FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-10-13 21:34:00 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
0f5bcba2-67fb-11f0-9ee5-b42e991fc52e	sqlite -- Integer Truncation on SQLite cve-coordination@google.com reports: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. Discovery 2025-07-15 Entry 2025-07-23 Modified 2025-09-07 sqlite3 < 3.50.2,1 linux-c7-sqlite < 3.50.2 linux_base-rl9 >= 9.5.14 lt 9.6_1 linux-rl9-sqlite3 >= 0 CVE-2025-6965 https://nvd.nist.gov/vuln/detail/CVE-2025-6965
f51077bd-6dd7-11f0-9d62-b42e991fc52e	SQLite -- integer overflow in key info allocation cve-coordination@google.com reports: An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause. Discovery 2025-07-29 Entry 2025-07-31 Modified 2025-08-01 sqlite3 >= 3.39.2,1 lt 3.41.2,1 CVE-2025-7458 https://nvd.nist.gov/vuln/detail/CVE-2025-7458

VuXML ID

Description

0f5bcba2-67fb-11f0-9ee5-b42e991fc52e

sqlite -- Integer Truncation on SQLite

cve-coordination@google.com reports:

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue.

Discovery 2025-07-15
Entry 2025-07-23
Modified 2025-09-07
sqlite3

< 3.50.2,1

linux-c7-sqlite

< 3.50.2

linux_base-rl9

>= 9.5.14 lt 9.6_1

linux-rl9-sqlite3

>= 0

CVE-2025-6965
https://nvd.nist.gov/vuln/detail/CVE-2025-6965

f51077bd-6dd7-11f0-9d62-b42e991fc52e

SQLite -- integer overflow in key info allocation

cve-coordination@google.com reports:

An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.

Discovery 2025-07-29
Entry 2025-07-31
Modified 2025-08-01
sqlite3

>= 3.39.2,1 lt 3.41.2,1

CVE-2025-7458
https://nvd.nist.gov/vuln/detail/CVE-2025-7458