🟢 Low ⏱ 5–15 min Last verified: 18 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pycrypto — vulnerable ElGamal key generation Related CVEs: CVE-2012-2417 Upstream summary: Dwayne C. Litzenberger of PyCrypto reports: In the ElGamal schemes (for both encryption and signatures), g is supposed to […]
🟡 Medium ⏱ 10–30 min Last verified: 18 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: OpenSSL — multiple vulnerabilities Related CVEs: CVE-2009-1377 CVE-2009-1378 CVE-2011-3207 CVE-2011-3210 Upstream summary: OpenSSL Team reports: Two security flaws have been fixed in OpenSSL 1.0.0e Under certain circumstances OpenSSL's internal certificate […]
🟢 Low ⏱ 5–15 min Last verified: 18 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Rails — Active Job vulnerability Related CVEs: CVE-2018-16476 Upstream summary: Ruby on Rails blog: Rails 4.2.11, 5.0.7.1, 5.1.6.1 and 5.2.1.1 have been released! These contain the following important security fixes, […]
🟢 Low ⏱ 5–15 min Last verified: 17 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]
🟡 Medium ⏱ 10–30 min Last verified: 16 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Vim/NeoVim — Security vulnerability Related CVEs: CVE-2004-1138 CVE-2005-2368 CVE-2007-2953 CVE-2008-2712 CVE-2008-3076 CVE-2016-1248 Upstream summary: Security releases for Vim/NeoVim: Sandbox escape allows for arbitrary code execution. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 16 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nss — Use-after-free in TLS 1.2 generating handshake hashes Related CVEs: CVE-2014-1568 CVE-2015-7575 CVE-2016-1938 CVE-2016-1950 CVE-2016-1978 CVE-2016-1979 CVE-2016-2834 CVE-2017-5461 +2 more Upstream summary: Mozilla reports: During TLS 1.2 exchanges, handshake […]
🟡 Medium ⏱ 10–30 min Last verified: 16 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xpdf — stack based buffer overflow Related CVEs: CVE-2004-1125 CVE-2005-0064 CVE-2007-3387 Upstream summary: The KDE Team reports: kpdf, the KDE pdf viewer, shares code with xpdf. xpdf contains a vulnerability […]
🟠 High ⏱ 15–60 min Last verified: 15 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mc — multiple vulnerabilities Related CVEs: CVE-2003-1023 CVE-2004-0226 CVE-2004-0231 CVE-2004-0232 CVE-2004-0494 CVE-2004-1004 CVE-2004-1005 CVE-2004-1009 +4 more Upstream summary: Andrew V. Samoilov reported several vulnerabilities that were corrected in MidnightCommand 4.6.0: […]
🟢 Low ⏱ 5–15 min Last verified: 15 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-beaker — arbitrary code execution vulnerability Related CVEs: CVE-2013-7489 Upstream summary: matheusbrat reports: The Beaker library through 1.12.1 for Python is affected by deserialization of untrusted data, which could lead […]
🟠 High ⏱ 15–60 min Last verified: 15 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 34 new security patches for […]
