FreeBSD-SA-25:05.openssh

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:05.openssh Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenSSH Category: contrib Module: openssh Announced: 2025-02-21 Credits:...

FreeBSD : chromium -- multiple security fixes (f572b9d1-ef6d-11ef-85f3-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f572b9d1-ef6d-11ef-85f3-a8a1599412c6 advisory. Chrome Releases reports: This update includes 4 security fixes: Tenable has extracted the...

FreeBSD : chromium -- multiple security fixes (2a3be628-ef6e-11ef-85f3-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2a3be628-ef6e-11ef-85f3-a8a1599412c6 advisory. Chrome Releases reports: This update includes 3 security fixes: Tenable has extracted the...

FreeBSD : chromium -- multiple security fixes (b09d0b3b-ef6d-11ef-85f3-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b09d0b3b-ef6d-11ef-85f3-a8a1599412c6 advisory. Chrome Releases reports: This update includes 12 security fixes: Tenable has extracted the...

FreeBSD Information Disclosure Vulnerability (CNVD-2025-09230)

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. FreeBSD suffers from an information disclosure vulnerability that is caused by a failure to properly assign privileges flaw. An attacker could exploit this vulnerability to access system files...

FreeBSD ktrace Information Disclosure Vulnerability

FreeBSD ktrace is a tool from the FreeBSD Foundation for tracing system calls. An information disclosure vulnerability exists in FreeBSD ktrace due to a flaw in the ktrace facility. An attacker can exploit the vulnerability to obtain the contents of kernel structure information...

FreeBSD Buffer Overflow Vulnerability (CNVD-2025-09231)

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. FreeBSD suffers from a buffer overflow vulnerability that stems from the implementation of VOPVPTOFH in the cd9660, tarfs, and ext2fs filesystems that causes the target FID buffer to overflow by 4 bytes, which can be...

FreeBSD : vscode -- multiple vulnerabilities (cbf5d976-656b-4bb6-805f-3af038e2de3e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cbf5d976-656b-4bb6-805f-3af038e2de3e advisory. VSCode developers report: The update addresses these issues, including a fix for a security...

FreeBSD : security/openvpn-auth-ldap -- Fix buffer overflow in challenge/response (e915b60e-ea25-11ef-a1c0-0050569f0b83)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e915b60e-ea25-11ef-a1c0-0050569f0b83 advisory. Graham Northup reports: A buffer overflow in extractopenvpncr allows attackers with a valid LDAP userna...

FreeBSD : Gitlab -- Vulnerabilities (1a8c5720-e9cf-11ef-9e96-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1a8c5720-e9cf-11ef-9e96-2cf05da270f3 advisory. Gitlab reports: A CSP-bypass XSS in merge-request page Denial of Service due to Unbounded Symb...

FreeBSD : PostgreSQL -- PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation (fadf3b41-ea19-11ef-a540-6cc21735f730)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fadf3b41-ea19-11ef-a540-6cc21735f730 advisory. The PostgreSQL Project reports: Improper neutralization of quoting syntax in PostgreSQL libpq functions...

FreeBSD : Intel CPUs -- multiple vulnerabilities (d598266d-7772-4a31-9594-83b76b1fb837)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d598266d-7772-4a31-9594-83b76b1fb837 advisory. Intel reports: A potential security vulnerability in some Intel Processors may allow denial of...

FreeBSD : OpenSSL -- Man-in-the-Middle vulnerability (a64761a1-e895-11ef-873e-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a64761a1-e895-11ef-873e-8447094a420f advisory. The OpenSSL project reports: RFC7250 handshakes with unauthenticated servers don't abort as expected...

FreeBSD : mozilla -- multiple vulnerabilities (e54a1413-e539-11ef-a845-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e54a1413-e539-11ef-a845-b42e991fc52e advisory. [email protected] reports: An attacker could have caused a use-after-free via crafted XSLT...

FreeBSD : cacti -- Multiple vulnerabilities (e7974ca5-e4c8-11ef-aab3-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e7974ca5-e4c8-11ef-aab3-40b034429ecf advisory. Cacti repo reports: Tenable has extracted the preceding description block directly from the...

FreeBSD : MariaDB -- DoS vulnerability in InnoDB (7bcfca95-e563-11ef-873e-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7bcfca95-e563-11ef-873e-8447094a420f advisory. MariaDB reports: Easily exploitable vulnerability allows high privileged attacker with network access v...

FreeBSD : mozilla -- multiple vulnerabilities (20485d27-e540-11ef-a845-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 20485d27-e540-11ef-a845-b42e991fc52e advisory. [email protected] reports: A bug in WebAssembly code generation could have lead to a crash...

FreeBSD : Thundirbird -- unprivileged JavaScript code execution (830381c7-e539-11ef-a845-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 830381c7-e539-11ef-a845-b42e991fc52e advisory. [email protected] reports: The Thunderbird Address Book URI fields contained unsanitized links. This...

FreeBSD : libcaca -- Multiple vulnerabilities (c10b639c-e51c-11ef-9e76-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c10b639c-e51c-11ef-9e76-4ccc6adda413 advisory. Sam Hocevar reports: Multiple memory leaks and invalid memory accesses: Tenable has extracted...

FreeBSD : mozilla -- multiple vulnerabilities (f7ca4ff7-e53f-11ef-a845-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f7ca4ff7-e53f-11ef-a845-b42e991fc52e advisory. [email protected] reports: Memory safety bugs present in Firefox 134 and Thunderbird 134...