BSD PortsGitlab -- Vulnerabilities
· CVE-2025-25291, CVE-2025-25292, CVE-2025-27407, CVE-2024-13054, CVE-2024-12380, CVE-2025-1257, CVE-2025-0652, CVE-2024-8402, CVE-2024-7296 · VuXML entry
Gitlab reports: CVE-2025-25291 and CVE-2025-25292 (third party gem ruby-saml) CVE-2025-27407 (third party gem graphql) Denial of Service Due to Inefficient Processing of Untrusted Input Credentials disclosed when repository mirroring fails Denial of Service Vulnerability in GitLab Approval Rules due to Unbounded Field Internal Notes in Merge Requests Are Emailed to Non-Members Upon Review Submission Maintainer can …
Affected versions
- gitlab-ce, gitlab-ee >= 17.9.0 < 17.9.2; >= 17.8.0 < 17.8.5; >= 11.5 < 17.7.7
By system
0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | www/gitlab | 19.5.1_2 | fixed | (518 days after) |
| MidnightBSD | www/gitlab | ${GITLAB_VERSION}_${GITLAB_PORTREVISION} | out of range, by version |