1. Forum
  2. USENET
  3. muc.lists.freebsd.stable

  • ipfw vulnerability periodic notification

    From Marco Moock@mm@dorfdsl.de to muc.lists.freebsd.stable on Sat Jan 24 07:11:51 2026
    From Newsgroup: muc.lists.freebsd.stable

    --Sig_/vPimTx+m7hf7AZBrI8pq8Fb
    Content-Type: text/plain; charset=US-ASCII
    Content-Transfer-Encoding: quoted-printable

    Hello!

    I receive periodic notifications for an ipfw vulnerability in 15.0. CVE-2025-14769

    =46rom what I read, this is fixed in 15.0 already. https://comp.unix.bsd.freebsd.misc.narkive.com/V4ouZJqf/cve-2025-14769-in-1= 5-vulnerable-or-not

    Can someone confirm that here and explain why 15 is still listed, so
    periodic notifies me?

    $ freebsd-version -kru
    15.0-RELEASE
    15.0-RELEASE
    15.0-RELEASE-p1



    --=20
    kind regards
    Marco

    Send spam to abfall1769234708@stinkedores.dorfdsl.de

    --Sig_/vPimTx+m7hf7AZBrI8pq8Fb
    Content-Type: application/pgp-signature
    Content-Description: Digitale Signatur von OpenPGP

    -----BEGIN PGP SIGNATURE-----

    iQJPBAEBCAA5FiEEpXefSZn9R6zNZtTQE76RLz2tRfAFAml0YqcbFIAAAAAABAAO bWFudTIsMi41KzEuMTEsMiwyAAoJEBO+kS89rUXwg+UQAKbwOOn8pOx1WmoEfj1B yIuuNo8wcvG+uJHzzfJs+LNAp8b4a+EBdAg5LYXOs7315HTQsJEJUjsSfPQ0Tgku 9uO3GNtg7EHnMH8FhPIbaFcfXTKbzS4PgSdXakyfDJ1hK/Ae5J4/X05Yxsn2ecyR rk5F2Xa3lUF83wVGThzaFzRZRI/7Rlew9ENW+IBUxoeMVicRTdD3FBzG/Uh2hEiF O8M0o76NTfuc3/p1SuYzVZ4FeVT3DGLlqtSoVPfZdT3uH6LJ3exB3ZG/13V9ra0B iVfYL/xJeEWJs2UpmOQ3ajKRBnGkCBvxJPpwU/UodX64Rb2ooiHX6ssMuzjRdlhs xrVt3x5LGau3pXcCy8LwW77FzFO2AavzpWKePhX3TjuIzXlwAdGTovdh2BCMiyEb lofuEFJJijkfBWo1XWBAtcM4NmBBflaClmYRvHCDoQKgFMAk/UjHOk9OLXMVOxNJ mPfKPKU7gkxMI7HlNuJ3MuVwImjarG1wm+xCVBjFiVmOrQpujlTPcAdIWY9uQ/FB X8y5mIxGiDvrXdiaEoL6ZZWxMriyjVG30ReUiJmM97PlcA1Jq6aQ05m/A6IF1+/h 3jZHo5SXIBhXKuMDxr1iqk7Eohb104af+LhtLtl2b2XqUjigJZMufENghjrFUbuU JNBqHi9duXgps8AsygTWsdmY
    =2t+x
    -----END PGP SIGNATURE-----

    --Sig_/vPimTx+m7hf7AZBrI8pq8Fb--


    --
    Posted automagically by a mail2news gateway at muc.de e.V.
    Please direct questions, flames, donations, etc. to news-admin@muc.de
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Graham Perrin@grahamperrin@gmail.com to muc.lists.freebsd.stable on Sat Jan 24 09:55:20 2026
    From Newsgroup: muc.lists.freebsd.stable

    On 24/01/2026 06:11, Marco Moock wrote:
    Hello!

    I receive periodic notifications for an ipfw vulnerability in 15.0. CVE-2025-14769

    From what I read, this is fixed in 15.0 already. https://comp.unix.bsd.freebsd.misc.narkive.com/V4ouZJqf/cve-2025-14769-in-15-vulnerable-or-not

    Can someone confirm that here and explain why 15 is still listed, so
    periodic notifies me?

    $ freebsd-version -kru
    15.0-RELEASE
    15.0-RELEASE
    15.0-RELEASE-p1


    For CVE-2025-14769 and kernel patch levels, some of Colin Percival's
    comments under <https://www.reddit.com/r/freebsd/comments/1qdvw52/is_kernel_143_p7_missing_for_arm64_freebsdupdate/>
    may be relevant.




    --
    Posted automagically by a mail2news gateway at muc.de e.V.
    Please direct questions, flames, donations, etc. to news-admin@muc.de
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Marco Moock@mm@dorfdsl.de to muc.lists.freebsd.stable on Sun Jan 25 10:28:06 2026
    From Newsgroup: muc.lists.freebsd.stable

    --Sig_/EWu2JiMSLwCCSy=yMu24x3x
    Content-Type: text/plain; charset=UTF-8
    Content-Transfer-Encoding: quoted-printable

    Am 24.01.2026 um 09:55:20 Uhr schrieb Graham Perrin:

    For CVE-2025-14769 and kernel patch levels, some of Colin Percival's=20 comments under=20 <https://www.reddit.com/r/freebsd/comments/1qdvw52/is_kernel_143_p7_missi=
    ng_for_arm64_freebsdupdate/>=20
    may be relevant.

    Ok, so did I got it right that this warning will show up unless the
    next real kernel update?

    --=20
    Gru=C3=9F
    Marco

    Send unsolicited bulk mail to 1769244920muell@cartoonies.org

    --Sig_/EWu2JiMSLwCCSy=yMu24x3x
    Content-Type: application/pgp-signature
    Content-Description: Digitale Signatur von OpenPGP

    -----BEGIN PGP SIGNATURE-----

    iQIyBAEBCgAdFiEEpXefSZn9R6zNZtTQE76RLz2tRfAFAml14iYACgkQE76RLz2t RfB5Dg/1HwBfW9iSwndcby0tPhXTFu1LBZloLf8bZFeFRC5FMIOyIIWVkjfCI22C iPNqnoFPipZxaPHfE4OgIt2tIU5Ey2gEswMHUXjbyYl215vULo0EDxgX80mXQb/G XfFXNE58CccahBDZnORSshfqLh/Is2uN0jnYZO6R34TJdhZze0XtwbWr7Vxq76Gj vDixsKrsDAxebcRJPeetufk7RL/X6p/RaLqBDqoq5HZfvqo/esQJ2RsSVZo5apIS KRWoz5HWpKuTQsYk3dRmpyVSR6meEP6nkJQdJBfAly8EN3jWM4ooreG/r/uDpZuX 3X7rwUU4yDPc8O3bgYfI9kiZrQgw53fTIxH2m+/SpqcIXcjgcidlPwe/QBGiT4Kb bdV3INskiqIDsPo4tVu0/a3Ne2wtd7ImqmoA5VcB+dlm6+BjuqQGyYn/4CsJZqVW kcKi2qvqlV7j7z89hAiWbLQkGefi4Erhc4P6IXjiAAx6jMXOLsmb1Xpg7q4TAxhQ RrTqdT/mSb7DTpUJN6eDyrHDcjFQ1QfysXp4RHvP6nc/PbTzMz04hvXaQKmMX9Bv IauEHyZs1Q9wg7bBrJFogPvCCy2OZCiz+mbIvXWebHvKro83FQcu7IrVJyfFJo8v uhFteQzz4PaBpLdyLe4vmCD5x8uIDOquH2fBeyCC7vm3eke2mA==
    =bLgY
    -----END PGP SIGNATURE-----

    --Sig_/EWu2JiMSLwCCSy=yMu24x3x--


    --
    Posted automagically by a mail2news gateway at muc.de e.V.
    Please direct questions, flames, donations, etc. to news-admin@muc.de
    --- Synchronet 3.21a-Linux NewsLink 1.2