BSD

NetBSD 9.4 — py-filelock — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — py-filelock — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-68146 CVE-2026-22701 Upstream summary: pkgsrc audit-packages flagged py{27,39,310,311,312,313,314}-filelock<3.20.1 for vulnerability class 'symlink-attack'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-68146 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
NetBSD 10.0 — py-Glances — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — py-Glances — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-23418 CVE-2026-30930 CVE-2026-32596 CVE-2026-32608 CVE-2026-32610 CVE-2026-32611 CVE-2026-32632 CVE-2026-30928  +3 more Upstream summary: pkgsrc audit-packages flagged py{27,36,37,38,39}-Glances<3.2.1 for vulnerability class 'xml-external-entity'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-23418 Table of contents Symptom & Impact Environment […]

Read more
FreeBSD 15 — ghostscript9-agpl-nox — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — ghostscript9-agpl-nox — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]

Read more
FreeBSD 15 — kea — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — kea — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ISC KEA — Invalid characters cause assert Related CVEs: CVE-2015-8373 CVE-2019-6472 CVE-2019-6473 CVE-2019-6474 CVE-2025-11232 CVE-2025-32801 CVE-2025-32802 CVE-2025-32803  +1 more Upstream summary: Internet Systems Consortium, Inc. reports: To trigger the issue, […]

Read more
FreeBSD 15 — mod_security — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — mod_security — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: www/mod_security — NULL pointer dereference DoS Related CVEs: CVE-2013-1915 CVE-2013-2765 Upstream summary: SecurityFocus reports: When ModSecurity receives a request body with a size bigger than the value set by the […]

Read more
FreeBSD 15 — postgresql15-client — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — postgresql15-client — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL — Multiple vulnerabilities Related CVEs: CVE-2022-41862 CVE-2024-10977 CVE-2024-7348 CVE-2025-1094 CVE-2025-12817 CVE-2025-12818 CVE-2025-4207 CVE-2026-6472  +10 more Upstream summary: The PostgreSQL project reports: Missing authorization in PostgreSQL CREATE TYPE allows an […]

Read more
FreeBSD 15 — pgp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — pgp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gnupg — OpenPGP symmetric encryption vulnerability Related CVEs: CVE-2005-0366 Upstream summary: Serge Mister and Robert Zuccherato reports that the OpenPGP protocol is vulnerable to a cryptographic attack when using symmetric […]

Read more
FreeBSD 15 — gstreamer1-plugins — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — gstreamer1-plugins — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gstreamer1 — multiple vulnerabilities Related CVEs: CVE-2024-47541 CVE-2024-47542 CVE-2024-47600 CVE-2026-1940 CVE-2026-2920 CVE-2026-2921 CVE-2026-2922 CVE-2026-2923  +12 more Upstream summary: The GStreamer project reports multiple security vulnerabilities fixed in the 1.28.3 release: […]

Read more
FreeBSD 15 — py39-rencode — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py39-rencode — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py39-rencode — infinite loop that could lead to Denial of Service Related CVEs: CVE-2021-40839 Upstream summary: NIST reports: The rencode package through 1.0.6 for Python allows an infinite loop in […]

Read more
CHAT