BSD

FreeBSD 12 — py39-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py39-django — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 28 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Django — multiple vulnerabilities Related CVEs: CVE-2021-31542 CVE-2021-45115 CVE-2021-45116 CVE-2021-45452 CVE-2022-28346 CVE-2022-28347 CVE-2022-34265 CVE-2022-36359  +12 more Upstream summary: Django reports: CVE-2025-59681: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() […]

Read more
FreeBSD 15 — py39-notebook — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py39-notebook — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jupyter notebook — open redirect vulnerability Upstream summary: Jupyter reports: 6.1.5 is a security release, fixing one vulnerability: Fix open redirect vulnerability GHSA-c7vm-f5p4-8fqh (CVE to be assigned) Table of contents […]

Read more
FreeBSD 15 — nss-pam-ldapd — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — nss-pam-ldapd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nss-pam-ldapd — file descriptor buffer overflow Related CVEs: CVE-2013-0288 Upstream summary: Garth Mollett reports: A file descriptor overflow issue in the use of FD_SET() in nss-pam-ldapd can lead to a […]

Read more
FreeBSD 15 — libexif — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — libexif — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libexif — multiple vulnerabilities Related CVEs: CVE-2005-0664 CVE-2012-2812 CVE-2012-2813 CVE-2012-2814 CVE-2012-2836 CVE-2012-2837 CVE-2012-2840 CVE-2012-2841  +2 more Upstream summary: Release notes: Lots of fixes exposed by fuzzers like AFL, ClusterFuzz, OSSFuzz […]

Read more
FreeBSD 13 — forgejo — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — forgejo — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Forgejo — Symbolic Link (Symlink) Following Related CVEs: CVE-2023-45288 CVE-2024-24789 CVE-2024-43788 CVE-2025-68937 Upstream summary: https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/13.0.2.md reports: Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server […]

Read more
FreeBSD 15 — fr-cups-lpr — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — fr-cups-lpr — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cups-lpr — lppasswd multiple vulnerabilities Related CVEs: CVE-2004-1268 CVE-2004-1269 CVE-2004-1270 Upstream summary: D. J. Bernstein reports that Bartlomiej Sieka has discovered several security vulnerabilities in lppasswd, which is part of […]

Read more
FreeBSD 15 — openjdk7-jre — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — openjdk7-jre — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: java — multiple vulnerabilities Related CVEs: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 25 new security fixes for […]

Read more
FreeBSD 15 — kanboard — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — kanboard — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kanboard — Password Reset Poisoning via Host Header Injection Related CVEs: CVE-2017-12850 CVE-2017-12851 CVE-2024-36399 CVE-2024-55603 CVE-2025-52560 Upstream summary: GitHub Security Advisories reports: Kanboard allows password reset emails to be sent […]

Read more
FreeBSD 15 — tauthon — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — tauthon — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tauthon — Regular Expression Denial of Service Related CVEs: CVE-2020-8492 Upstream summary: The :class:`~urllib.request.AbstractBasicAuthHandler` class of the :mod:`urllib.request` module uses an inefficient regular expression which can be exploited by an […]

Read more
FreeBSD 15 — libbrotli — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — libbrotli — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: brotli — buffer overflow Related CVEs: CVE-2016-1624 CVE-2016-1968 Upstream summary: Google Chrome Releases reports: [583607] High CVE-2016-1624: Buffer overflow in Brotli. Credit to lukezli. Mozilla Foundation reports: Security researcher Luke […]

Read more
CHAT