BSD PortsNewsboat -- vulnerabilities
Newsboat Team reports: (CVE ID Pending) Remote code execution via manual OPML import (--import-from-opml) GHSA-4m8m-vj3m-hfxx : Remote code execution via OPML import (both manual --import-from-opml and opml-url config setting) GHSA-pvg7-gjxf-23c9 : Podboat could write at arbitrary paths
Affected versions
- newsboat >= 2.10 < 2.45
By system
0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | www/newsboat | 2.45 | fixed | |
| OpenBSD | www/newsboat | 2.45 | out of range, by version |