Package Management

FreeBSD 15 — thttpd — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — thttpd — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mini_httpd,thttpd — Buffer overflow in htpasswd Upstream summary: Alessio Santoru reports: Buffer overflow in htpasswd. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
FreeBSD 15 — vim — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — vim — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vim — potential data loss with zip.vim and specially crafted zip files Related CVEs: CVE-2004-1138 CVE-2005-2368 CVE-2007-2953 CVE-2008-2712 CVE-2008-3076 CVE-2008-3432 CVE-2016-1248 CVE-2025-27423  +1 more Upstream summary: Vim reports: See https://github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmf […]

Read more
Amazon Linux 2023 — cuda-profiler-api-13-0 — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — cuda-profiler-api-13-0 — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023NVIDIA-2025-168 Related CVEs: CVE-2025-23248 CVE-2025-23255 CVE-2025-23271 CVE-2025-23273 CVE-2025-23274 CVE-2025-23275 CVE-2025-23308 CVE-2025-23338  +3 more Upstream summary: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a […]

Read more
FreeBSD 13 — py313t-dj52-strawberry-graphql — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py313t-dj52-strawberry-graphql — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 March 2026 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-strawberry-graphql — Multiple vulnerabilities Related CVEs: CVE-2026-35523 CVE-2026-35526 Upstream summary: The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to an authentication bypass on WebSocket subscription endpoints. […]

Read more
FreeBSD 15 — mysql94-server — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — mysql94-server — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2026-21929 CVE-2026-21936 CVE-2026-21937 CVE-2026-21941 CVE-2026-21948 CVE-2026-21949 CVE-2026-21950 CVE-2026-21952  +3 more Upstream summary: Oracle reports: Oracle reports multiple vulnerabilities in its MySQL server products. Table […]

Read more
Amazon Linux 2023 — openvpn — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — openvpn — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1312 Related CVEs: CVE-2025-13086 CVE-2026-35058 CVE-2026-40215 CVE-2025-2704 Upstream summary: HMAC verification check: fix incorrect memcmp() call NOTE: https://community.openvpn.net/Security%20Announcements/CVE-2025-13086 (CVE-2025-13086) Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

Read more
FreeBSD 15 — lighttpd — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — lighttpd — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 13 March 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: lighttpd – use-after-free vulnerabilities Related CVEs: CVE-2005-0453 CVE-2007-1869 CVE-2007-1870 CVE-2007-3947 CVE-2007-3948 CVE-2007-3949 CVE-2007-3950 CVE-2007-4727  +11 more Upstream summary: Lighttpd Project reports: Security fixes for Lighttpd: security: process headers after combining […]

Read more
Alpine Linux edge — wolfssl — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Alpine Linux edge

Alpine Linux edge — wolfssl — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 5.9.1-r0 📖 ~4 min read  •  Source: Alpine secdb entry — wolfssl 5.9.1-r0 Related CVEs: CVE-2026-5187 CVE-2026-5188 CVE-2026-5194 CVE-2026-5263 CVE-2026-5264 CVE-2026-5295 CVE-2026-5392 CVE-2026-5446  +12 more Upstream summary: Alpine community repository for vedge ships wolfssl 5.9.1-r0 which […]

Read more
CHAT