FreeBSD 13

FreeBSD 13 — qt5-webengine — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — qt5-webengine — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 May 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qt5-webengine — Use after free in Compositing Related CVEs: CVE-2023-5997 CVE-2023-6112 CVE-2023-6345 CVE-2023-6346 CVE-2023-6347 CVE-2023-6348 CVE-2023-6350 CVE-2023-6351  +12 more Upstream summary: Qt qtwebengine-chromium repo reports: Backports for 1 security bug […]

Read more
FreeBSD 13 — libwasmtime — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — libwasmtime — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libwasmtime — host panic with fd_renumber WASIp1 function Related CVEs: CVE-2025-53901 Upstream summary: WasmTime development team reports: A bug in Wasmtime's implementation of the WASIp1 set of import functions can […]

Read more
FreeBSD 13 — py311-mysql-connector-python — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py311-mysql-connector-python — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-mysql-connector-python — Vulnerability in the MySQL Connectors product of Oracle MySQL Related CVEs: CVE-2025-21548 Upstream summary: Oracle reports: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported […]

Read more
FreeBSD 13 — fluidsynth — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — fluidsynth — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 May 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fluidsynth — Use after free when using DLS files Related CVEs: CVE-2025-68617 Upstream summary: The fluidsynth authors report: A race condition during unloading of a DLS file can trigger a […]

Read more
FreeBSD 13 — git — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — git — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 May 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: git — multiple vulnerabilities Related CVEs: CVE-2009-2108 CVE-2010-2542 CVE-2014-9390 CVE-2015-7545 CVE-2016-2315 CVE-2016-2324 CVE-2018-11233 CVE-2018-11235  +12 more Upstream summary: Git development team reports: CVE-2025-27613: Gitk: When a user clones an untrusted […]

Read more
FreeBSD 13 — py39-spotipy — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py39-spotipy — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 May 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Spotipy — Spotipy's cache file, containing spotify auth token, is created with overly broad permissions Related CVEs: CVE-2023-23608 CVE-2025-27154 Upstream summary: [email protected] reports: Spotipy is a lightweight Python library for […]

Read more
FreeBSD 13 — py39-social-auth-app-django — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py39-social-auth-app-django — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 May 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2024-32879 CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not […]

Read more
FreeBSD 13 — xorg-nextserver — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xorg-nextserver — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 May 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xorg server — Multiple vulnerabilities Related CVEs: CVE-2023-6816 CVE-2024-0229 CVE-2024-21885 CVE-2024-21886 CVE-2024-31080 CVE-2024-31081 CVE-2024-31083 CVE-2025-26594  +12 more Upstream summary: The X.Org project reports: CVE-2025-49176: Integer overflow in Big Requests Extension […]

Read more
FreeBSD 13 — qt5-networkauth — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — qt5-networkauth — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 April 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: QtNetworkAuth — predictable seeding of PRNG in QAbstractOAuth Related CVEs: CVE-2024-36048 Upstream summary: Andy Shaw reports: The OAuth1 implementation in QtNetworkAuth created nonces using a PRNG that was seeded with […]

Read more
FreeBSD 13 — vim-gtk — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — vim-gtk — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 April 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vim — Improper Input Validation in Vim Related CVEs: CVE-2008-3076 CVE-2025-27423 Upstream summary: [email protected] reports: Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed […]

Read more
CHAT