shouldn't. Related CVEs: CVE-2005-0227 CVE-2005-0244 CVE-2005-0245 CVE-2005-0246 CVE-2005-0247 CVE-2006-0553 CVE-2006-2313 CVE-2006-2314  +12 more Upstream summary: PostgreSQL project […]

Read more
NetBSD 9.4 — gpsd — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — gpsd — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-17937 CVE-2023-43628 CVE-2025-67268 CVE-2025-67269 Upstream summary: pkgsrc audit-packages flagged gpsd<2.37nb1 for vulnerability class 'remote-information-exposure'. Reference: http://developer.berlios.de/bugs/?func=detailbug&bug_id=14707&group_id=2116 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

Read more
FreeBSD 14 — atutor — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — atutor — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: atutor — multiple vulnerabilities Upstream summary: ATutor reports: Security Fixes: Added a new layer of security over all php superglobals, fixed several XSS, CSRF, and SQL injection vulnerabilities. Table of […]

Read more
NetBSD 10.0 — protobuf — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — protobuf — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2015-5237 CVE-2021-22570 CVE-2022-1941 Upstream summary: pkgsrc audit-packages flagged protobuf<3.4.0 for vulnerability class 'buffer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2015-5237 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
FreeBSD 14 — py39-OWSLib — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py39-OWSLib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py39-OWSLib — arbitrary file read vulnerability Related CVEs: CVE-2023-27476 Upstream summary: Jorge Rosillo reports: OWSLib's XML parser (which supports both `lxml` and `xml.etree`) does not disable entity resolution for `lxml`, […]

Read more
NetBSD 10.0 — xmill — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — xmill — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-21825 CVE-2021-21810 CVE-2021-21828 CVE-2021-21827 CVE-2021-21826 CVE-2021-21811 Upstream summary: pkgsrc audit-packages flagged xmill-[0-9]* for vulnerability class 'remote-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-21825 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
NetBSD 10.0 — cyrus-imapd-2.2.[7-8] — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — cyrus-imapd — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged cyrus-imapd{,nb*} for vulnerability class 'remote-code-execution'. Reference: http://security.e-matters.de/advisories/152004.txt Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

Read more
CHAT