FreeBSD : chromium -- security fixes (c4005254-b922-430f-b94a-dac9f59a527b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c4005254-b922-430f-b94a-dac9f59a527b advisory. Chrome Releases reports: This update includes 4 security fixes: Tenable has extracted the...

FreeBSD : FreeBSD -- Kernel stack disclosure via timer_settime(2) (eab90fc5-8bb7-11f1-a6ab-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the eab90fc5-8bb7-11f1-a6ab-bc241121aa0a advisory. To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time...

FreeBSD : FreeBSD -- Use-after-free in kqueue copy-on-fork (a4e4a74c-8bb7-11f1-a6ab-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a4e4a74c-8bb7-11f1-a6ab-bc241121aa0a advisory. While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be...

FreeBSD : FreeBSD -- ktrace(2) privilege incorrectly validated in jails (73482c83-8bb8-11f1-a6ab-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 73482c83-8bb8-11f1-a6ab-bc241121aa0a advisory. As an inadvertent side effect of an unrelated code change, PRIVKTRACE was always denied to a jailed roo...

FreeBSD Security Advisory - FreeBSD-SA-26:53.ktrace

FreeBSD Security Advisory - As an inadvertent side effect of an unrelated code change, PRIVKTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged...

FreeBSD : Mozilla -- Memory safety bugs (aca6684f-8aa2-11f1-a744-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the aca6684f-8aa2-11f1-a744-b42e991fc52e advisory. https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/CVE-2026-16411 reports Memory safety bugs...

FreeBSD : mailpit -- WebSocket origin check bypass via percent-encoded path (52a3f202-8a77-11f1-ac5d-0897988a1c07)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 52a3f202-8a77-11f1-ac5d-0897988a1c07 advisory. Mailpit author reports: The cross-site WebSocket hijacking fix was reimplemented as an origin check gat...

FreeBSD Security Advisory - FreeBSD-SA-26:52.if_wg

FreeBSD Security Advisory - After dispatching a decrypt operation to OCF and receiving the result, the wg4 driver failed to check whether the MAC verification step succeeded. The driver thus silently accepted packets with an invalid Poly1305 authentication tag...

FreeBSD Security Advisory - FreeBSD-SA-26:50.kqueue

FreeBSD Security Advisory - While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list before the copy was complete. The copy routine did not account for this and could enqueue the new knote a second time, corrupting t...

FreeBSD Security Advisory - FreeBSD-SA-26:54.sysvsem

FreeBSD Security Advisory - The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and reacquired the lock. A sequence-number check was used to verify that the set had not been...

FreeBSD-SA-26:55.elf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:55.elf Security Advisory The FreeBSD Project Topic: Race condition in ELF core dump segment counting Category: core Module: elf Announced: 2026-07-29 Credits...

FreeBSD-SA-26:53.ktrace

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:53.ktrace Security Advisory The FreeBSD Project Topic: ktrace2 privilege incorrectly validated in jails Category: core Module: ktrace Announced: 2026-07-29...

FreeBSD-SA-26:54.sysvsem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:54.sysvsem Security Advisory The FreeBSD Project Topic: Heap out-of-bounds access in semctl2 Category: core Module: sysvsem Announced: 2026-07-29 Credits:...

FreeBSD-SA-26:52.if_wg

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:52.ifwg Security Advisory The FreeBSD Project Topic: Missing MAC validation in wg4 packet decryption Category: core Module: ifwg Announced: 2026-07-29...

FreeBSD-SA-26:50.kqueue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:50.kqueue Security Advisory The FreeBSD Project Topic: Use-after-free in kqueue copy-on-fork Category: core Module: kqueue Announced: 2026-07-29 Credits:...

FreeBSD : GoLand -- Multiple vulnerabilities (35a830f6-8aab-11f1-a744-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 35a830f6-8aab-11f1-a744-b42e991fc52e advisory. https://www.jetbrains.com/privacy-security/issues-fixed/ reports: Tenable has extracted the preceding...

FreeBSD -- ktrace(2) privilege incorrectly validated in jails

Problem Description: As an inadvertent side effect of an unrelated code change, PRIVKTRACE was always denied to a jailed root user. Tracing configured by a jailed root user was therefore not flagged as privileged. Impact: An unprivileged user in a jail that has permission to debug the target...

FreeBSD -- Heap out-of-bounds access in semctl(2)

Problem Description: The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and reacquired the lock. A sequence-number check was used to verify that the set had not been replaced ...

FreeBSD -- Missing MAC validation in wg(4) packet decryption

Problem Description: After dispatching a decrypt operation to OCF and receiving the result, the wg4 driver failed to check whether the MAC verification step succeeded. The driver thus silently accepted packets with an invalid Poly1305 authentication tag. Impact: A remote attacker who can send UDP...

FreeBSD -- Use-after-free in kqueue copy-on-fork

Problem Description: While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list before the copy was complete. The copy routine did not account for this and could enqueue the new knote a second time, corrupting the acti...