FreeBSD -- Jail reference count underflow

Problem Description: When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. Impact: An...

FreeBSD -- Kernel stack disclosure in Linux compatibility layer

Problem Description: The Linux waitid implementation translates a FreeBSD siginfot struct into a stack-declared Linux siginfot. It did not first zero the stack struct. Impact: An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information...

FreeBSD : PowerDNS -- vulnerabilities (a8614190-73b4-11f1-910d-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a8614190-73b4-11f1-910d-3c7c3fba4204 advisory. PowerDNS Team reports: Thanks to people below for reporting these vulnerabilities: Thanks to...

FreeBSD : powerdns-recursor -- vulnerabilities (62c4ed54-73aa-11f1-910d-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 62c4ed54-73aa-11f1-910d-3c7c3fba4204 advisory. PowerDNS Team reports: Thanks to people below for reporting these vulnerabilities. Tenable has...

FreeBSD : gitea -- multiple vulnerabilities (f00e2de8-7d30-48d2-a43d-68206347dea6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f00e2de8-7d30-48d2-a43d-68206347dea6 advisory. The Gitea team reports: Tenable has extracted the preceding description block directly from th...

FreeBSD : gstreamer1 -- multiple vulnerabilities (4e82a0e6-6801-42c6-8fb6-91b6b275a9e1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4e82a0e6-6801-42c6-8fb6-91b6b275a9e1 advisory. The GStreamer project reports: Multiple security issues were identified and fixed in the...

FreeBSD : DNSdist -- vulnerabilities (6c0e17cf-73a0-11f1-910d-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6c0e17cf-73a0-11f1-910d-3c7c3fba4204 advisory. The DNSdist team reports: Thanks to people below for reporting these vulnerabilities. Tenable...

FreeBSD : Multiple vulnerability found in Expat (d06b1fa2-731f-11f1-a0d2-589cfc10a551)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d06b1fa2-731f-11f1-a0d2-589cfc10a551 advisory. Expat 2.8.2 was released yesterday. The key motivation for cutting a release and doing so now...

FreeBSD : ffmpeg -- Out-of-bounds write (ba8d239f-709f-11f1-a30e-28d2443e6cfa)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ba8d239f-709f-11f1-a30e-28d2443e6cfa advisory. https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23159 reports: An out-of-bounds write vulnerability in...

FreeBSD : ldns -- CWE-346 Origin Validation Error (71a85f96-6f18-11f1-8569-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 71a85f96-6f18-11f1-8569-3c7c3fba4204 advisory. https://www.nlnetlabs.nl/downloads/ldns/CVE-2026-10846.txt reports: NLnet Labs ldns 1.2.0 up to and...

FreeBSD : podman -- files outside build context may be included via malicious Git repo or tar archive (fe2e8bdc-ff48-4166-b285-59822c7cf473)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fe2e8bdc-ff48-4166-b285-59822c7cf473 advisory. The Podman developers report: Building a Dockerfile using an ADD or COPY instruction accessing a...

FreeBSD : nginx -- multiple vulnerabilities (46b654f8-6b28-11f1-b8e5-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 46b654f8-6b28-11f1-b8e5-3497f65b111b advisory. The nginx developers report: A heap memory buffer overflow vulnerability when using the...

FreeBSD : nginx -- multiple vulnerabilities (08b0c0f6-6a85-11f1-b8e5-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 08b0c0f6-6a85-11f1-b8e5-3497f65b111b advisory. The nginx developers report: A use-after-free vulnerability when using HTTP/3 and processing a...

FreeBSD : jenkins -- multiple vulnerabilities (35598415-56de-4562-959c-11fb1fd2d995)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 35598415-56de-4562-959c-11fb1fd2d995 advisory. Jenkins Security Advisory 2026-06-10: Tenable has extracted the preceding description block...

FreeBSD : chromium -- security fixes (cffe1232-e4b3-4c72-8b4c-6a8298c9b289)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cffe1232-e4b3-4c72-8b4c-6a8298c9b289 advisory. Chrome Releases reports: This update includes 33 security fixes: Tenable has extracted the...

FreeBSD : mail/mailpit -- Incomplete SSRF protection in Link Check API via uncovered IPv6 forms (44afeb08-6a18-11f1-9647-10ffe07f9334)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 44afeb08-6a18-11f1-9647-10ffe07f9334 advisory. Mailpit authorreports: The tools.IsInternalIP deny-list relies on Go's stdlib classification helpers...

PT-2026-55923

Name of the Vulnerable Software and Affected Versions FreeBSD OpenZFS affected versions not specified Description A kernel heap overflow exists in the zfs ioc userspace many function within the ZFS IOC USERSPACE MANY ioctl used by zfs-userspace8. The issue occurs because a 64-bit output buffer si...

FreeBSD : chromium -- security fixes (1466c84c-68b1-11f1-8de5-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1466c84c-68b1-11f1-8de5-a8a1599412c6 advisory. Chrome Releases reports: This update includes 28 security fixes: Tenable has extracted the...

FreeBSD : libsmi -- Buffer overflow in the smiGetNode function in lib/smi (76b09b16-638b-11f1-8e16-901b0e13f1a0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 76b09b16-638b-11f1-8e16-901b0e13f1a0 advisory. http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html reports: Buffer overflow in...

FreeBSD : caddy -- multiple vulnerabilities (94f93681-6775-11f1-8044-002590af0794)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 94f93681-6775-11f1-8044-002590af0794 advisory. Caddy project reports: Caddy 2.11.4 contains multiple security fixes. GitHub Security Advisory...