CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/wolfssl 5.9.4

Embedded SSL C-Library

0
unaddressed
0
VuXML only
14
fixed
0
open problem reports

Port info

Maintainer
fox@FreeBSD.org
Packages
latest: 5.9.4
Upstream
up to date
Last update
to 5.9.4 · d5c5d85ef3
Quarterly
2026Q4: 5.9.4
Formerly
security/cyassl until 2015-03-28, security/yassl until 2014-05-06
WWW
https://www.wolfssl.com/
Links
cgit · VuXML

Install

Package
# pkg install wolfssl
installs 5.9.4 from latest; from quarterly (2026Q4) 5.9.4
Port
# cd /usr/ports/security/wolfssl && make install clean
# make -C /usr/ports/security/wolfssl config  # change options first
Size
3.2 MiB download · 19 MiB installed
Depends on
nothing
License
GPLv3
Options
1 of 2 on in the package: DOCS
Show the 1 options that are off
DEBUG

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 165.9.45.9.4–
FreeBSD 155.9.45.9.4–
FreeBSD 145.9.45.9.45.9.4

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 155.9.45.9.4–
FreeBSD 145.9.45.9.45.9.4

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 5.9.4.

Fixed (14)

Show 14 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-933028.32026-09-27MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL_TRUST_PEER_CERT and…
CVE-2026-891028.32026-09-27In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. W…
CVE-2026-891368.32026-09-27When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could accept an unsolicited server_cert_type=RawPublicKey which allowed a mali…
CVE-2026-891356.32026-09-27A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in every type-blind sibling consu…
CVE-2026-933046.32026-09-27A (D)TLS 1.2 client can accept a ChangeCipherSpec message before it has sent its ClientKeyExchange. No master secret has been derived at that point, so the client instal…
CVE-2026-891336.32026-09-27wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is a…
CVE-2026-944172.32026-09-27When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL skips the CRL check for any peer certificate that ca…
CVE-2026-154422.32026-09-27In all builds that make use of (D)TLS, including default builds, there is a series of conditional states during the TLS shutdown which could lead to a heap-use-after fre…
CVE-2026-944182.32026-09-27Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certificate signature check separately from the parse to keep peak memory down, then merges the two resu…
CVE-2026-944192.32026-09-27Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not return a session object but a ClientSession reference of the form {row, index, hash(sessionID)} into the pro…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (102)

Dirk Meyer (dinoex) · 1.3.0 · as security/yassl
- update to 1.3.0 fix a potential security problem
493f1ba686
Dirk Meyer (dinoex) · 1.2.0 · as security/yassl
Cyassl is an embedded SSL Library for programmers building security functionality into their applications and devices.

Features
  SSL version 3 and TLS versions 1, 1.1 and 1.2 (client and server)
  Minimum size of 60-100kb, depending on build options
  Runtime memory usage between 5-50kb
  DTLS support (client and server)
  OpenSSL compatibility layer
  zlib compression support
  integration in MySQL, stunnel, Lighttpd availible.
  MD2, MD4, MD5, SHA-1, RIPEMD, HMAC, DES, 3DES, AES, ARC4, TWOFISH, BLOWFISH,
  RSA, DSS, DH, and PKCS#5 PBKDF2
  ia32 assembly for AES, 3DES, BLOWFISH, TWOFISH, ARC4, MD5, SHA, and RIPEMD
  SSE2 instructions for Large Integers
  Simple API
  Interchangeable crypto and certificate libraries
  PEM and DER certificate support
  Very fast

LICENSE: GPL2 with FOSS extension

WWW: http://www.yassl.com/
115a02a258
« newest← newerpage 3 of 3