Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 23 Dec 2025 15:57:46 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 291896] FreeBSD-kernel-15.0 is vulnerable message (not using pkgbase)
Message-ID:  <bug-291896-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291896

            Bug ID: 291896
           Summary: FreeBSD-kernel-15.0 is vulnerable message (not using
                    pkgbase)
           Product: Base System
           Version: 15.0-CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Keywords: pkgbase
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: jlduran@FreeBSD.org

The daily mail is sending (please ignore the python one):

Checking for security vulnerabilities in base (userland & kernel):
Fetching vuln.xml.xz: ......... done
FreeBSD-kernel-15.0 is vulnerable:
  FreeBSD -- ipfw denial of service
  CVE: CVE-2025-14769
  WWW:
https://vuxml.FreeBSD.org/freebsd/0b22e22a-dae9-11f0-80b8-bc241121aa0a.html

1 problem(s) in 1 package(s) found.
vulnxml file up-to-date
0 problem(s) in 0 package(s) found.

Checking for packages with security vulnerabilities:
Database fetched: 2025-12-22T04:30-05:00
python311-3.11.14

However, the system is not using pkgbase plus it has the latest freebsd-update
patches:

# freebsd-version -kru
15.0-RELEASE
15.0-RELEASE
15.0-RELEASE-p1

Flagging it under pkgbase, just in case.

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-291896-227>