Package Management

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged pam-ldap<180 for vulnerability class 'information-disclosure'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2069 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged hylafax{,nb*} for vulnerability class 'local-command-execution'. Reference: http://secunia.com/advisories/18314/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-31979 CVE-2023-41633 CVE-2024-48877 CVE-2024-52035 CVE-2024-54028 CVE-2023-46345 CVE-2017-11110 Upstream summary: pkgsrc audit-packages flagged catdoc<0.91.5.2 for vulnerability class 'local-file-write'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0193 Table of contents Symptom & Impact Environment & Reproduction Root […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-15890 CVE-2020-24372 CVE-2024-25176 CVE-2024-25178 CVE-2024-25177 Upstream summary: pkgsrc audit-packages flagged LuaJIT2<2.1.1713773202 for vulnerability class 'out-of-bounds-read'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-15890 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2019-6446 CVE-2014-1858 CVE-2014-1859 CVE-2017-12852 CVE-2021-41496 CVE-2021-34141 CVE-2021-41495 CVE-2021-33430 Upstream summary: pkgsrc audit-packages flagged py{27,34,35,36,37,38}-numpy-[0-9]* for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-6446 Table of contents Symptom & Impact Environment & Reproduction […]