BSD PortsOpenSSL -- Multiple vulnerabilities
· CVE-2026-45447, CVE-2026-34182, CVE-2026-34183, CVE-2026-35188, CVE-2026-42764, CVE-2026-45445, CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-42765, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-42771, CVE-2026-45446 · VuXML entry
The OpenSSL project reports: Eighteen vulnerabilities in OpenSSL library. Highest classification High.
Affected versions
- openssl < 3.0.21,1
- openssl34 < 3.4.6
- openssl35 < 3.5.7
- openssl36 < 3.6.3
- openssl40 < 4.0.1
- openssl111 < 1.1.1zh
- FreeBSD >= 15.0 < 15.0_10; >= 14.4 < 14.4_6; >= 14.3 < 14.3_15
By system
1 still vulnerable, 6 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | security/openssl | 3.0.16,1 | vulnerable since 2026-06-10 | |
| NetBSD | security/openssl | 3.6.5 | not listed | |
| MidnightBSD | security/openssl | 3.5.9 | out of range, by version | |
| FreeBSD | security/openssl | 3.5.9,1 | fixed | (76 days after) |
| GhostBSD | security/openssl34 | 3.4.7 | fixed | |
| GhostBSD | security/openssl35 | 3.5.8 | fixed | |
| OPNsense | security/openssl35 | 3.5.7 | fixed | |
| FreeBSD | security/openssl36 | 3.6.5 | fixed | (76 days after) |
| MidnightBSD | security/openssl36 | 3.6.5 | out of range, by version | |
| FreeBSD | security/openssl40 | 4.0.3 | fixed | (76 days after) |