FreeBSD-SA-26:53.ktrace

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:53.ktrace Security Advisory The FreeBSD Project Topic: ktrace2 privilege incorrectly validated in jails Category: core Module: ktrace Announced: 2026-07-29...

FreeBSD : Mozilla -- Memory safety bugs (b579bbde-8aa2-11f1-a744-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b579bbde-8aa2-11f1-a744-b42e991fc52e advisory. https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/CVE-2026-16360 reports: Memory safety bug...

FreeBSD : Erlang/OTP -- binary_to_term crash on crafted BIT_BINARY_EXT input (445dc6b9-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445dc6b9-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-54pw-5645-jh86 reports: A specially crafted...

FreeBSD : Erlang/OTP -- megaco flex scanner buffer overflow (445da2cc-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445da2cc-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-7xgh-gmgf-q2g7 reports: A remote unauthenticated...

FreeBSD : Erlang/OTP -- TLS denial of service using invalid certificate chains (445d3f14-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445d3f14-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-r5jr-mq46-vmhw reports: A TLS/DTLS peer can cras...

FreeBSD : Erlang/OTP -- relative path traversal in the zip module (445e11d4-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445e11d4-89e1-11f1-b35c-4c526214c986 advisory. The Erlang/OTP team reports: Fixed a bug where zip:unzip/1,2 and zip:extract/1,2 were vulnerable to a...

FreeBSD : Erlang/OTP -- (D)TLS-1.2 server certificate verification bypass (445c61c0-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445c61c0-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-c6cw-pr89-w882 reports: The OTP TLS/DTLS client...

FreeBSD : Erlang/OTP -- denial of service via exponential certificate policy tree growth (445d674f-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445d674f-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-622p-qfh6-c352 reports: A remote attacker can...

FreeBSD : Erlang/OTP -- heap corruption decoding invalidly encoded large tuples (445df078-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445df078-89e1-11f1-b35c-4c526214c986 advisory. The Erlang/OTP team reports: Fixed heap corruption when an invalidly encoded tuple with an arity of 2^3...

FreeBSD : Erlang/OTP -- denial of service in epmd (445e3324-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445e3324-89e1-11f1-b35c-4c526214c986 advisory. The Erlang/OTP team reports: Mitigated a denial of service attack in epmd. Tenable has extracted the...

FreeBSD : unbound -- multiple vulnerabilities (f63b4b88-6901-4c12-b13d-5a821e25e9bf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f63b4b88-6901-4c12-b13d-5a821e25e9bf advisory. NLnet Labs reports: This release consolidates security fixes for issues reported over a period...

FreeBSD : gstreamer1 -- multiple vulnerabilities (6eee35e6-fca5-4db2-ab73-f27add3e3ef1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6eee35e6-fca5-4db2-ab73-f27add3e3ef1 advisory. The GStreamer project reports: Multiple security issues were identified and fixed in the...

FreeBSD : Vaultwarden -- multiple vulnerabilities (68b8de3a-8821-11f1-b72c-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 68b8de3a-8821-11f1-b72c-8447094a420f advisory. The Vaultwarden project reports: Tenable has extracted the preceding description block directly from th...

FreeBSD : giflib -- Buffer Overflow vulnerability (dd6096e6-8555-11f1-b4c7-00a0980083d7)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the dd6096e6-8555-11f1-b4c7-00a0980083d7 advisory. https://github.com/zakkanijia/POC/blob/main/giflib/giftool/giflibgiftoolgcelenheapoobwritedisclosure .m...

FreeBSD : srt -- Multiple vulnerabilities (037b7b00-84d4-11f1-8f76-345a6001a2f9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 037b7b00-84d4-11f1-8f76-345a6001a2f9 advisory. The SRT project reports: Tenable has extracted the preceding description block directly from t...

FreeBSD : Mailpit -- SMTP DATA line reader buffers over-limit input before size enforcement (562ff91e-8407-11f1-bfde-10ffe07f9334)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 562ff91e-8407-11f1-bfde-10ffe07f9334 advisory. Mailpit author reports: Mailpit's SMTP DATA reader enforces the configured MaxMessageSize only after...

FreeBSD : Weechat -- Multiple vulnerabilities (f4c57c5a-845a-11f1-b72c-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f4c57c5a-845a-11f1-b72c-8447094a420f advisory. The Weechat project reports: Write of logger file outside of configured path. Authentication bypass in...

FreeBSD : tailscale -- Multiple vulnerabilities (272a2772-8367-11f1-82b9-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 272a2772-8367-11f1-82b9-901b0e9408dc advisory. Tailscale team reports: Tailscale SSH Unix socket forwarding respects symlink permissions. This fix...

FreeBSD : phpmyfaq -- multiple vulnerabilities (0a0aca9f-8290-11f1-a93b-50ebf6bdf8e9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0a0aca9f-8290-11f1-a93b-50ebf6bdf8e9 advisory. phpMyFAQ team reports: An authenticated administrator can supply an untrusted update-package path to th...

FreeBSD : traefik -- Multiple vulnerabilities (9645fcd7-82a1-11f1-8c96-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9645fcd7-82a1-11f1-8c96-5404a68ad561 advisory. The traefik project releases a new version addressing multiple vulnerabilities: Tenable has extracted t...