BSD

FreeBSD 14 — netqmail-tls — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — netqmail-tls — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qmail — 64 bit integer overflows with possible remote code execution on large SMTP requests Related CVEs: CVE-2005-1513 CVE-2005-1514 CVE-2005-1515 Upstream summary: Georgi Guninski writes: There are several issues with […]

Read more
NetBSD 10.0 — stalin — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — stalin — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2015-8697 Upstream summary: pkgsrc audit-packages flagged stalin-[0-9]* for vulnerability class 'arbitrary-file-overwrite'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2015-8697 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
FreeBSD 14 — ghostscript-afpl — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ghostscript-afpl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 December 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — insecure temporary file creation vulnerability Related CVEs: CVE-2004-0967 Upstream summary: Ghostscript is affected by an insecure temporary file creation vulnerability. This issue is likely due to a design […]

Read more
NetBSD 10.0 — libXrender — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — libXrender — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-7950 CVE-2016-7949 Upstream summary: pkgsrc audit-packages flagged libXrender<0.9.8 for vulnerability class 'buffer-overflow'. Reference: http://www.x.org/wiki/Development/Security/Advisory-2013-05-23 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
FreeBSD 13 — postgresql12-server — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — postgresql12-server — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 December 2024 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL — SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID Related CVEs: CVE-2020-1720 CVE-2021-23214 CVE-2021-23222 CVE-2021-3677 CVE-2022-1552 CVE-2024-10976 CVE-2024-10978 CVE-2024-7348 Upstream summary: PostgreSQL project reports: Incorrect privilege assignment […]

Read more
NetBSD 10.0 — knot — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — knot — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-11104 CVE-2018-1000002 CVE-2018-10920 CVE-2020-12667 CVE-2022-32983 CVE-2016-6171 CVE-2014-0486 CVE-2019-19331  +3 more Upstream summary: pkgsrc audit-packages flagged knot<1.4.5 for vulnerability class 'signature-spoofing'. Reference: https://www.knot-dns.cz/ Table of contents Symptom & Impact Environment […]

Read more
NetBSD 10.0 — go-dns — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — go-dns — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-19794 CVE-2018-17419 Upstream summary: pkgsrc audit-packages flagged go-dns<1.1.25 for vulnerability class 'insufficiently-random-numbers'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-19794 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
NetBSD 10.0 — tiff — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — tiff — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2006-2025 CVE-2006-2026 CVE-2008-2327 CVE-2009-2347 CVE-2010-1411 CVE-2010-2067 CVE-2011-0192 CVE-2011-1167  +12 more Upstream summary: pkgsrc audit-packages flagged tiff<3.6.1nb4 for vulnerability class 'remote-code-execution'. Reference: http://scary.beasts.org/security/CESA-2004-006.txt Table of contents Symptom & Impact Environment […]

Read more
NetBSD 10.0 — nethack-lib — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — nethack-lib — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-19905 CVE-2020-5209 CVE-2020-5210 CVE-2020-5211 CVE-2020-5212 CVE-2020-5213 CVE-2020-5214 CVE-2020-5253  +1 more Upstream summary: pkgsrc audit-packages flagged nethack-lib<3.6.4 for vulnerability class 'privilege-escalation'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-19905 Table of contents Symptom & Impact Environment […]

Read more
NetBSD 10.0 — bogofilter — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — bogofilter — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2012-5468 Upstream summary: pkgsrc audit-packages flagged bogofilter<1.2.2 for vulnerability class 'denial-of-service'. Reference: http://secunia.com/advisories/40427/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
CHAT