FreeBSD

FreeBSD 13 — postgresql13-client — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — postgresql13-client — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 May 2025 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL — Multiple vulnerabilities Related CVEs: CVE-2022-41862 CVE-2024-10977 CVE-2024-7348 CVE-2025-1094 CVE-2025-12817 CVE-2025-12818 CVE-2025-4207 Upstream summary: https://www.postgresql.org/support/security/CVE-2025-12818/ reports: Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input […]

Read more
FreeBSD 14 — oauth2-proxy — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — oauth2-proxy — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 28 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: oauth2-proxy — multiple vulnerabilities Related CVEs: CVE-2024-24784 CVE-2024-24786 CVE-2024-24790 CVE-2024-24791 CVE-2024-28180 CVE-2024-45288 CVE-2024-45338 CVE-2025-47914  +4 more Upstream summary: During session resumption in crypto/tls, if the underlying Config has its ClientCAs […]

Read more
FreeBSD 14 — krb5-devel — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — krb5-devel — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: krb5 — Double-free in KDC TGS processing Related CVEs: CVE-2017-11368 CVE-2017-11462 CVE-2022-42898 CVE-2023-39975 Upstream summary: The MIT krb5 Team reports: When issuing a ticket for a TGS renew or validate […]

Read more
FreeBSD 14 — libmcrypt — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — libmcrypt — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Buffer overflows in libmcrypt Related CVEs: CVE-2003-0031 CVE-2003-0032 Upstream summary: libmcrypt does incomplete input validation, leading to several buffer overflows. Additionally, a memory leak is present. Both of these problems […]

Read more
FreeBSD 14 — php55-snmp — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — php55-snmp — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292  +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

Read more
FreeBSD 14 — firebird-server — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — firebird-server — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firebird — multiple remote buffer overflow vulnerabilities Upstream summary: RISE Security reports: There exists multiple vulnerabilities within functions of Firebird Relational Database, which when properly exploited can lead to remote […]

Read more
FreeBSD 14 — zydis — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — zydis — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zydis — heap buffer overflow Related CVEs: CVE-2021-41253 Upstream summary: Zyantific reports: Zydis users of versions v3.2.0 and older that use the string functions provided in zycore in order to […]

Read more
FreeBSD 14 — ru-apache — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — ru-apache — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2003-0993 CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using mod_proxy in […]

Read more
FreeBSD 14 — null — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 14

FreeBSD 14 — null — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2025 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dnsdist — Denial of service via crafted DoH exchange Related CVEs: CVE-2024-1622 CVE-2025-30194 Upstream summary: [email protected] reports: When DNSdist is configured to provide DoH via the nghttp2provider, an attacker can […]

Read more
CHAT