Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 11 Jun 2026 14:15:10 +0900
From:      Jason Shim <aqua.shim@gmail.com>
To:        freebsd-security@freebsd.org
Subject:   Re: FreeBSD Security Advisory FreeBSD-SA-26:35.openssl
Message-ID:  <CABFaMo6m6=6g%2Bd2Yoo0No3bDEtGQPxgFg8Vk5BQuFeF78%2BWF%2BQ@mail.gmail.com>
In-Reply-To: <20260609231407.4C8371FCC4@freefall.freebsd.org>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
unsubscribe

On Wed, Jun 10, 2026 at 9:18 AM FreeBSD Security Advisories <
security-advisories@freebsd.org> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
>
> =============================================================================
> FreeBSD-SA-26:35.openssl                                    Security
> Advisory
>                                                           The FreeBSD
> Project
>
> Topic:          Multiple vulnerabilities in OpenSSL
>
> Category:       contrib
> Module:         openssl
> Announced:      2026-06-09
> Credits:        See linked vendor advisory in References section
> Affects:        All supported versions of FreeBSD.
> Corrected:      2026-06-09 19:17:36 UTC (stable/15, 15.1-STABLE)
>                 2026-06-09 19:20:15 UTC (releng/15.1, 15.1-RC3-p1)
>                 2026-06-09 19:19:54 UTC (releng/15.0, 15.0-RELEASE-p10)
>                 2026-06-09 19:17:54 UTC (stable/14, 14.4-STABLE)
>                 2026-06-09 19:19:16 UTC (releng/14.4, 14.4-RELEASE-p6)
>                 2026-06-09 19:18:46 UTC (releng/14.3, 14.3-RELEASE-p15)
> CVE Name:       CVE-2026-7383, CVE-2026-9076, CVE-2026-34180,
>                 CVE-2026-34181, CVE-2026-34182, CVE-2026-34183,
>                 CVE-2026-42764, CVE-2026-42766, CVE-2026-42767,
>                 CVE-2026-42768, CVE-2026-42769, CVE-2026-42770,
>                 CVE-2026-45445, CVE-2026-45446, CVE-2026-45447
>
> For general information regarding FreeBSD Security Advisories,
> including descriptions of the fields above, security branches, and the
> following sections, please visit <URL:https://security.FreeBSD.org/>.
>
> I.   Background
>
> FreeBSD includes software from the OpenSSL Project.  The OpenSSL Project
> is a
> collaborative effort to develop a robust, commercial-grade, full-featured
> Open Source toolkit for the Transport Layer Security (TLS) protocol.  It is
> also a general-purpose cryptography library.
>
> II.  Problem Description
>
> Multiple issues have been reported as part of this advisory with different
> issues affecting different OpenSSL versions and therefore different FreeBSD
> versions.  Instead of exhaustively listing detailed writeups for each
> issue,
> please see the referenced advisory from OpenSSL.
>
> Issues affecting FreeBSD 15.x (OpenSSL 3.5):
>   CVE-2026-7383  - Possible heap buffer overflow in ASN.1 string conversion
>   CVE-2026-9076  - Out-of-bounds read in CMS password-based decryption
>   CVE-2026-34180 - Heap buffer over-read in ASN.1 content parsing
>   CVE-2026-34181 - PKCS#12 files with PBMAC1 accepted with short HMAC keys
>   CVE-2026-34182 - CMS AuthEnvelopedData may accept forged messages
>   CVE-2026-34183 - Unbounded memory growth in the QUIC PATH_CHALLENGE
> handler
>   CVE-2026-42764 - NULL dereference in QUIC server initial packet handling
>   CVE-2026-42766 - Possible NULL dereference in password-based CMS
> decryption
>   CVE-2026-42767 - NULL dereference in CRMF EncryptedValue decryption
>   CVE-2026-42768 - Bleichenbacher oracle in CMS_decrypt() and
> PKCS7_decrypt()
>   CVE-2026-42769 - Trust-anchor substitution in CMP rootCaKeyUpdate
> handling
>   CVE-2026-42770 - FFC-DH peer validation uses attacker-supplied q
>   CVE-2026-45445 - AES-OCB IV ignored on the EVP_Cipher() one-shot path
>   CVE-2026-45446 - Empty-message tag bypass in AES-GCM-SIV and AES-SIV
> modes
>   CVE-2026-45447 - Heap use-after-free in PKCS7_verify()
>
> Issues affecting FreeBSD 14.x (OpenSSL 3.0):
>   CVE-2026-7383  - Possible heap buffer overflow in ASN.1 string conversion
>   CVE-2026-9076  - Out-of-bounds read in CMS password-based decryption
>   CVE-2026-34180 - Heap buffer over-read in ASN.1 content parsing
>   CVE-2026-34182 - CMS AuthEnvelopedData may accept forged messages
>   CVE-2026-42766 - Possible NULL dereference in password-based CMS
> decryption
>   CVE-2026-42770 - FFC-DH peer validation uses attacker-supplied q
>   CVE-2026-45445 - AES-OCB IV ignored on the EVP_Cipher() one-shot path
>   CVE-2026-45446 - Empty-message tag bypass in AES-GCM-SIV and AES-SIV
> modes
>   CVE-2026-45447 - Heap use-after-free in PKCS7_verify()
>
> III. Impact
>
> The issues include heap buffer overflows and over-reads, NULL pointer
> dereferences, a use-after-free, unbounded memory allocation, and several
> cryptographic flaws permitting message forgery, integrity bypass, or
> recovery of a private key.
>
> Security impact ranges from a Denial of Service to a potential remote code
> execution.  See the OpenSSL advisory for specific details.
>
> IV.  Workaround
>
> No workaround is available.
>
> V.   Solution
>
> Upgrade your vulnerable system to a supported FreeBSD stable or
> release / security branch (releng) dated after the correction date.
>
> Perform one of the following:
>
> 1) To update your vulnerable system installed from base system packages:
>
> Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm64
> platforms, which were installed using base system packages, can be updated
> via the pkg(8) utility:
>
> # pkg upgrade -r FreeBSD-base
> # shutdown -r +10min "Rebooting for a security update"
>
> 2) To update your vulnerable system installed from binary distribution
> sets:
>
> Systems running a RELEASE version of FreeBSD on the amd64 or arm64
> platforms
> which were not installed using base system packages can be updated via the
> freebsd-update(8) utility:
>
> # freebsd-update fetch
> # freebsd-update install
> # shutdown -r +10min "Rebooting for a security update"
>
> 3) To update your vulnerable system via a source code patch:
>
> The following patches have been verified to apply to the applicable
> FreeBSD release branches.
>
> a) Download the relevant patch from the location below, and verify the
> detached PGP signature using your PGP utility.
>
> [FreeBSD 15.x]
> # fetch https://security.FreeBSD.org/patches/SA-26:35/openssl-15.patch
> # fetch https://security.FreeBSD.org/patches/SA-26:35/openssl-15.patch.asc
> # gpg --verify openssl-15.patch.asc
>
> [FreeBSD 14.x]
> # fetch https://security.FreeBSD.org/patches/SA-26:35/openssl-14.patch
> # fetch https://security.FreeBSD.org/patches/SA-26:35/openssl-14.patch.asc
> # gpg --verify openssl-14.patch.asc
>
> b) Apply the patch.  Execute the following commands as root:
>
> # cd /usr/src
> # patch < /path/to/patch
>
> c) Recompile the operating system using buildworld and installworld as
> described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.
>
> Restart all daemons that use the library, or reboot the system.
>
> VI.  Correction details
>
> This issue is corrected as of the corresponding Git commit hash in the
> following stable and release branches:
>
> Branch/path                             Hash                     Revision
> - -------------------------------------------------------------------------
> stable/15/                              865c8ff56693    stable/15-n283889
> releng/15.1/                            083bb80a125a  releng/15.1-n283559
> releng/15.0/                            0d6ccbb7524f  releng/15.0-n281062
> stable/14/                              ec6bfa889b83    stable/14-n274318
> releng/14.4/                            1929d9e173e5  releng/14.4-n273724
> releng/14.3/                            dd3096b4efe6  releng/14.3-n271524
> - -------------------------------------------------------------------------
>
> Run the following command to see which files were modified by a
> particular commit:
>
> # git show --stat <commit hash>
>
> Or visit the following URL, replacing NNNNNN with the hash:
>
> <URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>;
>
> To determine the commit count in a working tree (for comparison against
> nNNNNNN in the table above), run:
>
> # git rev-list --count --first-parent HEAD
>
> VII. References
>
> <URL:https://openssl-library.org/news/secadv/20260609.txt>;
>
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-7383>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-9076>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-34180>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-34181>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-34182>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-34183>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-42764>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-42766>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-42767>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-42768>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-42769>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-42770>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-45445>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-45446>;
> <URL:https://www.cve.org/CVERecord?id=CVE-2026-45447>;
>
> The latest revision of this advisory is available at
> <URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-26:35.openssl.asc>;
> -----BEGIN PGP SIGNATURE-----
>
> iQJPBAEBCgA5FiEEthUnfoEIffdcgYM7bljekB8AGu8FAmoolxkbFIAAAAAABAAO
> bWFudTIsMi41KzEuMTIsMCwzAAoJEG5Y3pAfABrvIjEQALlvtT/r8WJ72cw03AZP
> 1qPNWibqFxrMccV/fEtVq2csUzMkSq6PvgK3ZZoKgh8e2whpJkEULxRJ5Th8IEoD
> McbPdU4+zgqcehfmH6mvuv/yshDJLe0U2iLFSTbzgbx8xe0XRyWJlutlNXSZmLvo
> N87HGEtO/gXCXJxZuWFDE4JfO/bECn8wgZ468AD+OMwKRnx13hszmqKnp4cn/bZ8
> 764BqDsyweCBSVbW7AC0A5/BP7e+S+eOGHDSDqm48Jxk8eVsEVvw5wEo7DMLQgQw
> /kHc9BSiQ6HPgMvjDryUzX/FhF3El3sKQxkUXNFGcYk8yChTEVtD1C+zf3FACQJA
> ZTeDNgJelmeJdK7uzrJtX/8Laozma0+x1+2+YrY+Y1aCqOZ0iicmlytZHRHgZc3R
> riEEJdw3nlV6r43WtwBYjJNyOIiqPusYK8K0/RLnMeMtS+mwjjNjGxqcHdFPbSa7
> Xjs4zSAHgkg9NHMwD4S+F+upRZ3yVoZOvIDtqUKO85Mf70OYHHoaZJE4Q7mIPDyE
> CbtpeaNpjSkujTR5/Us4JgxRfDqDGyyER/Ub1yZl8uuhKNU7QuOWRQMTeIXp42Es
> uClHfLQz5Dvmwy7muDfg5cY0R/F9whvpwSOmILrsViBjcygkzFY9lE1ufW685vbH
> 1srvsOXI5oN55cZrX4+H6G17
> =UV/w
> -----END PGP SIGNATURE-----
>
>

[-- Attachment #2 --]
<div dir="ltr">unsubscribe</div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Wed, Jun 10, 2026 at 9:18 AM FreeBSD Security Advisories &lt;<a href="mailto:security-advisories@freebsd.org">security-advisories@freebsd.org</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA512<br>
<br>
=============================================================================<br>
FreeBSD-SA-26:35.openssl                                    Security Advisory<br>
                                                          The FreeBSD Project<br>
<br>
Topic:          Multiple vulnerabilities in OpenSSL<br>
<br>
Category:       contrib<br>
Module:         openssl<br>
Announced:      2026-06-09<br>
Credits:        See linked vendor advisory in References section<br>
Affects:        All supported versions of FreeBSD.<br>
Corrected:      2026-06-09 19:17:36 UTC (stable/15, 15.1-STABLE)<br>
                2026-06-09 19:20:15 UTC (releng/15.1, 15.1-RC3-p1)<br>
                2026-06-09 19:19:54 UTC (releng/15.0, 15.0-RELEASE-p10)<br>
                2026-06-09 19:17:54 UTC (stable/14, 14.4-STABLE)<br>
                2026-06-09 19:19:16 UTC (releng/14.4, 14.4-RELEASE-p6)<br>
                2026-06-09 19:18:46 UTC (releng/14.3, 14.3-RELEASE-p15)<br>
CVE Name:       CVE-2026-7383, CVE-2026-9076, CVE-2026-34180,<br>
                CVE-2026-34181, CVE-2026-34182, CVE-2026-34183,<br>
                CVE-2026-42764, CVE-2026-42766, CVE-2026-42767,<br>
                CVE-2026-42768, CVE-2026-42769, CVE-2026-42770,<br>
                CVE-2026-45445, CVE-2026-45446, CVE-2026-45447<br>
<br>
For general information regarding FreeBSD Security Advisories,<br>
including descriptions of the fields above, security branches, and the<br>
following sections, please visit &lt;URL:<a href="https://security.FreeBSD.org/" rel="noreferrer" target="_blank">https://security.FreeBSD.org/</a>&gt;.<br>;
<br>
I.   Background<br>
<br>
FreeBSD includes software from the OpenSSL Project.  The OpenSSL Project is a<br>
collaborative effort to develop a robust, commercial-grade, full-featured<br>
Open Source toolkit for the Transport Layer Security (TLS) protocol.  It is<br>
also a general-purpose cryptography library.<br>
<br>
II.  Problem Description<br>
<br>
Multiple issues have been reported as part of this advisory with different<br>
issues affecting different OpenSSL versions and therefore different FreeBSD<br>
versions.  Instead of exhaustively listing detailed writeups for each issue,<br>
please see the referenced advisory from OpenSSL.<br>
<br>
Issues affecting FreeBSD 15.x (OpenSSL 3.5):<br>
  CVE-2026-7383  - Possible heap buffer overflow in ASN.1 string conversion<br>
  CVE-2026-9076  - Out-of-bounds read in CMS password-based decryption<br>
  CVE-2026-34180 - Heap buffer over-read in ASN.1 content parsing<br>
  CVE-2026-34181 - PKCS#12 files with PBMAC1 accepted with short HMAC keys<br>
  CVE-2026-34182 - CMS AuthEnvelopedData may accept forged messages<br>
  CVE-2026-34183 - Unbounded memory growth in the QUIC PATH_CHALLENGE handler<br>
  CVE-2026-42764 - NULL dereference in QUIC server initial packet handling<br>
  CVE-2026-42766 - Possible NULL dereference in password-based CMS decryption<br>
  CVE-2026-42767 - NULL dereference in CRMF EncryptedValue decryption<br>
  CVE-2026-42768 - Bleichenbacher oracle in CMS_decrypt() and PKCS7_decrypt()<br>
  CVE-2026-42769 - Trust-anchor substitution in CMP rootCaKeyUpdate handling<br>
  CVE-2026-42770 - FFC-DH peer validation uses attacker-supplied q<br>
  CVE-2026-45445 - AES-OCB IV ignored on the EVP_Cipher() one-shot path<br>
  CVE-2026-45446 - Empty-message tag bypass in AES-GCM-SIV and AES-SIV modes<br>
  CVE-2026-45447 - Heap use-after-free in PKCS7_verify()<br>
<br>
Issues affecting FreeBSD 14.x (OpenSSL 3.0):<br>
  CVE-2026-7383  - Possible heap buffer overflow in ASN.1 string conversion<br>
  CVE-2026-9076  - Out-of-bounds read in CMS password-based decryption<br>
  CVE-2026-34180 - Heap buffer over-read in ASN.1 content parsing<br>
  CVE-2026-34182 - CMS AuthEnvelopedData may accept forged messages<br>
  CVE-2026-42766 - Possible NULL dereference in password-based CMS decryption<br>
  CVE-2026-42770 - FFC-DH peer validation uses attacker-supplied q<br>
  CVE-2026-45445 - AES-OCB IV ignored on the EVP_Cipher() one-shot path<br>
  CVE-2026-45446 - Empty-message tag bypass in AES-GCM-SIV and AES-SIV modes<br>
  CVE-2026-45447 - Heap use-after-free in PKCS7_verify()<br>
<br>
III. Impact<br>
<br>
The issues include heap buffer overflows and over-reads, NULL pointer<br>
dereferences, a use-after-free, unbounded memory allocation, and several<br>
cryptographic flaws permitting message forgery, integrity bypass, or<br>
recovery of a private key.<br>
<br>
Security impact ranges from a Denial of Service to a potential remote code<br>
execution.  See the OpenSSL advisory for specific details.<br>
<br>
IV.  Workaround<br>
<br>
No workaround is available.<br>
<br>
V.   Solution<br>
<br>
Upgrade your vulnerable system to a supported FreeBSD stable or<br>
release / security branch (releng) dated after the correction date.<br>
<br>
Perform one of the following:<br>
<br>
1) To update your vulnerable system installed from base system packages:<br>
<br>
Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm64<br>
platforms, which were installed using base system packages, can be updated<br>
via the pkg(8) utility:<br>
<br>
# pkg upgrade -r FreeBSD-base<br>
# shutdown -r +10min &quot;Rebooting for a security update&quot;<br>
<br>
2) To update your vulnerable system installed from binary distribution sets:<br>
<br>
Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms<br>
which were not installed using base system packages can be updated via the<br>
freebsd-update(8) utility:<br>
<br>
# freebsd-update fetch<br>
# freebsd-update install<br>
# shutdown -r +10min &quot;Rebooting for a security update&quot;<br>
<br>
3) To update your vulnerable system via a source code patch:<br>
<br>
The following patches have been verified to apply to the applicable<br>
FreeBSD release branches.<br>
<br>
a) Download the relevant patch from the location below, and verify the<br>
detached PGP signature using your PGP utility.<br>
<br>
[FreeBSD 15.x]<br>
# fetch <a href="https://security.FreeBSD.org/patches/SA-26:35/openssl-15.patch" rel="noreferrer" target="_blank">https://security.FreeBSD.org/patches/SA-26:35/openssl-15.patch</a><br>;
# fetch <a href="https://security.FreeBSD.org/patches/SA-26:35/openssl-15.patch.asc" rel="noreferrer" target="_blank">https://security.FreeBSD.org/patches/SA-26:35/openssl-15.patch.asc</a><br>;
# gpg --verify openssl-15.patch.asc<br>
<br>
[FreeBSD 14.x]<br>
# fetch <a href="https://security.FreeBSD.org/patches/SA-26:35/openssl-14.patch" rel="noreferrer" target="_blank">https://security.FreeBSD.org/patches/SA-26:35/openssl-14.patch</a><br>;
# fetch <a href="https://security.FreeBSD.org/patches/SA-26:35/openssl-14.patch.asc" rel="noreferrer" target="_blank">https://security.FreeBSD.org/patches/SA-26:35/openssl-14.patch.asc</a><br>;
# gpg --verify openssl-14.patch.asc<br>
<br>
b) Apply the patch.  Execute the following commands as root:<br>
<br>
# cd /usr/src<br>
# patch &lt; /path/to/patch<br>
<br>
c) Recompile the operating system using buildworld and installworld as<br>
described in &lt;URL:<a href="https://www.FreeBSD.org/handbook/makeworld.html" rel="noreferrer" target="_blank">https://www.FreeBSD.org/handbook/makeworld.html</a>&gt;.<br>;
<br>
Restart all daemons that use the library, or reboot the system.<br>
<br>
VI.  Correction details<br>
<br>
This issue is corrected as of the corresponding Git commit hash in the<br>
following stable and release branches:<br>
<br>
Branch/path                             Hash                     Revision<br>
- -------------------------------------------------------------------------<br>
stable/15/                              865c8ff56693    stable/15-n283889<br>
releng/15.1/                            083bb80a125a  releng/15.1-n283559<br>
releng/15.0/                            0d6ccbb7524f  releng/15.0-n281062<br>
stable/14/                              ec6bfa889b83    stable/14-n274318<br>
releng/14.4/                            1929d9e173e5  releng/14.4-n273724<br>
releng/14.3/                            dd3096b4efe6  releng/14.3-n271524<br>
- -------------------------------------------------------------------------<br>
<br>
Run the following command to see which files were modified by a<br>
particular commit:<br>
<br>
# git show --stat &lt;commit hash&gt;<br>
<br>
Or visit the following URL, replacing NNNNNN with the hash:<br>
<br>
&lt;URL:<a href="https://cgit.freebsd.org/src/commit/?id=NNNNNN" rel="noreferrer" target="_blank">https://cgit.freebsd.org/src/commit/?id=NNNNNN</a>&gt;<br>;
<br>
To determine the commit count in a working tree (for comparison against<br>
nNNNNNN in the table above), run:<br>
<br>
# git rev-list --count --first-parent HEAD<br>
<br>
VII. References<br>
<br>
&lt;URL:<a href="https://openssl-library.org/news/secadv/20260609.txt" rel="noreferrer" target="_blank">https://openssl-library.org/news/secadv/20260609.txt</a>&gt;<br>;
<br>
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-7383" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-7383</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-9076" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-9076</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-34180" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-34180</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-34181" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-34181</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-34182" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-34182</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-34183" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-34183</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-42764" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-42764</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-42766" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-42766</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-42767" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-42767</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-42768" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-42768</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-42769" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-42769</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-42770" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-42770</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-45445" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-45445</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-45446" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-45446</a>&gt;<br>;
&lt;URL:<a href="https://www.cve.org/CVERecord?id=CVE-2026-45447" rel="noreferrer" target="_blank">https://www.cve.org/CVERecord?id=CVE-2026-45447</a>&gt;<br>;
<br>
The latest revision of this advisory is available at<br>
&lt;URL:<a href="https://security.FreeBSD.org/advisories/FreeBSD-SA-26:35.openssl.asc" rel="noreferrer" target="_blank">https://security.FreeBSD.org/advisories/FreeBSD-SA-26:35.openssl.asc</a>&gt;<br>;
-----BEGIN PGP SIGNATURE-----<br>
<br>
iQJPBAEBCgA5FiEEthUnfoEIffdcgYM7bljekB8AGu8FAmoolxkbFIAAAAAABAAO<br>
bWFudTIsMi41KzEuMTIsMCwzAAoJEG5Y3pAfABrvIjEQALlvtT/r8WJ72cw03AZP<br>
1qPNWibqFxrMccV/fEtVq2csUzMkSq6PvgK3ZZoKgh8e2whpJkEULxRJ5Th8IEoD<br>
McbPdU4+zgqcehfmH6mvuv/yshDJLe0U2iLFSTbzgbx8xe0XRyWJlutlNXSZmLvo<br>
N87HGEtO/gXCXJxZuWFDE4JfO/bECn8wgZ468AD+OMwKRnx13hszmqKnp4cn/bZ8<br>
764BqDsyweCBSVbW7AC0A5/BP7e+S+eOGHDSDqm48Jxk8eVsEVvw5wEo7DMLQgQw<br>
/kHc9BSiQ6HPgMvjDryUzX/FhF3El3sKQxkUXNFGcYk8yChTEVtD1C+zf3FACQJA<br>
ZTeDNgJelmeJdK7uzrJtX/8Laozma0+x1+2+YrY+Y1aCqOZ0iicmlytZHRHgZc3R<br>
riEEJdw3nlV6r43WtwBYjJNyOIiqPusYK8K0/RLnMeMtS+mwjjNjGxqcHdFPbSa7<br>
Xjs4zSAHgkg9NHMwD4S+F+upRZ3yVoZOvIDtqUKO85Mf70OYHHoaZJE4Q7mIPDyE<br>
CbtpeaNpjSkujTR5/Us4JgxRfDqDGyyER/Ub1yZl8uuhKNU7QuOWRQMTeIXp42Es<br>
uClHfLQz5Dvmwy7muDfg5cY0R/F9whvpwSOmILrsViBjcygkzFY9lE1ufW685vbH<br>
1srvsOXI5oN55cZrX4+H6G17<br>
=UV/w<br>
-----END PGP SIGNATURE-----<br>
<br>
</blockquote></div>
home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CABFaMo6m6=6g%2Bd2Yoo0No3bDEtGQPxgFg8Vk5BQuFeF78%2BWF%2BQ>