FreeBSD-SA-26:65.kqueue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:65.kqueue Security Advisory The FreeBSD Project Topic: Memory safety bugs in kqueue copy-on-fork implementation Category: core Module: kqueue Announced:...

FreeBSD Security Advisory - FreeBSD-SA-26:69.udp

FreeBSD Security Advisory - IPv6 UDP sendto2 bypasses jail loopback restriction. A process in a classic non-VNET jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail network isolation...

FreeBSD Security Advisory - FreeBSD-SA-26:64.sysvsem

FreeBSD Security Advisory - Heap out-of-bounds access in semop2. An unprivileged local user can trigger an out-of-bounds access on kernel heap memory, potentially leading to privilege escalation...

FreeBSD Security Advisory - FreeBSD-SA-26:66.jail

FreeBSD Security Advisory - Multiple jail filesystem root escapes. A process in a jail that has received a directory file descriptor from another jail can use these techniques to escape the jail's filesystem root restriction...

FreeBSD Security Advisory - FreeBSD-SA-26:65.kqueue

FreeBSD Security Advisory - Memory safety bugs in kqueue copy-on-fork implementation. An unprivileged local user may be able to exploit these races to escalate privileges...

FreeBSD : Fetchmail -- NTLM potential remote code execution (15e880b4-b9ed-11f1-b17e-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 15e880b4-b9ed-11f1-b17e-3c7c3fba4204 advisory. Fetchmail reports: CVE-2026-94184: Fetchmail's NTLM authentication client can in some cases be...

FreeBSD : Rauthy -- Multiple security vulnerabilities (2ec747aa-b97e-11f1-b09d-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2ec747aa-b97e-11f1-b09d-8447094a420f advisory. The Rauthy project reports: WebAuthn authentication code is not bound to the user. GHSA-x8jp-v2j6-6vjf...

FreeBSD : chromium -- security fixes (bd24bc14-b9a9-11f1-bf98-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the bd24bc14-b9a9-11f1-bf98-a8a1599412c6 advisory. Chrome Releases reports: This update includes 108 security fixes: Tenable has extracted the...

FreeBSD : p5-YAML-Syck -- Multiple vulnerabilities (501ff33c-b996-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 501ff33c-b996-11f1-ad2b-40b034429ecf advisory. YAML-Syck project reports: YAML-Syck 1.47 fix the following issues: Tenable has extracted the...

FreeBSD : RusTLS FFI -- plaintext TLS handshake vulnerability (ff969b25-b97b-11f1-b09d-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ff969b25-b97b-11f1-b09d-8447094a420f advisory. The RusTLS project reports: TLS 1.3 handshake message processing could allow a broken peer to send...

FreeBSD : p5-Authen-SASL -- Replay attack in Authen::SASL::Perl::DIGEST_MD5 (023a3d0c-b987-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 023a3d0c-b987-11f1-ad2b-40b034429ecf advisory. Authen-SASL project reports: Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept...

FreeBSD : Erlang/OTP -- multiple vulnerabilities in ssl, ssh and asn1 (60eb0bba-b668-11f1-9d0e-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 60eb0bba-b668-11f1-9d0e-4c526214c986 advisory. The Erlang/OTP project reports: OTP 29.1.1, 28.5.0.7 and 27.3.4.18 fix the following issues:...

FreeBSD : databases/p5-DBI -- multiple vulnerabilities (675bc714-b8cd-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 675bc714-b8cd-11f1-ad2b-40b034429ecf advisory. DBI project reports: DBI 1.650, 1.651, 1.652, 1.653 and 1.654 fix the following issues: Tenabl...

FreeBSD : podman -- vulnerabilities (050e54b4-b81e-11f1-b540-589cfc10a551)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 050e54b4-b81e-11f1-b540-589cfc10a551 advisory. The Podman developers report: This release addresses CVE-2025-11395, where importing images...

FreeBSD : angie-module-njs -- multiple vulnerabilities (6cf326a2-b38c-11f1-a655-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6cf326a2-b38c-11f1-a655-3497f65b111b advisory. The njs development team reports: Access control bypass in jsaccess when an asynchronous reque...

CVE-2026-55074

Ansible FreeBSD Jail Connection Plugin is an Ansible connection plugin for FreeBSD Jails via jexec. Through version 1.3.0, the jailexec connection plugin's putfile resolved a transfer's destination to a path on the jail host + and ran mkdir -p and mv there as root on the host. Those commands foll...

CVE-2026-55074 Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)

Ansible FreeBSD Jail Connection Plugin is an Ansible connection plugin for FreeBSD Jails via jexec. Through version 1.3.0, the jailexec connection plugin's putfile resolved a transfer's destination to a path on the jail host + and ran mkdir -p and mv there as root on the host. Those commands foll...

CVE-2026-55074 Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)

Ansible FreeBSD Jail Connection Plugin is an Ansible connection plugin for FreeBSD Jails via jexec. Through version 1.3.0, the jailexec connection plugin's putfile resolved a transfer's destination to a path on the jail host + and ran mkdir -p and mv there as root on the host. Those commands foll...

EUVD-2026-83940

Ansible FreeBSD Jail Connection Plugin is an Ansible connection plugin for FreeBSD Jails via jexec. Through version 1.3.0, the jailexec connection plugin's putfile resolved a transfer's destination to a path on the jail host + and ran mkdir -p and mv there as root on the host. Those commands foll...

CVE-2026-55074 Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)

Ansible FreeBSD Jail Connection Plugin is an Ansible connection plugin for FreeBSD Jails via jexec. Through version 1.3.0, the jailexec connection plugin's putfile resolved a transfer's destination to a path on the jail host + and ran mkdir -p and mv there as root on the host. Those commands foll...