CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

shells/powershell7.5.5_1

Microsoft's shell with support for .NET objects

8
unaddressed
0
VuXML only, still affected
0
fixed
Maintainer
arrowd@FreeBSD.org
Packages
powershell 7.5.5_1
Upstream
Higher version available: 7.6.8
CPE
microsoft:powershell
WWW
https://microsoft.com/PowerShell
Links
cgit · VuXML

Unaddressed (8) · The CVE record lists this version as affected, no VuXML entry names the CVE

Updating to 7.5.12 would fix 8 of 8 unaddressed CVEs, according to the CVE records.
Fixed up to each version, cumulative: 7.5.6 1 · 7.5.10.0 6 · 7.5.12 8
CVE-2026-962518.82026-10-13Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
CVE-2026-703378.82026-08-11Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
CVE-2026-505237.82026-08-14Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
CVE-2026-703387.82026-08-11Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-261717.52026-04-14Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-586127.42026-08-11Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
CVE-2026-591197.32026-08-11Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2026-963036.52026-10-13Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (7)

Gleb Popov (arrowd) · 7.5.5_1
shells/powershell: Update to 7.5.5
30713b8fee
Gleb Popov (arrowd) · 7.5.4_1
shells/powershell: Install the lib/powershell/ref symlink

This fixes a error that happens when typing

Add-Type -TypeDefinition @"
using System;
"@ -Language CSharp

into PowerShell's prompt.

It is yet unclear if all .NET DLLs should actually be installed under /ref,
but this is still better than non-working Add-Type command.

Reported by:	Luke Brennan <lukebrennan@outlook.com>
bf62e93560
Gleb Popov (arrowd) · 7.5.4
shells/powershell: Update to 7.5.4

Reported by:	portscout!
b88a7a06fe
Gleb Popov (arrowd) · 7.5.2
shells/powershell: Update to 7.5.2

Reported by:	portscout!
245fac1c17
Gleb Popov (arrowd) · 7.5.1
shells/powershell: Update to 7.5.1
a39b149a9a
Gleb Popov (arrowd) · 7.5.0_1
shells/powershell: Depend on misc/terminfo-db to fix duplicated symbols in the input
5bd41ca80c
Gleb Popov (arrowd) · 7.5.0
shells/powershell: Microsoft's shell with support for .NET objects

Co-authored-by:	Felix Palmen <zirias@FreeBSD.org>
Co-authored-by:	Szczepan Ćwikliński <sec@thinkcode.pl>
1a37ab5e60