Security Hardening

🟠 High   ⏱ 15–60 min  Last verified: 4 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: NodeJS — Vulnerabilities Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 CVE-2015-0278 CVE-2015-5380 CVE-2016-0702 CVE-2016-0705  +12 more Upstream summary: Node.js reports: Code injection and privilege escalation through Linux capabilities- (High) http: Reading […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: icinga2 — TLS Certificate Validation Bypass Related CVEs: CVE-2014-2386 CVE-2024-49369 Upstream summary: The Icinga project reports: Icinga is a monitoring system which checks the availability of network resources, notifies users […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ifmail — unsafe set-user-ID application Upstream summary: Niels Heinen reports that ifmail allows one to specify a configuration file. Since ifmail runs set-user-ID `news', this may allow a local attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 February 2026 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: hiawatha — memory leak in PreventSQLi routine Upstream summary: Hugo Leisink reports via private mail to maintainer: The memory leak was introduced in version 7.6. It is in the routing […]