TLSv1.3 capable SSL and crypto library
openssl:openssl from the portCVE-2026-35189, CVE-2026-35191, CVE-2026-42772, CVE-2026-54872, CVE-2026-54873, CVE-2026-54875, CVE-2026-72897, CVE-2026-75804, CVE-2026-75805, CVE-2026-75806, CVE-2026-77696, CVE-2026-84782, CVE-2026-84783, CVE-2026-84784
| CVE-2026-84782 | 8.2 | 2026-09-29 | VuXML · Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be rea… |
| CVE-2026-75805 | 5.3 | 2026-09-29 | VuXML · Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a … |
| CVE-2026-75806 | 5.3 | 2026-09-29 | VuXML · Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter … |
| CVE-2026-35189 | 5.3 | 2026-09-29 | VuXML · Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact … |
| CVE-2026-77696 | 3.7 | 2026-09-29 | VuXML · Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure S… |
| CVE-2026-54872 | 3.7 | 2026-09-29 | VuXML · Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks… |
| CVE-2026-75803 | 9.1 | 2026-08-25 | Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation … |
| CVE-2026-63072 | 7.5 | 2026-08-25 | Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cl… |
| CVE-2026-63076 | 7.5 | 2026-08-25 | Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it… |
| CVE-2026-54874 | 7.5 | 2026-08-25 | Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Imp… |
| CVE-2026-63074 | 5.9 | 2026-08-25 | Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (for instance… |
security/openssl30: Fix collision with security/openssl1c8ff82f8d
security/openssl30: update CONFLICTS7195ad32e0
security/openssl30: Resurrect OpenSSL 3.0 port For FreeBSD 14, expires 2028-11-30 Has known vulnerabilities, users are encouraged to move to OpenSSL 3.5 from security/opensslae3d4a75ab
security/openssl30: Moved to security/openssl55f9ba2974
security/openssl30: Enable RFC3779 by default * As in base OpenSSL Reported by: Juraj Lutterad77fc1557
security/openssl30: Fix modules options PR: 272160 Reported by: Michael Osipov <michael osipov siemens com>ba2b345bc8
security/openssl30: Update to 3.0.11 * Reported vulnerability is Windows onlyc57fef2f7b
security/openssl*: Chase addition of 3.2 * Update CONFLICTS * Update comment in Mk/Uses/ssl.mke332bedb5e
security/openssl30: Fix MAN3 option PR: 272158 Reported by: Michael Osipov <michael osipov siemens com>b9106a1a81
security/openssl30: Update to 3.0.10 * MFH this version as this is a roll-up of multiple vulnerability fixes MFH: 2023Q3f296841582
security/openssl30: Security update for CVE-2023-3187 (Low) Security: bad6588e-2fe0-11ee-a0d1-84a93843eb75f144c0373f
security/openssl30: Security fix for CVE-2023-2975 Security: 41c60e16-2405-11ee-a0d1-84a93843eb75992c6f8ea8
security/openssl30: Security update to 3.0.9 Security: eb9a3c57-ff9e-11ed-a0d1-84a93843eb75 MFH: 2023Q23a08f19b5b
security/openssl30: Security update for CVE-2023-0465 & 0466 Security: 425b9538-ce5f-11ed-ade3-d4c9ef517024f410329bc6
security/openssl30: Security update for CVE-2023-0464 Security: 1ba034fb-ca38-11ed-b242-d4c9ef517024d27a9cda93
security/openssl30: Chase rename in ports CONFLICTS* Reported by: cperciva, junchoon70a4cc59a7
security/openssl-devel: Rename to security/openssl30 * Align with the upstream "release" status * Avoid confusion with OpenSSL 3.1 Reported by: ngie Differential Revision: https://reviews.freebsd.org/D3893898749c4fe0