Re: Undocumented vulnerabilities in SQLite2 and erlang?
Fernando Apesteguía <[email protected]>
| Newsgroups | gmane.os.freebsd.devel.ports |
|---|---|
| Message-ID | <CAGwOe2bZcqdN3V_uvHHnHsgZkn_vKT9zGWbL0r=LqdiuMXwhbA@mail.gmail.com> |
El mar, 28 oct 2025, 18:35, Kurt Jaeger <[email protected]> escribió: > Hi! > > > I’ve recently become aware of CVE-2025-4748 for Erlang < 26.2.5.13, and > CVE-2025-7709 for SQLite3 < 3.50.3, and do not see these in the > vulnerability database. > > Are these not applicable to FreeBSD’s ports of these packages, or does > the vuln.xml need to be updated? > > The process to add entries to vuln.xml is not watertight, so I > would guess it needs updates to add those entries. > > Can you provide those entries ? I'll try to have a look at this today > > -- > [email protected] +49 171 3101372 Now what ? > >