Date: Fri, 21 Nov 2025 11:07:41 +0000 From: Tijl Coosemans <tijl@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: ff9c2513f9d1 - main - security/vuxml: Add GNUTLS-SA-2025-11-18 Message-ID: <692047fd.3e8b3.7a2a96b@gitrepo.freebsd.org>
index | next in thread | raw e-mail
The branch main has been updated by tijl: URL: https://cgit.FreeBSD.org/ports/commit/?id=ff9c2513f9d1a82c5bfa24469dfacafd8b36d6bb commit ff9c2513f9d1a82c5bfa24469dfacafd8b36d6bb Author: Tijl Coosemans <tijl@FreeBSD.org> AuthorDate: 2025-11-21 11:06:42 +0000 Commit: Tijl Coosemans <tijl@FreeBSD.org> CommitDate: 2025-11-21 11:06:42 +0000 security/vuxml: Add GNUTLS-SA-2025-11-18 --- security/vuxml/vuln/2025.xml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index a850ad531f62..cf7e3de23f45 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,31 @@ + <vuln vid="b6835edf-c6c8-11f0-8471-74563cf9e4e9"> + <topic>GnuTLS -- Stack write buffer overflow</topic> + <affects> + <package> + <name>gnutls</name> + <range><lt>3.8.11</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>GnuTLS reports:</p> + <blockquote cite="https://gnutls.org/security-new.html#GNUTLS-SA-2025-11-18">; + <p>When a PKCS#11 token is initialized with gnutls_pkcs11_token_init function + and it is passed a token label longer than 32 characters, it may write past + the boundary of stack allocated memory.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2025-9820</cvename> + <url>https://gnutls.org/security-new.html#GNUTLS-SA-2025-11-18</url>; + </references> + <dates> + <discovery>2025-11-18</discovery> + <entry>2025-11-21</entry> + </dates> + </vuln> + <vuln vid="ca5d4e87-c465-11f0-b3f7-a8a1599412c6"> <topic>chromium -- multiple security fixes</topic> <affects>home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?692047fd.3e8b3.7a2a96b>