FreeBSD

FreeBSD 12 — py311-dj52-social-auth-app-django — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py311-dj52-social-auth-app-django — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 June 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]

Read more
FreeBSD 14 — py310-dj51-social-auth-app-django — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py310-dj51-social-auth-app-django — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Unsafe account association Related CVEs: CVE-2025-61783 Upstream summary: Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associate_by_email pipeline was not included. […]

Read more
FreeBSD 14 — py314-pdfminer.six — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py314-pdfminer.six — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-pdfminer.six — Arbitrary Code Execution in pdfminer.six via Crafted PDF Input Related CVEs: CVE-2025-64512 Upstream summary: Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if […]

Read more
FreeBSD 14 — libreoffice — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — libreoffice — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libreoffice — Macro URL arbitrary script execution Related CVEs: CVE-2015-1774 CVE-2016-4324 CVE-2018-6871 CVE-2020-12802 CVE-2020-12803 CVE-2025-1080 Upstream summary: [email protected] reports: LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice […]

Read more
FreeBSD 12 — git-gui — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — git-gui — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 June 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: git — multiple vulnerabilities Related CVEs: CVE-2015-7545 CVE-2016-2324 CVE-2020-11008 CVE-2020-5260 CVE-2024-50349 CVE-2024-52006 CVE-2025-27613 CVE-2025-27614  +4 more Upstream summary: Git development team reports: CVE-2025-27613: Gitk: When a user clones an untrusted […]

Read more
FreeBSD 13 — openssh-portable — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — openssh-portable — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 June 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: FreeBSD — Multiple vulnerabilities in OpenSSH Related CVEs: CVE-2006-4924 CVE-2006-5051 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 CVE-2015-6565 CVE-2015-8325 CVE-2016-0777  +12 more Upstream summary: Problem Description: OpenSSH client host verification error (CVE-2025-26465) ssh(1) contains […]

Read more
FreeBSD 12 — py311-setuptools — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py311-setuptools — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 June 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-setuptools — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2025-47273 Upstream summary: https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, […]

Read more
FreeBSD 12 — p5-Crypt-CBC — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — p5-Crypt-CBC — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 June 2025 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: p5-Crypt-CBC — Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Related CVEs: CVE-2025-2814 Upstream summary: Lib-Crypt-CBC project reports: Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand() […]

Read more
FreeBSD 14 — gitlab-ee — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — gitlab-ee — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 18 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Gitlab — vulnerabilities Related CVEs: CVE-2023-6195 CVE-2023-6502 CVE-2023-6682 CVE-2023-6688 CVE-2023-7045 CVE-2024-0231 CVE-2024-10043 CVE-2024-10219  +12 more Upstream summary: Gitlab reports: Cross-site Scripting issue in Analytics dashboard chart rendering impacts GitLab EE […]

Read more
FreeBSD 14 — py311-mysql-connector-python — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — py311-mysql-connector-python — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 June 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-mysql-connector-python — Vulnerability in the MySQL Connectors product of Oracle MySQL Related CVEs: CVE-2025-21548 Upstream summary: Oracle reports: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported […]

Read more
CHAT