FreeBSD VuXML

Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Security issues that affect the FreeBSD operating system or applications in the FreeBSD Ports Collection are documented using the Vulnerabilities and Exposures Markup Language (VuXML). The current VuXML document that serves as the source for the content of this site can be found:

in the FreeBSD Ports Collection repository, path ports/security/vuxml/vuln.xml
as a local copy
as a local copy, compressed with bzip2
as a local copy, compressed with xz
as a local copy, compressed with zstandard

Please report security issues to the FreeBSD Security Team at <ports-secteam@FreeBSD.org>. Full contact details, including information handling policies and PGP key, can be found on the FreeBSD Security page.

openssl-devel

openssl-devel at FreshPorts.org

Entered	Topic
2023-02-07	OpenSSL -- Multiple vulnerabilities
2022-11-01	OpenSSL -- Buffer overflows in Email verification
2022-10-18	OpenSSL -- Potential NULL encryption in NID_undef with Custom Cipher
2022-07-05	OpenSSL -- AES OCB fails to encrypt some bytes
2022-07-03	OpenSSL -- Heap memory corruption with RSA private key operation
2022-06-22	OpenSSL -- Command injection vulnerability
2022-05-04	OpenSSL -- Multiple vulnerabilities
2022-03-16	OpenSSL -- Infinite loop in BN_mod_sqrt parsing certificates
2022-01-28	OpenSSL -- BN_mod_exp incorrect results on MIPS
2021-12-14	OpenSSL -- Certificate validation issue
2021-08-24	OpenSSL -- multiple vulnerabilities
2021-02-16	OpenSSL -- Multiple vulnerabilities
2018-10-29	OpenSSL -- Multiple vulnerabilities in 1.1 branch
2018-06-12	OpenSSL -- Client DoS due to large DH parameter
2018-04-16	OpenSSL -- Cache timing vulnerability
2018-03-27	OpenSSL -- multiple vulnerabilities
2017-11-02	OpenSSL -- Multiple vulnerabilities
2017-02-16	openssl -- crash on handshake
2017-01-26	OpenSSL -- multiple vulnerabilities
2016-11-10	openssl -- multiple vulnerabilities
2016-11-02	FreeBSD -- OpenSSL Remote DoS vulnerability
2016-09-26	OpenSSL -- multiple vulnerabilities
2016-09-22	OpenSSL -- multiple vulnerabilities