FreeBSD 13

🟡 Medium   ⏱ 10–30 min  Last verified: 15 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — unbounded recursion in urlpreview Related CVEs: CVE-2019-5885 CVE-2020-26257 CVE-2020-26891 CVE-2021-29471 CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 Upstream summary: Matrix developers report: This release fixes a vulnerability with Synapse's URL preview […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nas — multiple vulnerabilities Related CVEs: CVE-2013-4256 CVE-2013-4257 CVE-2013-4258 Upstream summary: Hamid Zamani reports: multiple security problems (buffer overflows, format string vulnerabilities and missing input sanitising), which could lead to […]

🟠 High   ⏱ 15–60 min  Last verified: 15 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL Client — Multiple vulerabilities Related CVEs: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 45 new security patches […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pycrypto — PRNG reseed race condition Related CVEs: CVE-2013-1445 Upstream summary: Dwayne Litzenberger reports: In PyCrypto before v2.6.1, the Crypto.Random pseudo-random number generator (PRNG) exhibits a race condition that may […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: abiword, koffice — stack based buffer overflow vulnerabilities Related CVEs: CAN-2005-2972 Upstream summary: Chris Evans reports that AbiWord is vulnerable to multiple stack-based buffer overflow vulnerabilities. This is caused by […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: distcc — incorrect parsing of IP access control rules Related CVEs: CVE-2004-0601 Upstream summary: Fix bug that might cause IP-based access control rules not to be interpreted correctly on 64-bit […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2020-10744 CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Wagtail — potential timing attack vulnerability Related CVEs: CVE-2020-11001 CVE-2020-11037 Upstream summary: Wagtail release notes: CVE-2020-11037: Potential timing attack on password-protected private pages This release addresses a potential timing attack […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kdeutils4 — Directory traversal vulnerability Related CVEs: CVE-2011-2725 Upstream summary: Tim Brown from Nth Dimention reports: I recently discovered that the Ark archiving tool is vulnerable to directory traversal via […]