FreeBSD 14

FreeBSD 14 — gdk-pixbuf — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — gdk-pixbuf — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gdk-pixbuf2 — a heap buffer overflow Related CVEs: CVE-2004-0782 CVE-2004-0783 CVE-2004-0788 CVE-2015-4491 CVE-2015-7673 CVE-2015-7674 CVE-2025-7345 Upstream summary: [email protected] reports: A flaw exists in gdk-pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and […]

Read more
FreeBSD 14 — mongodb — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mongodb — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MongoDB Server — Multiple vulnerabilities Related CVEs: CVE-2019-2386 CVE-2019-2389 CVE-2019-2390 CVE-2020-7921 CVE-2024-10921 CVE-2024-1351 CVE-2024-8654 CVE-2025-10059  +12 more Upstream summary: https://jira.mongodb.org/browse/SERVER-119981 reports: Computing the MD5 checksum of a malformed BSON object […]

Read more
FreeBSD 14 — unit-java — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — unit-java — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unit-java — security vulnerability Related CVEs: CVE-2025-1695 Upstream summary: F5 reports: When NGINX Unit with the Java Language Module is in use, undisclosed requests can lead to an infinite loop […]

Read more
FreeBSD 14 — roundcube-php — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — roundcube-php — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Roundcube Webmail — Multiple vulnerabilities Related CVEs: CVE-2025-49113 Upstream summary: The Roundcube Webmail project reports: See link for details. No CVE numbers available at the moment. Table of contents Symptom […]

Read more
FreeBSD 14 — privatebin — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — privatebin — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: privatebin XSS Related CVEs: CVE-2025-62796 Upstream summary: privatebin reports: Dragging a file whose filename contains HTML is reflected verbatim into the page via the drag-and-drop helper, so any user who […]

Read more
FreeBSD 14 — p5-Crypt-CBC — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — p5-Crypt-CBC — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-Crypt-CBC — Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Related CVEs: CVE-2025-2814 Upstream summary: Lib-Crypt-CBC project reports: Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand() […]

Read more
FreeBSD 14 — thunderbird-esr — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — thunderbird-esr — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Mozilla — Memory safety bugs Related CVEs: CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032 CVE-2025-8033 CVE-2025-8034  +7 more Upstream summary: Mozilla reports: Memory safety bugs present in Firefox ESR, Firefox ESR, […]

Read more
FreeBSD 14 — linux-rl9-sqlite — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — linux-rl9-sqlite — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sqlite — Integer Truncation on SQLite Related CVEs: CVE-2024-0232 CVE-2025-6965 Upstream summary: [email protected] reports: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could […]

Read more
FreeBSD 14 — py312-setuptools — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py312-setuptools — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-setuptools — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2025-47273 Upstream summary: https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, […]

Read more
FreeBSD 14 — py311-social-auth-app-django — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py311-social-auth-app-django — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2024-32879 CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not […]

Read more
CHAT