🟡 Medium ⏱ 10–30 min Last verified: 19 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libarchive — multiple vulnerabilities Related CVEs: CVE-2006-5680 CVE-2013-0211 CVE-2015-2304 CVE-2015-8934 CVE-2016-1541 CVE-2016-4300 CVE-2016-4301 CVE-2016-4302 Upstream summary: Hanno Bock and Cisco Talos report: Out of bounds heap read in RAR parser […]
🟢 Low ⏱ 5–15 min Last verified: 19 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-cryptography — tag forgery vulnerability Related CVEs: CVE-2016-9243 CVE-2018-10903 Upstream summary: The Python Cryptographic Authority (PyCA) project reports: finalize_with_tag() allowed tag truncation by default which can allow tag forgery in […]
🟢 Low ⏱ 5–15 min Last verified: 19 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Enhanced cTorrent — stack-based overflow Related CVEs: CVE-2009-1759 Upstream summary: Securityfocus reports: cTorrent and dTorrent are prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied […]
🟢 Low ⏱ 5–15 min Last verified: 19 February 2022 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: The Update Framwork — path traversal vulnerability Related CVEs: CVE-2021-41131 Upstream summary: NVD reports: python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and […]
🟢 Low ⏱ 5–15 min Last verified: 18 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: jupyter notebook — open redirect vulnerability Upstream summary: Jupyter reports: 6.1.5 is a security release, fixing one vulnerability: Fix open redirect vulnerability GHSA-c7vm-f5p4-8fqh (CVE to be assigned) Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 18 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292 +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]
🟠 High ⏱ 15–60 min Last verified: 18 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: imlib2 — denial of service vulnerabilities Related CVEs: CVE-2004-0802 CVE-2004-0817 CVE-2004-1025 CVE-2004-1026 CVE-2006-4806 CVE-2006-4807 CVE-2006-4808 CVE-2006-4809 +4 more Upstream summary: Enlightenment reports: GIF loader: Fix segv on images without colormap […]
🟢 Low ⏱ 5–15 min Last verified: 18 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟠 High ⏱ 15–60 min Last verified: 18 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Gitlab — Remote Code Execution Vulnerability in GitLab Projects Import Related CVEs: CVE-2016-4340 CVE-2016-4738 CVE-2016-9086 CVE-2017-0882 CVE-2017-0915 CVE-2017-11438 CVE-2017-12426 CVE-2017-5029 +8 more Upstream summary: Gitlab reports: Remote Code Execution Vulnerability […]
🟡 Medium ⏱ 10–30 min Last verified: 18 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libevent — multiple vulnerabilities Related CVEs: CVE-2016-10195 CVE-2016-10196 CVE-2016-10197 Upstream summary: Debian Security reports: CVE-2016-10195: The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified […]
