🟢 Low ⏱ 5–15 min Last verified: 31 August 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: vim — Improper Input Validation in Vim Related CVEs: CVE-2025-27423 Upstream summary: [email protected] reports: Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or […]
🟢 Low ⏱ 5–15 min Last verified: 31 August 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: smb4k — Critical vulnerabilities in Mount Helper Related CVEs: CVE-2025-66002 CVE-2025-66003 Upstream summary: vulndb reports: A vulnerability, which was classified as critical, was found in smb4k up to 4.0.4. Affected […]
🟢 Low ⏱ 5–15 min Last verified: 27 August 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: h11 accepts some malformed Chunked-Encoding bodies Related CVEs: CVE-2025-43859 Upstream summary: h11 reports: h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of […]
🟢 Low ⏱ 5–15 min Last verified: 26 August 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]
🟡 Medium ⏱ 10–30 min Last verified: 24 August 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: quiche — Infinite loop triggered by connection ID retirement Related CVEs: CVE-2024-1410 CVE-2024-1765 CVE-2025-4820 CVE-2025-4821 CVE-2025-7054 Upstream summary: Quiche Releases reports: This update includes 1 security fix: High CVE-2025-7054: Infinite […]
🟠 High ⏱ 15–60 min Last verified: 23 August 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: FreeBSD — Multiple vulnerabilities in OpenSSH Related CVEs: CVE-2006-4924 CVE-2006-5051 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 CVE-2015-6565 CVE-2015-8325 CVE-2016-0777 +12 more Upstream summary: Problem Description: OpenSSH client host verification error (CVE-2025-26465) ssh(1) contains […]
🟠 High ⏱ 5–30 min Last verified: 23 August 2025 Affected versions: FreeBSD 14 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 20 August 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ISC KEA — Invalid characters cause assert Related CVEs: CVE-2025-11232 CVE-2025-40779 Upstream summary: Internet Systems Consortium, Inc. reports: To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" […]
🟢 Low ⏱ 5–15 min Last verified: 10 August 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: step-certificates — Authorization Bypass in ACME and SCEP Provisioners Related CVEs: CVE-2025-44005 Upstream summary: smallstep reports: An attacker can bypass authorization checks and force a Step CA ACME or SCEP […]
🟠 High ⏱ 5–30 min Last verified: 8 August 2025 Affected versions: FreeBSD 14 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
