Package Management

🟡 Medium   ⏱ 10–30 min  Last verified: 26 May 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Sane — Multiple Vulnerabilities Related CVEs: CVE-2020-12861 CVE-2020-12862 CVE-2020-12863 CVE-2020-12864 CVE-2020-12865 CVE-2020-12866 CVE-2020-12867 Upstream summary: The Sane Project reports: epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory management issues found while […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 May 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mailman < 2.1.38 — CSRF vulnerability of list mod or member against list admin page Related CVEs: CVE-2021-43331 CVE-2021-43332 CVE-2021-44227 Upstream summary: Mark Sapiro reports: A list moderator or list […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gdk-pixbuf — image decoding vulnerabilities Related CVEs: CVE-2004-0782 CVE-2004-0783 CVE-2004-0788 Upstream summary: Chris Evans discovered several flaws in the gdk-pixbuf XPM image decoder: Heap-based overflow in pixbuf_create_from_xpm Stack-based overflow in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rubygem-geminabox — XSS vulnerabilities Related CVEs: CVE-2017-14506 CVE-2017-14683 CVE-2017-16792 Upstream summary: NVD reports: Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject […]