🟢 Low ⏱ 5–15 min Last verified: 20 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ksh93 — certain environment variables interpreted as arithmetic expressions on startup, leading to code injection Upstream summary: Upstream ksh93 maintainer Siteshwar Vashisht reports: A flaw was found in the way […]
🟢 Low ⏱ 5–15 min Last verified: 20 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libjpeg-turbo — Issue in the PPM reader causing a buffer overrun in cjpeg, TJBench, or the tjLoadImage() function. Related CVEs: CVE-2012-2806 CVE-2020-13790 Upstream summary: libjpeg-turbo releases reports: This release fixes […]
🟠 High ⏱ 15–60 min Last verified: 20 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bind — denial of service vulnerability Related CVEs: CVE-2012-5166 CVE-2012-5688 CVE-2013-2266 CVE-2013-3919 CVE-2013-4854 CVE-2014-0591 CVE-2014-8500 CVE-2014-8680 +5 more Upstream summary: ISC reports: An incorrect boundary check in openpgpkey_61.c can cause […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-6442 Upstream summary: pkgsrc audit-packages flagged ruby{31,32,33,34}-webrick<1.8.2 for vulnerability class 'request-smuggling'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-6442 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-16892 CVE-2020-6162 CVE-2020-6835 CVE-2025-11947 CVE-2009-4593 Upstream summary: pkgsrc audit-packages flagged bftpd<2.9 for vulnerability class 'privilege-escalation'. Reference: http://secunia.com/advisories/40014/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2015-0249 CVE-2014-0030 CVE-2018-17198 CVE-2019-0234 CVE-2024-25090 CVE-2024-46911 CVE-2025-24859 CVE-2021-33580 Upstream summary: pkgsrc audit-packages flagged apache-roller<5.1.2 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2015-0249 Table of contents Symptom & Impact Environment & Reproduction […]
![NetBSD 10.0 — gnutls-1.3.[0-3] — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0](https://www.progressiverobot.com/wp-content/uploads/2026/05/netbsd-10-0-gnutls-1-3-0-3-vulnerability-patch-remediation.jpg "NetBSD 10.0 — gnutls — vulnerability — patch and remediation guide 7")
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged gnutls{,nb*} for vulnerability class 'denial-of-service'. Reference: http://secunia.com/advisories/18794/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟢 Low ⏱ 5–15 min Last verified: 19 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fd_set — bitmap index overflow in multiple applications Upstream summary: 3APA3A reports: If programmer fails to check socket number before using select() or fd_set macros, it's possible to overwrite memory […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2013-7323 CVE-2014-1927 CVE-2014-1928 CVE-2014-1929 Upstream summary: pkgsrc audit-packages flagged py{34,33,32,27,26}-gnupg<0.3.6 for vulnerability class 'arbitrary-command-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7323 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged postgresql90{,-server,-client}<9.0.7 for vulnerability class 'multiple-vulnerabilities'. Reference: http://www.postgresql.org/about/news/1377/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
