FreeBSD 13 — py39-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide

March 1, 2025
BSD
Comment off

🟠 High ⏱ 15–60 min Last verified: 1 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Django — multiple vulnerabilities Related CVEs: CVE-2021-31542 CVE-2021-45115 CVE-2021-45116 CVE-2021-45452 CVE-2022-28346 CVE-2022-28347 CVE-2022-34265 CVE-2022-36359 +12 more Upstream summary: Django reports: CVE-2025-59681: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() […]

NetBSD 10.0 — fribidi — multiple vulnerabilities (4 CVEs) — patch and remediation guide

February 28, 2025
BSD
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-18397 CVE-2022-25310 CVE-2022-25309 CVE-2022-25308 Upstream summary: pkgsrc audit-packages flagged fribidi<1.0.8 for vulnerability class 'buffer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-18397 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

NetBSD 10.0 — freeciv — vulnerability — patch and remediation guide

February 28, 2025
BSD
Comment off

🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-39047 Upstream summary: pkgsrc audit-packages flagged freeciv>=2.6.7<3.0.3 for vulnerability class 'buffer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-39047 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

NetBSD 10.0 — php-contao43 — vulnerability — patch and remediation guide

February 28, 2025
BSD
Comment off

🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-10074 Upstream summary: pkgsrc audit-packages flagged php{55,56,70,71}-contao43<4.3.2 for vulnerability class 'remote-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10074 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

FreeBSD 14 — inspircd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

February 28, 2025
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 28 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: InspIRCd websocket module double free vulnerability Related CVEs: CVE-2012-1836 CVE-2015-8702 Upstream summary: The InspIRCd development team reports: The websocket module before v3.8.1 contains a double free vulnerability. When combined with […]

FreeBSD 14 — f2c — vulnerability — patch and remediation guide

February 28, 2025
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 28 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: f2c — insecure temporary files Related CVEs: CAN-2005-0017 Upstream summary: Javier Fernández-Sanguino Peña reports two temporary file vulnerability within f2c. The vulnerabilities are caused due to weak temporary file handling. […]

FreeBSD 14 — adminer — security advisory — patch and remediation guide

February 28, 2025
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 28 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: adminer — remote code execution Upstream summary: Jakub Vrana reports: Fix remote code execution in SQLite query Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

NetBSD 10.0 — erlang — multiple vulnerabilities (20 CVEs) — patch and remediation guide

February 28, 2025
BSD
Comment off

🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-32433 CVE-2014-1693 CVE-2015-2774 CVE-2016-10253 CVE-2017-1000385 CVE-2016-1000107 CVE-2020-25623 CVE-2020-35733 +12 more Upstream summary: pkgsrc audit-packages flagged erlang<14.1.2 for vulnerability class 'remote-system-access'. Reference: http://secunia.com/advisories/43898/ Table of contents Symptom & Impact Environment […]

NetBSD 10.0 — dovecot-sieve — vulnerability — patch and remediation guide

February 28, 2025
BSD
Comment off

🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged dovecot-sieve<1.1.7 for vulnerability class 'arbitrary-code-execution'. Reference: http://www.dovecot.org/list/dovecot-news/2009-September/000135.html Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

FreeBSD 14 — isc-dhcp41-relay — vulnerability — patch and remediation guide

February 28, 2025
BSD
Comment off

🟢 Low ⏱ 5–15 min Last verified: 28 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcpd — Denial of Service Related CVEs: CVE-2015-8605 Upstream summary: ISC reports: A badly formed packet with an invalid IPv4 UDP length field can cause a DHCP server, client, or […]

BSD

FreeBSD 13 — py39-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide

NetBSD 10.0 — fribidi — multiple vulnerabilities (4 CVEs) — patch and remediation guide

NetBSD 10.0 — freeciv — vulnerability — patch and remediation guide

NetBSD 10.0 — php-contao43 — vulnerability — patch and remediation guide

FreeBSD 14 — inspircd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

FreeBSD 14 — f2c — vulnerability — patch and remediation guide

FreeBSD 14 — adminer — security advisory — patch and remediation guide

NetBSD 10.0 — erlang — multiple vulnerabilities (20 CVEs) — patch and remediation guide

NetBSD 10.0 — dovecot-sieve — vulnerability — patch and remediation guide

FreeBSD 14 — isc-dhcp41-relay — vulnerability — patch and remediation guide

Tags