BSD

NetBSD 9.4 — dropbear — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — dropbear — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • January 16, 2025
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2005-4178 CVE-2007-1099 CVE-2012-0920 CVE-2016-7406 CVE-2016-7407 CVE-2016-7408 CVE-2017-9078 CVE-2025-14282  +12 more Upstream summary: pkgsrc audit-packages flagged dropbear<0.46nb1 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2005-4178 Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 14 — mariadb55-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mariadb55-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • January 16, 2025
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 16 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MariaDB — Vulnerability in C API Related CVEs: CVE-2015-3194 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836  +12 more Upstream summary: MariaDB reports: Difficult to exploit vulnerability allows unauthenticated attacker with […]

Read more
FreeBSD 14 — mod_perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mod_perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • January 15, 2025
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 15 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_perl — cross-site scripting Related CVEs: CVE-2007-1349 CVE-2009-0796 Upstream summary: Secunia reports: Certain input passed to the "Apache::Status" and "Apache2::Status" modules is not properly sanitised before being returned to the […]

Read more
NetBSD 10.0 — so — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — so — vulnerability — patch and remediation guide

  • January 15, 2025
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged so-[0-9]* for vulnerability class 'unknown'. Reference: https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

Read more
FreeBSD 13 — gstreamer1-plugins-opus — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — gstreamer1-plugins-opus — vulnerability — patch and remediation guide

  • January 15, 2025
  • BSD
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 15 January 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gstreamer1-plugins-opus — Stack buffer-overflow in Opus decoder Related CVEs: CVE-2024-47607 Upstream summary: The GStreamer Security Center reports: Stack buffer-overflow in Opus decoder that can cause crashes for certain input files. […]

Read more
NetBSD 10.0 — php56-mbstring — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — php56-mbstring — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • January 15, 2025
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-9023 CVE-2016-5768 Upstream summary: pkgsrc audit-packages flagged php56-mbstring<5.6.40 for vulnerability class 'heap-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-9023 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
FreeBSD 14 — pivotx — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — pivotx — multiple vulnerabilities (3 CVEs) — patch and remediation guide

  • January 15, 2025
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 15 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pivotx — Multiple unrestricted file upload vulnerabilities Related CVEs: CVE-2011-1035 CVE-2012-2274 CVE-2014-0341 Upstream summary: Pivotx reports: Multiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow remote authenticated […]

Read more
NetBSD 10.0 — ipa — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — ipa — vulnerability — patch and remediation guide

  • January 15, 2025
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged ipa<1.2.7 for vulnerability class 'local-access'. Reference: http://www.NetBSD.org/cgi-bin/query-pr-single.pl?number=17434 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

Read more
FreeBSD 12 — wolfssl — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — wolfssl — multiple vulnerabilities (13 CVEs) — patch and remediation guide

  • January 15, 2025
  • BSD
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 15 January 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wolfssl — multiple issues Related CVEs: CVE-2015-6925 CVE-2015-7744 CVE-2020-12966 CVE-2021-46744 CVE-2022-34293 CVE-2025-11931 CVE-2025-11932 CVE-2025-11933  +5 more Upstream summary: wolfSSL blog reports: This release includes multiple fixes across TLS 1.2, TLS […]

Read more
FreeBSD 14 — e2fsprogs — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — e2fsprogs — multiple vulnerabilities (6 CVEs) — patch and remediation guide

  • January 15, 2025
  • BSD
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 15 January 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: e2fsprogs — out-of-bounds read/write vulnerability Related CVEs: CVE-2007-5497 CVE-2015-0247 CVE-2015-1572 CVE-2019-5094 CVE-2019-5188 CVE-2022-1304 Upstream summary: Nils Bars reports: During the processing of [a specially fuzzed disk image], an out-of-bounds write […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT