Package Management

🟠 High   ⏱ 15–60 min  Last verified: 16 April 2026 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Vulnerability found in Expat Related CVEs: CVE-2009-3560 CVE-2009-3720 CVE-2012-6702 CVE-2013-0340 CVE-2016-0718 CVE-2016-4472 CVE-2016-5300 CVE-2016-9063  +11 more Upstream summary: Expat 2.8.1 was released yesterday. The key motivation for cutting a release […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openslp — denial of service vulnerability Related CVEs: CVE-2015-5155 Upstream summary: Qinghao Tang reports: The function ParseExtension() in openslp 1.2.1 contains vulnerability: an attacker can cause a denial of service […]

🟠 High   ⏱ 15–60 min  Last verified: 16 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: advancecomp — Multiple vulnerabilities Related CVEs: CVE-2018-1056 CVE-2019-8379 CVE-2019-8383 CVE-2019-9210 CVE-2022-35014 CVE-2022-35015 CVE-2022-35016 CVE-2022-35017  +3 more Upstream summary: GitHub advisories reports: Multiple vulnerabilities found in advancecomp including: Three segmentation faults. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 April 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nghttp2 — CWE-617: Reachable Assertion Related CVEs: CVE-2018-1000168 CVE-2019-9511 CVE-2019-9513 CVE-2020-11080 CVE-2026-27135 Upstream summary: https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6 reports: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: milter-bogom — headerless message crash Upstream summary: Juan J. Marítnez reports: The milter crashes while processing a headerless message Impact: bogom crashes and sendmail moves it to error state Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: TiMidity++ — Multiple vulnerabilities Related CVEs: CVE-2017-11546 CVE-2017-11547 CVE-2017-11549 Upstream summary: qflb.wu of DBAPPSecurity reports: Ihe insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 can cause a denial of service(divide-by-zero error […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: patch — multiple vulnerabilities Related CVEs: CVE-2018-1000156 CVE-2018-6951 CVE-2018-6952 Upstream summary: NVD reports: An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a […]

🟠 High   ⏱ 15–60 min  Last verified: 16 April 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zziplib – multiple vulnerabilities Related CVEs: CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5977 CVE-2017-5978 CVE-2017-5979 CVE-2017-5980 CVE-2017-5981  +9 more Upstream summary: NIST reports (by search in the range 2017/01/01 – 2018/07/06): 17 security […]