MidnightBSD mport

• CVE-2026-54584 Medium 5.3 mport trusts environment-controlled temporary directories in privileged metadata extraction 0.5%
• CVE-2026-54579 Low 2.3 mport mirror-selection ping accepts insufficiently validated ICMP replies 0.2%
• CVE-2026-54576 Medium 5.8 mport package installation has symlink TOCTOU in chown and chmod handling 0.1%
• CVE-2026-54587 Medium 5.8 mport directory asset installation is vulnerable to symlink and path traversal races 0.1%
• CVE-2026-54575 Medium 5.8 mport package fetch and clean paths are vulnerable to TOCTOU filesystem races 0.1%
• CVE-2026-54578 Low 2.0 mport verify can compare stale checksum data after hashing failures 0.1%
• CVE-2026-54586 Medium 6.0 mport permits repository and package mirror fetches over insecure transport 0.2%
• CVE-2026-54585 Medium 6.0 mport sample file handling can write outside the configured root 0.5%
• CVE-2026-54580 High 8.3 mport index decompression can leave partial or corrupt index data after zstd failures 0.3%
• CVE-2026-54582 Medium 6.0 mport package installation can overwrite existing unmanaged or differently owned files 0.6%
• CVE-2026-54577 Low 2.0 mport audit can inspect the wrong package when options are present 0.2%
• CVE-2026-54583 High 8.3 mport package bundle downloads allow unsafe destination filenames 0.5%
• CVE-2026-54581 High 8.3 mport bootstrap index fetch can continue after hash verification failure 0.2%