FreeBSD : Roundcube -- Multiple vulnerabilities (f301a241-04d3-11f1-a38c-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f301a241-04d3-11f1-a38c-8447094a420f advisory. The Roundcube project reports: Unspecified CSS injection vulnerability. Remote image blocking bypass vi...

FreeBSD : chromium -- multiple security fixes (9bc5a730-0585-11f1-85c5-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9bc5a730-0585-11f1-85c5-a8a1599412c6 advisory. Chrome Releases reports: This update includes 2 security fixes: Tenable has extracted the...

FreeBSD : navidrome -- multiple vulnerabilities (a6effa17-1fd4-4895-8471-d5c684d7807c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a6effa17-1fd4-4895-8471-d5c684d7807c advisory. An XSS vulnerability in the frontend allows a malicious attacker to inject code through the...

FreeBSD : traefik -- ACME TLS-ALPN fast path potential DoS (1a82bf18-0417-11f1-be6f-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1a82bf18-0417-11f1-be6f-5404a68ad561 advisory. The traefik project reports: There is a potential vulnerability in Traefik ACME TLS certificates'...

FreeBSD : qt6-webengine -- multiple vulnerabilities (73ff246b-04b2-11f1-84fc-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 73ff246b-04b2-11f1-84fc-4ccc6adda413 advisory. Qt qtwebengine-chromium repo reports: Backports for 7 security bugs in Chromium: Tenable has...

FreeBSD : python -- several security vulnerabilities (bfe9adc8-0224-11f1-8790-c5fb948922ad)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the bfe9adc8-0224-11f1-8790-c5fb948922ad advisory. The Python project announces a new release with several security fixes: Tenable has extracted...

FreeBSD : xrdp -- remote code execution (232e16cc-fd83-11f0-981a-98b78501ef2a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 232e16cc-fd83-11f0-981a-98b78501ef2a advisory. Denis Skvortsov, Security Researcher at Kaspersky reports: xrdp before v0.10.5 contains an...

FreeBSD : FreeBSD -- Jail escape by a privileged user via nullfs (90071333-fbe5-11f0-a13f-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 90071333-fbe5-11f0-a13f-bc241121aa0a advisory. By default, jailed processes cannot mount filesystems, including nullfs4. However, the allow.mount.null...

FreeBSD : OpenSSL -- Multiple vulnerabilities (4b824428-fb93-11f0-b194-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4b824428-fb93-11f0-b194-8447094a420f advisory. The OpenSSL project reports: Tenable has extracted the preceding description block directly fr...

FreeBSD : zeek -- potential DoS vulnerability (8173e68a-88f3-4862-882c-6e58779d98e7)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8173e68a-88f3-4862-882c-6e58779d98e7 advisory. Tim Wojtulewicz of Corelight reports: Zeek's HTTP analyzer can be tricked into interpreting...

FreeBSD : chromium -- security fix (409d70ab-fc23-11f0-85c5-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 409d70ab-fc23-11f0-85c5-a8a1599412c6 advisory. Chrome Releases reports: This update includes 1 security fix: Tenable has extracted the preceding...

FreeBSD : Firefox -- Multiple vulnerabilities (9dac4f05-fc65-11f0-96db-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9dac4f05-fc65-11f0-96db-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=2007302 reports: Mitigation bypass in the Privacy:...

📄 FreeBSD 15.x rtsold DNSSL Command Injection

This Metasploit module targets a command injection vulnerability in the FreeBSD rtsold daemon related to the handling of DNSSL DNS Search List options in IPv6 Router Advertisements. Due to improper validation of domain names, attacker-controlled DNSSL values can inject shell commands via $...

FreeBSD Security Advisory - FreeBSD-SA-26:01.openssl

FreeBSD Security Advisory - Multiple issues have been reported as part of this advisory with different issues affecting different OpenSSL versions and therefore different FreeBSD versions. Instead of exhaustively listing detailed writeups for each issue, please see the referenced advisory from...

FreeBSD-SA-26:01.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:01.openssl Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenSSL Category: contrib Module: openssl Announced: 2026-01-27 Credits:...

FreeBSD -- Jail escape by a privileged user via nullfs

Problem Description: By default, jailed processes cannot mount filesystems, including nullfs4. However, the allow.mount.nullfs option enables mounting nullfs filesystems, subject to privilege checks. If a privileged user within a jail is able to nullfs-mount directories, a limitation of the...

FreeBSD : MySQL -- Multiple vulnerabilities (ab01cb11-f911-11f0-b194-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ab01cb11-f911-11f0-b194-8447094a420f advisory. Oracle reports: Oracle reports multiple vulnerabilities in its MySQL server products. Tenable...

FreeBSD : wheel -- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (65439aa0-f77d-11f0-9821-b0416f0c4c67)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 65439aa0-f77d-11f0-9821-b0416f0c4c67 advisory. https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx reports: wheel is a command line...

FreeBSD : chromium -- multiple security fixes (f8560c1b-f772-11f0-85c5-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f8560c1b-f772-11f0-85c5-a8a1599412c6 advisory. Chrome Releases reports: This update includes 1 security fix: Tenable has extracted the preceding...

FreeBSD : Gitlab -- vulnerabilities (61dc7f67-f6e5-11f0-b051-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 61dc7f67-f6e5-11f0-b051-2cf05da270f3 advisory. Gitlab reports: Denial of Service issue in Jira Connect integration impacts GitLab CE/EE...