BSD

FreeBSD 13 — qt5-network — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — qt5-network — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: QtNetwork — potential buffer overflow Related CVEs: CVE-2023-51714 Upstream summary: Andy Shaw reports: A potential integer overflow has been discovered in Qt's HTTP2 implementation. If the HTTP2 implementation receives more […]

Read more
NetBSD 9.4 — py-flower — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — py-flower — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-16925 CVE-2019-16926 CVE-2022-30034 Upstream summary: pkgsrc audit-packages flagged py{27,34,35,36,37,38}-flower-[0-9]* for vulnerability class 'cross-site-scripting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-16925 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
NetBSD 9.4 — leptonica — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — leptonica — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-7247 CVE-2018-7440 CVE-2018-7441 CVE-2018-7442 CVE-2017-18196 CVE-2018-3836 CVE-2020-36278 CVE-2020-36279  +5 more Upstream summary: pkgsrc audit-packages flagged leptonica<1.76.0 for vulnerability class 'buffer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-7247 Table of contents Symptom & Impact Environment […]

Read more
NetBSD 9.4 — go117 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — go117 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-38297 CVE-2021-41771 CVE-2021-44717 CVE-2022-23773 CVE-2022-29526 CVE-2022-32148 CVE-2022-30629 CVE-2022-30580  +12 more Upstream summary: pkgsrc audit-packages flagged go117<1.17.2 for vulnerability class 'buffer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-38297 Table of contents Symptom & Impact Environment […]

Read more
NetBSD 10.0 — ruby-puma — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — ruby-puma — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-5247 CVE-2020-5249 CVE-2020-11076 CVE-2020-11077 CVE-2021-41136 CVE-2019-16770 CVE-2021-29509 CVE-2022-23634  +1 more Upstream summary: pkgsrc audit-packages flagged ruby{22,24,25,26}-puma<4.3.2 for vulnerability class 'http-response-splitting'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-5247 Table of contents Symptom & Impact Environment […]

Read more
NetBSD 10.0 — gcc49 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — gcc49 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2015-5276 CVE-2017-11671 CVE-2018-12886 Upstream summary: pkgsrc audit-packages flagged gcc49{,-libs}<4.9.4 for vulnerability class 'insufficiently-random-numbers'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5276 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
FreeBSD 14 — timidity++-xskin — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — timidity++-xskin — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: TiMidity++ — Multiple vulnerabilities Related CVEs: CVE-2017-11546 CVE-2017-11547 CVE-2017-11549 Upstream summary: qflb.wu of DBAPPSecurity reports: Ihe insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 can cause a denial of service(divide-by-zero error […]

Read more
FreeBSD 13 — frr — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — frr — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: frr – BGP Related CVEs: CVE-2017-15865 CVE-2024-31950 CVE-2024-31951 CVE-2024-44070 Upstream summary: [email protected] reports: An issue was discovered in FRRouting (FRR). bgp_attr_encap in bgpd/bgp_attr.c does not check the actual remaining stream […]

Read more
NetBSD 10.0 — bwm-ng — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — bwm-ng — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2022-1341 Upstream summary: pkgsrc audit-packages flagged bwm-ng<0.6.3 for vulnerability class 'out-of-bounds-write'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-1341 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
NetBSD 10.0 — xine-lib — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — xine-lib — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2006-1664 CVE-2006-2802 CVE-2006-2200 CVE-2006-6172 CVE-2006-4800 CVE-2008-0486 CVE-2008-1686 CVE-2008-1482  +7 more Upstream summary: pkgsrc audit-packages flagged xine-lib<1rc6 for vulnerability class 'remote-code-execution'. Reference: http://www.xinehq.de/index.php/security/XSA-2004-5 Table of contents Symptom & Impact Environment […]

Read more
CHAT