Package Management

FreeBSD 15 — ru-apache+mod_ssl — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — ru-apache+mod_ssl — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2003-0993 CVE-2004-0700 CVE-2004-0885 CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using […]

Read more
FreeBSD 14 — jabber — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — jabber — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fd_set — bitmap index overflow in multiple applications Related CVEs: CVE-2004-1378 Upstream summary: 3APA3A reports: If programmer fails to check socket number before using select() or fd_set macros, it's possible […]

Read more
FreeBSD 13 — openoffice — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — openoffice — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — arbitrary command execution vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 CVE-2007-2834 Upstream summary: iDefense reports: Remote exploitation of multiple integer overflow vulnerabilities within OpenOffice, as included in various vendors' operating […]

Read more
FreeBSD 12 — kea — multiple vulnerabilities (9 CVEs) — patch and remediation guide

FreeBSD 12 — kea — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ISC KEA — Invalid characters cause assert Related CVEs: CVE-2015-8373 CVE-2019-6472 CVE-2019-6473 CVE-2019-6474 CVE-2025-11232 CVE-2025-32801 CVE-2025-32802 CVE-2025-32803  +1 more Upstream summary: Internet Systems Consortium, Inc. reports: To trigger the issue, […]

Read more
FreeBSD 13 — lynx — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — lynx — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: lynx — SSL certificate validation error Related CVEs: CVE-2005-3120 CVE-2014-3566 CVE-2016-9179 Upstream summary: Axel Beckert reports: […] I was able to capture the password given on the commandline in traffic […]

Read more
FreeBSD 14 — py27-notebook — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py27-notebook — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Jupyter notebook — open redirect vulnerability Related CVEs: CVE-2018-8768 CVE-2019-10255 Upstream summary: Jupyter blog: Login pages tend to take a parameter for redirecting back to a page after successful login, […]

Read more
FreeBSD 12 — mambo — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mambo — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mambo — multiple SQL injection vulnerabilities Related CVEs: CVE-2005-2002 CVE-2006-0871 CVE-2006-1794 CVE-2006-3262 CVE-2006-3263 Upstream summary: James Bercegay reports: Mambo is vulnerable to an Authentication Bypass issue that is due to […]

Read more
FreeBSD 12 — bind96-base — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — bind96-base — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bind — denial of service vulnerability Related CVEs: CVE-2012-5166 CVE-2013-3919 CVE-2014-0591 CVE-2014-8500 CVE-2014-8680 Upstream summary: ISC reports: We have today posted updated versions of 9.9.6 and 9.10.1 to address a […]

Read more
FreeBSD 12 — kanboard — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — kanboard — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kanboard — Password Reset Poisoning via Host Header Injection Related CVEs: CVE-2017-12850 CVE-2017-12851 CVE-2024-36399 CVE-2024-55603 CVE-2025-52560 Upstream summary: GitHub Security Advisories reports: Kanboard allows password reset emails to be sent […]

Read more
FreeBSD 12 — consul — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — consul — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: consul — rpc: authorize raft requests Related CVEs: CVE-2017-15133 CVE-2020-25864 CVE-2020-28053 CVE-2021-28156 CVE-2021-37219 Upstream summary: Hashicorp reports: HashiCorp Consul Raft RPC layer allows non-server agents with a valid certificate signed […]

Read more
CHAT