BSD Portswolfssl -- multiple issues
· CVE-2025-12888, CVE-2025-11936, CVE-2025-11935, CVE-2025-11934, CVE-2025-11933, CVE-2025-11932, CVE-2025-11931, CVE-2025-12889 · VuXML entry
wolfSSL blog reports: This release includes multiple fixes across TLS 1.2, TLS 1.3, X25519, XChaCha20-Poly1305, and PSK processing. Highlights include: A timing-side-channel issue in X25519 specifically affecting Xtensa-based ESP32 devices. Low-memory X25519 implementations are now the default for Xtensa. A medium-severity TLS 1.3 server-side DoS risk from repeated KeyShareEntry values in malicious ClientHello …
Affected versions
- wolfssl < 5.8.4
By system
1 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | security/wolfssl | 5.7.6_1 | vulnerable since 2025-11-30 | |
| NetBSD | security/wolfssl | 5.9.2 | not listed | |
| MidnightBSD | security/wolfssl | 5.9.1 | out of range, by version | |
| FreeBSD | security/wolfssl | 5.9.4 | fixed | (302 days after) |