BSD

FreeBSD 14 — scponly — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — scponly — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: scponly — local privilege escalation exploits Upstream summary: Max Vozeler reports: If ALL the following conditions are true, administrators using scponly-4.1 or older may be at risk of a local […]

Read more
FreeBSD 13 — py310-borgbackup — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py310-borgbackup — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2024 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Borg (Backup) — flaw in cryptographic authentication scheme in Borg allowed an attacker to fake archives and indirectly cause backup data loss. Related CVEs: CVE-2023-36811 Upstream summary: Thomas Waldmann reports: […]

Read more
NetBSD 10.0 — openldap-client — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — openldap-client — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2009-3767 CVE-2012-2668 CVE-2006-5779 CVE-2008-2952 Upstream summary: pkgsrc audit-packages flagged openldap-client<2.4.18 for vulnerability class 'man-in-the-middle-attack'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3767 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

Read more
FreeBSD 14 — rawstudio — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — rawstudio — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]

Read more
NetBSD 10.0 — chocolate-doom — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — chocolate-doom — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-14983 Upstream summary: pkgsrc audit-packages flagged chocolate-doom<3.0.1 for vulnerability class 'buffer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-14983 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
NetBSD 10.0 — lha — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 10.0

NetBSD 10.0 — lha — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2006-4337 CVE-2006-4335 CVE-2006-4338 Upstream summary: pkgsrc audit-packages flagged lha<1.14i for vulnerability class 'local-code-execution'. Reference: http://www2m.biglobe.ne.jp/~dolphin/lha/lha-unix.htm Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
FreeBSD 14 — gd — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — gd — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libgd — integer overflow which could lead to heap buffer overflow Related CVEs: CVE-2004-0990 CVE-2007-3472 CVE-2007-3473 CVE-2007-3474 CVE-2007-3475 CVE-2007-3476 CVE-2007-3477 CVE-2007-3478  +5 more Upstream summary: LibGD reports: An integer overflow […]

Read more
NetBSD 9.4 — php71-imap — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — php71-imap — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-19518 CVE-2018-19935 Upstream summary: pkgsrc audit-packages flagged php71-imap<7.1.25 for vulnerability class 'command-injection'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-19518 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
FreeBSD 14 — vte — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — vte — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vte — Classic terminal title set+query attack Related CVEs: CVE-2010-2713 Upstream summary: Kees Cook reports: Janne Snabb discovered that applications using VTE, such as gnome-terminal, did not correctly filter window […]

Read more
NetBSD 9.4 — php70-curl — vulnerability — patch and remediation guide — diagnosis and fix on NetBSD 9.4

NetBSD 9.4 — php70-curl — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2016-7134 Upstream summary: pkgsrc audit-packages flagged php70-curl<7.0.10 for vulnerability class 'heap-overflow'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7134 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

Read more
CHAT