FreeBSD

FreeBSD 12 — librewolf — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — librewolf — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 October 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Mozilla — memory corruption Related CVEs: CVE-2024-9936 CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241 CVE-2025-0242 CVE-2025-0243  +12 more Upstream summary: [email protected] reports: Memory safety bugs present in Firefox 136 and Thunderbird 136. […]

Read more
FreeBSD 12 — py314-setuptools — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py314-setuptools — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 October 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-setuptools — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2025-47273 Upstream summary: https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, […]

Read more
FreeBSD 12 — cups — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — cups — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 October 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cups — security vulnerabilities Related CVEs: CVE-2019-8675 CVE-2019-8696 CVE-2019-8842 CVE-2020-3898 CVE-2024-47076 CVE-2024-47175 CVE-2024-47176 CVE-2025-58060  +1 more Upstream summary: OpenPrinting reports: When the AuthType is set to anything but Basic, if […]

Read more
FreeBSD 14 — emacs-wayland — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — emacs-wayland — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 October 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Emacs — Arbitrary code execution vulnerability Related CVEs: CVE-2024-53920 CVE-2025-1244 Upstream summary: Problem Description A shell injection vulnerability exists in GNU Emacs due to improper handling of custom man URI […]

Read more
FreeBSD 12 — qt6-base — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — qt6-base — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 October 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qt6-base — DoS in QColorTransferGenericFunction Related CVEs: CVE-2023-51714 CVE-2024-33861 CVE-2025-5992 Upstream summary: Andy Shaw reports: When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial […]

Read more
FreeBSD 12 — kea-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — kea-devel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 October 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ISC KEA — Invalid characters cause assert Related CVEs: CVE-2025-11232 CVE-2025-40779 Upstream summary: Internet Systems Consortium, Inc. reports: To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" […]

Read more
FreeBSD 14 — valkey — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — valkey — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: redis,valkey — Out of bound read due to a bug in LUA Related CVEs: CVE-2024-31227 CVE-2024-31228 CVE-2024-31449 CVE-2024-46981 CVE-2024-51741 CVE-2025-21605 CVE-2025-27151 CVE-2025-32023  +5 more Upstream summary: redis reports: An authenticated […]

Read more
FreeBSD 14 — py313-pdfminer.six — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py313-pdfminer.six — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 September 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-pdfminer.six — Arbitrary Code Execution in pdfminer.six via Crafted PDF Input Related CVEs: CVE-2025-64512 Upstream summary: Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if […]

Read more
FreeBSD 12 — openssh-portable-hpn — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — openssh-portable-hpn — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 September 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: FreeBSD — Multiple vulnerabilities in OpenSSH Related CVEs: CVE-2021-28041 CVE-2021-41617 CVE-2023-38408 CVE-2025-26465 CVE-2025-26466 Upstream summary: Problem Description: OpenSSH client host verification error (CVE-2025-26465) ssh(1) contains a logic error that allows […]

Read more
FreeBSD 13 — unit-java — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — unit-java — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 September 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: unit-java — security vulnerability Related CVEs: CVE-2025-1695 Upstream summary: F5 reports: When NGINX Unit with the Java Language Module is in use, undisclosed requests can lead to an infinite loop […]

Read more
CHAT