I don't care what version of Freebsd you're using. If your webapp is running Ghostscript against user-supplied data without doing so in a throwaway VM or at least container of some sort, no amount of updating will save you. That is an insane piece of software to be feeding untrusted input to without wearing a condom.
¹ https://cgit.freebsd.org/src/commit/?id=e15d3f3c0978fad0ebbc...
The whole message of this post could’ve been put into two structured sentences.
FreeBSD 10.1 was released in 2014 and reached EoL in 2018.
I can compile FreeBSD 10.1 today and the displayed date by `uname` will be 2025 - that does not mean that code is from 2025 - only that it was compiled in 2025.
Hope that helps.
stiray•9mo ago
hhh•9mo ago
There’s a billion other issues too, i’d be surprised if it’s not gone again very soon.