Description
In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in libfetch with URLs containing username and/or password components is vulnerable to a heap buffer overflow allowing program misbehavior or malicious code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | FreeBSD | 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, 11.3-RELEASE before 11.3-RELEASE-p6 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | xbps | 0.58-r0 | — |
| Alpine v3.23 | xbps | 0.58-r0 | — |
| Alpine v3.22 | xbps | 0.58-r0 | — |
| Alpine v3.21 | xbps | 0.58-r0 | — |
| Alpine v3.20 | xbps | 0.58-r0 | — |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | xbps | 0.58-r0 | — |
| Alpine v3.18 | xbps | 0.58-r0 | — |
| Alpine v3.17 | xbps | 0.58-r0 | — |
| Alpine v3.16 | xbps | 0.58-r0 | — |
| Alpine v3.15 | xbps | 0.58-r0 | — |
| Alpine v3.14 | xbps | 0.58-r0 | — |
| Alpine v3.13 | xbps | 0.58-r0 | — |
| Alpine v3.12 | xbps | 0.58-r0 | — |
Advisories 2
- NCSC-2026-0224 Kwetsbaarheden verholpen in Juniper Networks Junos OS en Junos OS Evolved NCSC-NL (Netherlands) · Jul 13, 2026
- WID-SEC-2026-2257 Juniper JUNOS und JUNOS Evolved: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 9, 2026