Oleg Bulyzhin

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions prior to 13.0-STABLE n247428-9352de39c3dc FreeBSD versions prior to 12.2-STABLE r370674 FreeBSD versions prior to 13.0-RELEASE p6 FreeBSD versions prior to 12.2-RELEASE p12 **Description** The issue involves certain conditions with the use of the highlight buffer while text is scrolling on the console. This can lead to console data overwriting data structures associated with the system console or other kernel memory. **Recommendations** For FreeBSD 13.0-STABLE, update to a version after n247428-9352de39c3dc. For FreeBSD 12.2-STABLE, update to a version after r370674. For FreeBSD 13.0-RELEASE, update to a version after p6. For FreeBSD 12.2-RELEASE, update to a version after p12.

**Name of the Vulnerable Software and Affected Versions** openSUSE (affected versions not specified) Sendmail versions 8.12.8 and earlier **Description** The issue concerns a potential disruption of protected information and a denial of service. It can be exploited remotely. In Sendmail, when using the "enhdnsbl" feature, certain data structures are not properly initialized, allowing remote attackers to cause a process crash via an invalid DNS response. **Recommendations** For openSUSE, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Sendmail versions 8.12.8 and earlier, consider disabling the "enhdnsbl" feature as a temporary workaround until a patch is available.