FreeBSD 15

FreeBSD 15 — horde-base — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — horde-base — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: horde-base — XSS: VCARD attachments vulnerability Related CVEs: CVE-2008-3823 CVE-2008-3824 Upstream summary: The Horde team reports: The major changes compared to Horde version 3.3.10 are: * Fixed XSS vulnerability when […]

Read more
FreeBSD 15 — py37-cryptography — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py37-cryptography — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-cryptography — includes a vulnerable copy of OpenSSL Related CVEs: CVE-2018-10903 CVE-2023-0286 CVE-2023-23931 Upstream summary: pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in […]

Read more
FreeBSD 15 — mdbook — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — mdbook — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mdbook — XSS in mdBook's search page Related CVEs: CVE-2020-26297 Upstream summary: Rust Security Response Working Group reports: The search feature of mdBook (introduced in version 0.1.4) was affected by […]

Read more
FreeBSD 15 — bogofilter — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — bogofilter — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bogofilter — heap corruption by invalid base64 input Related CVEs: CVE-2004-1007 CVE-2005-4591 CVE-2005-4592 CVE-2010-2494 CVE-2012-5468 Upstream summary: David Relson reports: Fix a heap corruption in base64 decoder on invalid input. […]

Read more
FreeBSD 15 — zh-phpbb-tw — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — zh-phpbb-tw — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: phpbb — NULL byte injection vulnerability Related CVEs: CVE-2005-3310 CVE-2005-3415 CVE-2005-3416 CVE-2005-3417 CVE-2005-3418 CVE-2005-3419 CVE-2005-3420 CVE-2005-3536  +2 more Upstream summary: Secunia reports: ShAnKaR has discovered a vulnerability in phpBB, which […]

Read more
FreeBSD 15 — zh_TW-wordpress — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — zh_TW-wordpress — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wordpress — multiple issues Upstream summary: wordpress developers reports: Ten security issues affect WordPress versions 5.5.1 and earlier. If you havent yet updated to 5.5, all WordPress versions since 3.7 […]

Read more
FreeBSD 15 — unbound — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — unbound — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unbound — Possible domain hijacking via promiscuous records in the authority section Related CVEs: CVE-2011-1922 CVE-2011-4528 CVE-2014-8602 CVE-2017-15105 CVE-2019-16866 CVE-2019-18934 CVE-2020-12662 CVE-2020-12663  +10 more Upstream summary: [email protected] reports: NLnet Labs […]

Read more
FreeBSD 15 — rubygem-activejob — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — rubygem-activejob — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Rails — Active Job vulnerability Related CVEs: CVE-2018-16476 Upstream summary: Ruby on Rails blog: Rails 4.2.11, 5.0.7.1, 5.1.6.1 and 5.2.1.1 have been released! These contain the following important security fixes, […]

Read more
FreeBSD 15 — py310-treq — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — py310-treq — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-treq — sensitive information leak vulnerability Related CVEs: CVE-2022-23607 Upstream summary: Treq's request methods (`treq.get`, `treq.post`, `HTTPClient.request`, `HTTPClient.get`, etc.) accept cookies as a dictionary. Such cookies are not bound to […]

Read more
FreeBSD 15 — php55-pgsql — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 15

FreeBSD 15 — php55-pgsql — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 December 2025 Affected versions: FreeBSD 15 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php5 — multiple vulnerabilities Related CVEs: CVE-2015-4643 CVE-2015-4644 Upstream summary: The PHP project reports: DOM and GD: Fixed bug #69719 (Incorrect handling of paths with NULs). FTP: Improved fix for […]

Read more
CHAT