BSD PortsGitlab -- Vulnerabilities
· CVE-2025-3279, CVE-2025-1754, CVE-2025-5315, CVE-2025-2938, CVE-2025-5846 · VuXML entry
Gitlab reports: Denial of Service impacts GitLab CE/EE Missing Authentication issue impacts GitLab CE/EE Improper access control issue impacts GitLab CE/EE Elevation of Privilege impacts GitLab CE/EE Improper access control issue impacts GitLab EE
Affected versions
- gitlab-ce, gitlab-ee >= 18.1.0 < 18.1.1; >= 18.0.0 < 18.0.3; >= 16.10.0 < 17.11.5
By system
0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | www/gitlab | 19.5.1_2 | fixed | (413 days after) |
| MidnightBSD | www/gitlab | ${GITLAB_VERSION}_${GITLAB_PORTREVISION} | out of range, by version |