BSD

FreeBSD 14 — xdelta — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — xdelta — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xdelta3 — buffer overflow vulnerability Related CVEs: CVE-2014-9765 Upstream summary: Stepan Golosunov reports: Buffer overflow was found and fixed in xdelta3 binary diff tool that allows arbitrary code execution from […]

Read more
FreeBSD 14 — py27-requests — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py27-requests — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: www/py-requests — Information disclosure vulnerability Upstream summary: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which […]

Read more
NetBSD 10.0 — suse_libsndfile — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — suse_libsndfile — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2015-7805 CVE-2017-7585 CVE-2017-7586 CVE-2017-7741 CVE-2017-7742 CVE-2017-8365 CVE-2017-8363 CVE-2017-8361  +2 more Upstream summary: pkgsrc audit-packages flagged suse{,32}_libsndfile<13.1nb2 for vulnerability class 'unknown'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7805 Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 14 — ffmpeg-devel — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ffmpeg-devel — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2015-6761 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822 CVE-2015-6823 CVE-2015-6824  +11 more Upstream summary: NVD reports: The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does […]

Read more
FreeBSD 13 — libgit — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libgit — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 November 2024 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Libgit2 — multiple vulnerabilities Related CVEs: CVE-2018-10887 CVE-2018-10888 CVE-2018-11235 CVE-2018-17456 CVE-2024-24577 Upstream summary: Git community reports: A bug in git_revparse_single is fixed that could have caused the function to enter […]

Read more
NetBSD 10.0 — netscape8 — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — netscape8 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged netscape8<8.0.3.3 for vulnerability class 'cross-site-scripting'. Reference: http://secunia.com/advisories/15553/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

Read more
FreeBSD 14 — ja-mutt — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ja-mutt — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mutt — denial of service via crafted mail message Related CVEs: CVE-2004-0078 CVE-2007-2683 CVE-2014-9116 Upstream summary: NVD reports: The write_one_header function in mutt 1.5.23 does not properly handle newline characters […]

Read more
FreeBSD 14 — linux-c7-libsamplerate — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — linux-c7-libsamplerate — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libsamplerate — multiple vulnerabilities Related CVEs: CVE-2017-7697 Upstream summary: NVD reports: In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file. […]

Read more
NetBSD 10.0 — mingw-w64 — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — mingw-w64 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-5392 Upstream summary: pkgsrc audit-packages flagged mingw-w64-[0-9]* for vulnerability class 'unspecified'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-5392 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
FreeBSD 14 — py310-tflite — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py310-tflite — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-tflite — buffer overflow vulnerability Related CVEs: CVE-2021-37689 CVE-2022-41894 Upstream summary: Thibaut Goetghebuer-Planchon reports: The reference kernel of the CONV_3D_TRANSPOSE TensorFlow Lite operator wrongly increments the data_ptr when adding the […]

Read more
CHAT