FreeBSD

FreeBSD 14 — cups — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — cups — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 July 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cups — security vulnerabilities Related CVEs: CVE-2019-8675 CVE-2019-8696 CVE-2019-8842 CVE-2020-3898 CVE-2024-47076 CVE-2024-47175 CVE-2024-47176 CVE-2025-58060  +1 more Upstream summary: OpenPrinting reports: When the AuthType is set to anything but Basic, if […]

Read more
FreeBSD 14 — mod_http — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — mod_http — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 July 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_http2 — Multiple vulnerabilities Related CVEs: CVE-2020-11984 CVE-2020-11993 CVE-2020-9490 CVE-2024-24795 CVE-2024-27316 CVE-2024-38709 CVE-2025-49630 CVE-2025-53020 Upstream summary: The mod_http2 project reports: a client can increase memory consumption for a HTTP/2 connection […]

Read more
FreeBSD 13 — py312-h — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — py312-h — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 July 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: h11 accepts some malformed Chunked-Encoding bodies Related CVEs: CVE-2025-43859 Upstream summary: h11 reports: h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of […]

Read more
FreeBSD 14 — linux_base-rl9 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — linux_base-rl9 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 July 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: SQLite — Integer Overflow vulnerability Related CVEs: CVE-2025-29088 CVE-2025-52099 Upstream summary: http://sqlite3.com reports: Integer Overflow vulnerability in SQLite SQLite3 v.3.50.0 allows a remote attacker to cause a denial of service […]

Read more
FreeBSD 14 — py313-spotipy — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py313-spotipy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: spotipy — CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Related CVEs: CVE-2025-66040 Upstream summary: https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-r77h-rpp9-w2xm reports: Spotipy is a Python library for the Spotify Web API. […]

Read more
FreeBSD 14 — sudo — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — sudo — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 11 July 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sudo — privilege escalation vulnerability through host and chroot options Related CVEs: CVE-2005-1993 CVE-2005-2959 CVE-2009-0034 CVE-2010-0426 CVE-2010-1163 CVE-2010-1646 CVE-2010-2956 CVE-2011-0010  +12 more Upstream summary: Todd C. Miller reports, crediting Rich […]

Read more
FreeBSD 12 — openh — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — openh — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 July 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cisco — OpenH264 Decoding Functions Heap Overflow Vulnerability Related CVEs: CVE-2004-0097 CVE-2025-27091 Upstream summary: Cisco reports: A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, […]

Read more
FreeBSD 13 — powerdns_recursor — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — powerdns_recursor — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 July 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: powerdns-recursor — cache pollution Related CVEs: CVE-2025-59023 CVE-2025-59024 Upstream summary: PowerDNS Team reports: It has been brought to our attention that the Recursor does not apply strict enough validation of […]

Read more
FreeBSD 13 — thunderbird-esr — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — thunderbird-esr — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 July 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Mozilla — Memory safety bugs Related CVEs: CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032 CVE-2025-8033 CVE-2025-8034  +7 more Upstream summary: Mozilla reports: Memory safety bugs present in Firefox ESR, Firefox ESR, […]

Read more
FreeBSD 12 — libxml — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libxml — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 July 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libxml2 — multiple vulnerabilities Related CVEs: CVE-2004-0110 CVE-2004-0989 CVE-2008-3281 CVE-2008-3529 CVE-2008-4225 CVE-2008-4226 CVE-2009-2414 CVE-2009-2416  +12 more Upstream summary: Alan Coopersmith reports: As discussed in https://gitlab.gnome.org/GNOME/libxml2/-/issues/913 the security policy of libxml2 […]

Read more
CHAT