NetBSD 10.0 — ap-auth-mellon — multiple vulnerabilities (5 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-6807 CVE-2019-13038 CVE-2021-3639 CVE-2014-8566 CVE-2014-8567 Upstream summary: pkgsrc audit-packages flagged ap{22,24}-auth-mellon<0.13.1 for vulnerability class 'cross-site-session-transfer'. Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6807 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]