BSD

FreeBSD 15 — vaultwarden — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — vaultwarden — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Vaultwarden — Multiple vulnerabilities Related CVEs: CVE-2024-39924 CVE-2024-39925 CVE-2024-39926 CVE-2025-24364 CVE-2025-24365 Upstream summary: The Vaultwarden project reports: GHSA-937x-3j8m-7w7p Unconfirmed Owner Can Purge Entire Organization Vault. GHSA-569v-845w-g82p Cross-Org Group Binding Enables […]

Read more
FreeBSD 15 — sddm — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — sddm — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: X11 Session — SDDM allows unauthorised unlocking Related CVEs: CVE-2018-14345 Upstream summary: MITRE reports: An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not […]

Read more
FreeBSD 15 — rubygem-actionpack — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — rubygem-actionpack — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Rails — XSS vulnerabilities Related CVEs: CVE-2012-3424 CVE-2012-3463 CVE-2012-3464 CVE-2012-3465 CVE-2013-0155 CVE-2013-0156 CVE-2013-1854 CVE-2013-1856  +12 more Upstream summary: Ruby on Rails blog: This is an announcement to let you know […]

Read more
FreeBSD 15 — evince — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — evince — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: evince and atril — command injection vulnerability in CBT handler Related CVEs: CVE-2006-5864 CVE-2017-1000083 Upstream summary: GNOME reports: The comic book backend in evince 3.24.0 (and earlier) is vulnerable to […]

Read more
FreeBSD 15 — p5-HTML-Parser — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — p5-HTML-Parser — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-HTML-Parser — denial of service Related CVEs: CVE-2009-3627 Upstream summary: CVE reports: The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service […]

Read more
FreeBSD 15 — postgresql — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — postgresql — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: postgresql — multiple vulnerabilities Related CVEs: CAN-2005-1409 CAN-2005-1410 CVE-2005-0227 CVE-2005-0244 CVE-2005-0245 CVE-2005-0246 CVE-2005-0247 CVE-2006-2313  +6 more Upstream summary: The PostgreSQL developers report: PostgreSQL allows users to create indexes on the […]

Read more
FreeBSD 15 — kdebase — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — kdebase — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: KDM — local privilege escalation vulnerability Related CVEs: CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-1156 CVE-2004-1157 CVE-2004-1158 CVE-2004-1160 CVE-2004-1171  +6 more Upstream summary: KDE Security Advisory reports: KDM contains a race condition that […]

Read more
FreeBSD 15 — mantis-php — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — mantis-php — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mantis — multiple vulnerabilities Related CVEs: CVE-2018-16514 CVE-2019-15715 CVE-2019-8331 CVE-2020-25288 CVE-2020-25781 CVE-2020-25830 CVE-2020-28413 CVE-2020-35849  +7 more Upstream summary: Mantis 2.25.8 release reports: Security and maintenance release 0032432: Update guzzlehttp/psr7 to […]

Read more
FreeBSD 15 — p5-Imager — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — p5-Imager — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-Imager — possibly exploitable buffer overflow Related CVEs: CVE-2007-1942 CVE-2007-1943 CVE-2007-1946 CVE-2007-1948 Upstream summary: Imager 0.56 and all earlier versions with BMP support have a security issue when reading compressed […]

Read more
CHAT