BSD

FreeBSD 14 — mariadb101-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mariadb101-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL Server — Multiple vulerabilities Related CVEs: CVE-2015-3194 CVE-2016-0639 CVE-2016-0640 CVE-2016-0641 CVE-2016-0642 CVE-2016-0643 CVE-2016-0644 CVE-2016-0646  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]

Read more
NetBSD 10.0 — vobcopy — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — vobcopy — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-5718 Upstream summary: pkgsrc audit-packages flagged vobcopy<1.1.0 for vulnerability class 'insecure-temp-files'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5718 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
NetBSD 10.0 — postgresql12 — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — postgresql12 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-32027 Upstream summary: pkgsrc audit-packages flagged postgresql12<12.7 for vulnerability class 'arbitrary-file-write'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-32027 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
NetBSD 10.0 — po4a — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — po4a — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-4462 Upstream summary: pkgsrc audit-packages flagged po4a<0.23nb4 for vulnerability class 'privilege-escalation'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4462 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
NetBSD 10.0 — maradns — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — maradns — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2011-0520 CVE-2008-0061 CVE-2007-3114 CVE-2014-2031 CVE-2014-2032 Upstream summary: pkgsrc audit-packages flagged maradns<1.4.06 for vulnerability class 'remote-system-access'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0520 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
FreeBSD 14 — ko-unzip — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ko-unzip — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unzip — permission race vulnerability Related CVEs: CVE-2005-2475 Upstream summary: Imran Ghory reports a vulnerability within unzip. The vulnerability is caused by a race condition between extracting an archive and […]

Read more
FreeBSD 13 — openssh-portable-hpn — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — openssh-portable-hpn — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 April 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: FreeBSD — Multiple vulnerabilities in OpenSSH Related CVEs: CVE-2021-28041 CVE-2021-41617 CVE-2023-38408 CVE-2025-26465 CVE-2025-26466 Upstream summary: Problem Description: OpenSSH client host verification error (CVE-2025-26465) ssh(1) contains a logic error that allows […]

Read more
FreeBSD 14 — arti — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — arti — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 April 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Arti — Security issues related to circuit construction Related CVEs: CVE-2024-35312 CVE-2024-35313 Upstream summary: Tor Project reports: When building anonymizing circuits to or from an onion service with 'lite' vanguards […]

Read more
NetBSD 10.0 — consul — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — consul — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-8336 CVE-2021-37219 CVE-2022-40716 CVE-2018-19653 CVE-2019-9764 CVE-2019-12291 CVE-2020-12797 CVE-2020-13170  +12 more Upstream summary: pkgsrc audit-packages flagged consul>=1.4<1.4.3 for vulnerability class 'privilege-escalation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-8336 Table of contents Symptom & Impact Environment […]

Read more
NetBSD 10.0 — claws-mail — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — claws-mail — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2007-2958 CVE-2014-2576 CVE-2015-8614 CVE-2007-6208 CVE-2015-8708 CVE-2020-15917 CVE-2021-37746 CVE-2019-10735  +1 more Upstream summary: pkgsrc audit-packages flagged claws-mail<3.0.0 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2958 Table of contents Symptom & Impact Environment […]

Read more
CHAT