angie -- multiple vulnerabilities

2026-11-12 · CVE-2026-93479, CVE-2026-97629, CVE-2026-95101, CVE-2026-15176, CVE-2026-97205 · VuXML entry

The Angie Software Team reports: When variables were used in the root or alias directives, or in the log file path of the access_log directive in the HTTP module or the access_log directive in the stream module, worker process memory corruption or a worker process crash could occur (CVE-2026-93479). When the ssl_session_cache directive was used with the shared parameter without the ssl_session_ticket_key directive, …

Affected versions

• angie < 1.12.4

By system

1 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.