CVE-2025-0374

CVE-2025-0374 affects FreeBSD etcupdate. When conflicts arise during file merges, etcupdate saves a temporary file in /var/db/etcupdate/conflicts without preserving the input file’s mode, making it world-readable. This can allow an unprivileged local user to read encrypted root/user passwords fro...