BSD

FreeBSD 15 — ghostscript9-agpl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — ghostscript9-agpl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]

Read more
FreeBSD 15 — py26-graphite-web — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py26-graphite-web — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-graphite-web — Multiple vulnerabilities Related CVEs: CVE-2013-5093 Upstream summary: Graphite developers report: This release contains several security fixes for cross-site scripting (XSS) as well as a fix for a remote-execution […]

Read more
FreeBSD 13 — navidrome — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — navidrome — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 June 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: navidrome — multiple vulnerabilities Related CVEs: CVE-2025-27112 CVE-2025-48948 CVE-2025-48949 CVE-2026-25578 CVE-2026-25579 Upstream summary: An XSS vulnerability in the frontend allows a malicious attacker to inject code through the comment metadata […]

Read more
FreeBSD 15 — imlib — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — imlib — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: imlib2 — denial of service vulnerabilities Related CVEs: CVE-2004-0802 CVE-2004-0817 CVE-2004-1025 CVE-2004-1026 CVE-2006-4806 CVE-2006-4807 CVE-2006-4808 CVE-2006-4809  +4 more Upstream summary: Enlightenment reports: GIF loader: Fix segv on images without colormap […]

Read more
NetBSD 10.0 — ruby-rack2 — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — ruby-rack2 — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-22860 CVE-2026-25500 CVE-2024-25126 CVE-2024-26141 CVE-2024-26146 CVE-2025-59830 CVE-2025-61770 CVE-2025-61771  +3 more Upstream summary: pkgsrc audit-packages flagged ruby{32,33,34,40}-rack2<2.2.22 for vulnerability class 'path-traversal'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-22860 Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 15 — npm — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — npm — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: NPM — Multiple vulnerabilities Related CVEs: CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 Upstream summary: NPM reports: Global node_modules Binary Overwrite Symlink reference outside of node_modules Arbitrary File Write Table of contents Symptom & […]

Read more
FreeBSD 15 — openvpn-auth-ldap — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — openvpn-auth-ldap — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: security/openvpn-auth-ldap — Fix buffer overflow in challenge/response Related CVEs: CVE-2024-28820 Upstream summary: Graham Northup reports: A buffer overflow in extract_openvpn_cr allows attackers with a valid LDAP username and who can […]

Read more
FreeBSD 12 — postgresql18-server — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — postgresql18-server — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 June 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL — Multiple vulnerabilities Related CVEs: CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 CVE-2026-6472 CVE-2026-6473 CVE-2026-6474  +8 more Upstream summary: The PostgreSQL project reports: Missing authorization in PostgreSQL CREATE TYPE allows an […]

Read more
NetBSD 10.0 — inetutils — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — inetutils — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2005-0469 CVE-2023-40303 CVE-2026-24061 CVE-2026-28372 CVE-2022-39028 CVE-2026-32746 CVE-2021-40491 CVE-2026-32772 Upstream summary: pkgsrc audit-packages flagged inetutils-[0-9]* for vulnerability class 'remote-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2005-0469 Table of contents Symptom & Impact Environment & Reproduction […]

Read more
FreeBSD 15 — bind910-base — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — bind910-base — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bind — denial of service vulnerability Related CVEs: CVE-2015-1349 CVE-2015-4620 CVE-2015-5477 CVE-2015-5722 CVE-2015-5986 Upstream summary: ISC reports: An incorrect boundary check in openpgpkey_61.c can cause named to terminate due to […]

Read more
CHAT