FreeBSD : podman -- podman quadlet install --replace does not fully replace the old file (01c15468-9b7b-11f1-a75c-589cfc10a551)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 01c15468-9b7b-11f1-a75c-589cfc10a551 advisory. The Podman developers report: When running podman quadlet install --replace to replace a Quadlet file, ...

CVE-2026-58085: Improper Verification of Cryptographic Signature

After dispatching a decrypt operation to OCF and receiving the result, the wg4 driver failed to check whether the MAC verification step succeeded. The driver thus silently accepted packets with an invalid Poly1305 authentication tag. A remote attacker who can send UDP packets to a WireGuard...

FreeBSD : Gitlab -- Vulnerabilities (3a65fb7e-9ac2-11f1-bdc8-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3a65fb7e-9ac2-11f1-bdc8-2cf05da270f3 advisory. Gitlab reports: Code Injection issue via GraphQL directive impacts GitLab CE/EE Cross-Site...

FreeBSD : OpenEXR -- 3.4.14 fixes multiple vulnerabilities (56449320-97c5-11f1-84d7-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 56449320-97c5-11f1-84d7-3c7c3fba4204 advisory. Cary Phillips reports: The OpenEXR 3.4.14 release addresses the following security...

FreeBSD : chromium -- security fixes (a4e5cc5f-d4bc-4f67-ad8e-0f6a9e37064f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a4e5cc5f-d4bc-4f67-ad8e-0f6a9e37064f advisory. Chrome Releases reports: This update includes 5 security fixes: Tenable has extracted the...

FreeBSD : chromium -- security fixes (8acd79a5-35ee-4076-b107-3550bbd7d118)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8acd79a5-35ee-4076-b107-3550bbd7d118 advisory. Chrome Releases reports: This update includes 41 security fixes: Tenable has extracted the...

The vulnerability of the ZFS_IOC_SET_PROP handler of the OpenZFS component in FreeBSD allows a attacker to compromise the integrity of the protected information.

The vulnerability of the ZFSIOCSETPROP handler in the OpenZFS component of FreeBSD operating systems is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the mechanism for recording audit entries for system calls to the ptrace() function in the operating system kernel of FreeBSD allows a perpetrator to bypass existing security mechanisms.

The vulnerability of the mechanism for recording audit entries for system calls to the ptrace function in FreeBSD operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass existing security mechanisms...

The vulnerability in the implementation of shared memory objects on FreeBSD’s largepage kernel allows attackers to increase their privileges.

The vulnerability of the implementation of shared memory objects in FreeBSD’s large-page cores is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability in the implementation of shared memory objects on FreeBSD’s largepage kernel allows attackers to increase their privileges.

The vulnerability of the implementation of shared memory objects in FreeBSD’s large-page cores relates to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the ZFS_IOC_RECV_NEW handler of the OpenZFS component in FreeBSD’s operating systems allows a attacker to corrupt memory.

The vulnerability of the ZFSIOCRECVNEW handler of the OpenZFS component in FreeBSD-related operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to corrupt memory...

FreeBSD : gitea -- Multiple vulnerabilities (f4af92f7-95ae-11f1-a6f7-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f4af92f7-95ae-11f1-a6f7-b42e991fc52e advisory. Gitea reports This release addresses the following security vulnerabilities. Please upgrade as...

The vulnerability of the compat32 subsystem in FreeBSD’s kernel allows a hacker to disclose protected information.

The vulnerability of the compat32 compatibility layer in the Linuxulator kernel of FreeBSD operating systems is related to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these layers...

FreeBSD : Roundcube -- Multiple vulnerabilities (54d19b85-93d4-11f1-8144-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 54d19b85-93d4-11f1-8144-8447094a420f advisory. The Roundcube project reports: Tenable has extracted the preceding description block directly from the...

The vulnerability of the BOOTP File Handler component in the FreeBSD operating system allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the BOOTP File Handler component in the FreeBSD operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

The vulnerability of the Message Handler component in the FreeBSD operating system allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the Message Handler component in FreeBSD operating systems is related to the lack of proper checking of the length of user data before it is copied to the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

Vulnerability of the msync(MS_INVALIDATE) function in FreeBSD operating systems, allowing attackers to enhance their privileges

The vulnerability of the msyncMSINVALIDATE function in FreeBSD operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the `execve` system call in FreeBSD’s kernel allows a hacker to gain full control over the system.

The vulnerability of the execve system call in FreeBSD operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain full control over the system...

The vulnerability in the implementation of the waitid() system call layer of the Linuxulator kernel in FreeBSD allows a attacker to disclose protected information.

The vulnerability in the implementation of the waitid system call layer of the Linuxulator kernel in FreeBSD operating systems is related to the use of an uninitialized variable. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security...

The vulnerability of the dhclient component in FreeBSD operating systems allows a attacker to execute arbitrary code with root privileges.

The vulnerability of the dhclient component in FreeBSD operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...