Re: FreeBSD Security Advisory FreeBSD-SA-26:35.openssl
Jason Shim <[email protected]> Thu, 11 Jun 2026 14:15:10 +0900
| Newsgroups | gmane.os.freebsd.security.general |
|---|---|
| Message-ID | <CABFaMo6m6=6g+d2Yoo0No3bDEtGQPxgFg8Vk5BQuFeF78+WF+Q@mail.gmail.com> |
--00000000000068b7120653f3726d Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable unsubscribe On Wed, Jun 10, 2026 at 9:18=E2=80=AFAM FreeBSD Security Advisories < [email protected]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D > FreeBSD-SA-26:35.openssl Security > Advisory > The FreeBSD > Project > > Topic: Multiple vulnerabilities in OpenSSL > > Category: contrib > Module: openssl > Announced: 2026-06-09 > Credits: See linked vendor advisory in References section > Affects: All supported versions of FreeBSD. > Corrected: 2026-06-09 19:17:36 UTC (stable/15, 15.1-STABLE) > 2026-06-09 19:20:15 UTC (releng/15.1, 15.1-RC3-p1) > 2026-06-09 19:19:54 UTC (releng/15.0, 15.0-RELEASE-p10) > 2026-06-09 19:17:54 UTC (stable/14, 14.4-STABLE) > 2026-06-09 19:19:16 UTC (releng/14.4, 14.4-RELEASE-p6) > 2026-06-09 19:18:46 UTC (releng/14.3, 14.3-RELEASE-p15) > CVE Name: CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, > CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, > CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, > CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, > CVE-2026-45445, CVE-2026-45446, CVE-2026-45447 > > For general information regarding FreeBSD Security Advisories, > including descriptions of the fields above, security branches, and the > following sections, please visit <URL:https://security.FreeBSD.org/>. > > I. Background > > FreeBSD includes software from the OpenSSL Project. The OpenSSL Project > is a > collaborative effort to develop a robust, commercial-grade, full-featured > Open Source toolkit for the Transport Layer Security (TLS) protocol. It = is > also a general-purpose cryptography library. > > II. Problem Description > > Multiple issues have been reported as part of this advisory with differen= t > issues affecting different OpenSSL versions and therefore different FreeB= SD > versions. Instead of exhaustively listing detailed writeups for each > issue, > please see the referenced advisory from OpenSSL. > > Issues affecting FreeBSD 15.x (OpenSSL 3.5): > CVE-2026-7383 - Possible heap buffer overflow in ASN.1 string conversi= on > CVE-2026-9076 - Out-of-bounds read in CMS password-based decryption > CVE-2026-34180 - Heap buffer over-read in ASN.1 content parsing > CVE-2026-34181 - PKCS#12 files with PBMAC1 accepted with short HMAC key= s > CVE-2026-34182 - CMS AuthEnvelopedData may accept forged messages > CVE-2026-34183 - Unbounded memory growth in the QUIC PATH_CHALLENGE > handler > CVE-2026-42764 - NULL dereference in QUIC server initial packet handlin= g > CVE-2026-42766 - Possible NULL dereference in password-based CMS > decryption > CVE-2026-42767 - NULL dereference in CRMF EncryptedValue decryption > CVE-2026-42768 - Bleichenbacher oracle in CMS_decrypt() and > PKCS7_decrypt() > CVE-2026-42769 - Trust-anchor substitution in CMP rootCaKeyUpdate > handling > CVE-2026-42770 - FFC-DH peer validation uses attacker-supplied q > CVE-2026-45445 - AES-OCB IV ignored on the EVP_Cipher() one-shot path > CVE-2026-45446 - Empty-message tag bypass in AES-GCM-SIV and AES-SIV > modes > CVE-2026-45447 - Heap use-after-free in PKCS7_verify() > > Issues affecting FreeBSD 14.x (OpenSSL 3.0): > CVE-2026-7383 - Possible heap buffer overflow in ASN.1 string conversi= on > CVE-2026-9076 - Out-of-bounds read in CMS password-based decryption > CVE-2026-34180 - Heap buffer over-read in ASN.1 content parsing > CVE-2026-34182 - CMS AuthEnvelopedData may accept forged messages > CVE-2026-42766 - Possible NULL dereference in password-based CMS > decryption > CVE-2026-42770 - FFC-DH peer validation uses attacker-supplied q > CVE-2026-45445 - AES-OCB IV ignored on the EVP_Cipher() one-shot path > CVE-2026-45446 - Empty-message tag bypass in AES-GCM-SIV and AES-SIV > modes > CVE-2026-45447 - Heap use-after-free in PKCS7_verify() > > III. Impact > > The issues include heap buffer overflows and over-reads, NULL pointer > dereferences, a use-after-free, unbounded memory allocation, and several > cryptographic flaws permitting message forgery, integrity bypass, or > recovery of a private key. > > Security impact ranges from a Denial of Service to a potential remote cod= e > execution. See the OpenSSL advisory for specific details. > > IV. Workaround > > No workaround is available. > > V. Solution > > Upgrade your vulnerable system to a supported FreeBSD stable or > release / security branch (releng) dated after the correction date. > > Perform one of the following: > > 1) To update your vulnerable system installed from base system packages: > > Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm64 > platforms, which were installed using base system packages, can be update= d > via the pkg(8) utility: > > # pkg upgrade -r FreeBSD-base > # shutdown -r +10min "Rebooting for a security update" > > 2) To update your vulnerable system installed from binary distribution > sets: > > Systems running a RELEASE version of FreeBSD on the amd64 or arm64 > platforms > which were not installed using base system packages can be updated via th= e > freebsd-update(8) utility: > > # freebsd-update fetch > # freebsd-update install > # shutdown -r +10min "Rebooting for a security update" > > 3) To update your vulnerable system via a source code patch: > > The following patches have been verified to apply to the applicable > FreeBSD release branches. > > a) Download the relevant patch from the location below, and verify the > detached PGP signature using your PGP utility. > > [FreeBSD 15.x] > # fetch https://security.FreeBSD.org/patches/SA-26:35/openssl-15.patch > # fetch https://security.FreeBSD.org/patches/SA-26:35/openssl-15.patch.as= c > # gpg --verify openssl-15.patch.asc > > [FreeBSD 14.x] > # fetch https://security.FreeBSD.org/patches/SA-26:35/openssl-14.patch > # fetch https://security.FreeBSD.org/patches/SA-26:35/openssl-14.patch.as= c > # gpg --verify openssl-14.patch.asc > > b) Apply the patch. Execute the following commands as root: > > # cd /usr/src > # patch < /path/to/patch > > c) Recompile the operating system using buildworld and installworld as > described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>. > > Restart all daemons that use the library, or reboot the system. > > VI. Correction details > > This issue is corrected as of the corresponding Git commit hash in the > following stable and release branches: > > Branch/path Hash Revision > - -----------------------------------------------------------------------= -- > stable/15/ 865c8ff56693 stable/15-n283889 > releng/15.1/ 083bb80a125a releng/15.1-n283559 > releng/15.0/ 0d6ccbb7524f releng/15.0-n281062 > stable/14/ ec6bfa889b83 stable/14-n274318 > releng/14.4/ 1929d9e173e5 releng/14.4-n273724 > releng/14.3/ dd3096b4efe6 releng/14.3-n271524 > - -----------------------------------------------------------------------= -- > > Run the following command to see which files were modified by a > particular commit: > > # git show --stat <commit hash> > > Or visit the following URL, replacing NNNNNN with the hash: > > <URL:https://cgit.freebsd.org/src/commit/?id=3DNNNNNN> > > To determine the commit count in a working tree (for comparison against > nNNNNNN in the table above), run: > > # git rev-list --count --first-parent HEAD > > VII. References > > <URL:https://openssl-library.org/news/secadv/20260609.txt> > > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-7383> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-9076> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-34180> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-34181> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-34182> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-34183> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-42764> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-42766> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-42767> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-42768> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-42769> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-42770> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-45445> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-45446> > <URL:https://www.cve.org/CVERecord?id=3DCVE-2026-45447> > > The latest revision of this advisory is available at > <URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-26:35.openssl.asc= > > -----BEGIN PGP SIGNATURE----- > > iQJPBAEBCgA5FiEEthUnfoEIffdcgYM7bljekB8AGu8FAmoolxkbFIAAAAAABAAO > bWFudTIsMi41KzEuMTIsMCwzAAoJEG5Y3pAfABrvIjEQALlvtT/r8WJ72cw03AZP > 1qPNWibqFxrMccV/fEtVq2csUzMkSq6PvgK3ZZoKgh8e2whpJkEULxRJ5Th8IEoD > McbPdU4+zgqcehfmH6mvuv/yshDJLe0U2iLFSTbzgbx8xe0XRyWJlutlNXSZmLvo > N87HGEtO/gXCXJxZuWFDE4JfO/bECn8wgZ468AD+OMwKRnx13hszmqKnp4cn/bZ8 > 764BqDsyweCBSVbW7AC0A5/BP7e+S+eOGHDSDqm48Jxk8eVsEVvw5wEo7DMLQgQw > /kHc9BSiQ6HPgMvjDryUzX/FhF3El3sKQxkUXNFGcYk8yChTEVtD1C+zf3FACQJA > ZTeDNgJelmeJdK7uzrJtX/8Laozma0+x1+2+YrY+Y1aCqOZ0iicmlytZHRHgZc3R > riEEJdw3nlV6r43WtwBYjJNyOIiqPusYK8K0/RLnMeMtS+mwjjNjGxqcHdFPbSa7 > Xjs4zSAHgkg9NHMwD4S+F+upRZ3yVoZOvIDtqUKO85Mf70OYHHoaZJE4Q7mIPDyE > CbtpeaNpjSkujTR5/Us4JgxRfDqDGyyER/Ub1yZl8uuhKNU7QuOWRQMTeIXp42Es > uClHfLQz5Dvmwy7muDfg5cY0R/F9whvpwSOmILrsViBjcygkzFY9lE1ufW685vbH > 1srvsOXI5oN55cZrX4+H6G17 > =3DUV/w > -----END PGP SIGNATURE----- > > --00000000000068b7120653f3726d Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">unsubscribe</div><br><div class=3D"gmail_quote gmail_quote= _container"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Jun 10, 2026 at 9= :18=E2=80=AFAM FreeBSD Security Advisories <<a href=3D"mailto:security-a= [email protected]">[email protected]</a>> wrote:<br></= div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bor= der-left:1px solid rgb(204,204,204);padding-left:1ex">-----BEGIN PGP SIGNED= MESSAGE-----<br> Hash: SHA512<br> <br> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D<br> FreeBSD-SA-26:35.openssl=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 Security Advisory<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 The FreeBSD Project= <br> <br> Topic:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Multiple vulnerabilities in OpenSS= L<br> <br> Category:=C2=A0 =C2=A0 =C2=A0 =C2=A0contrib<br> Module:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0openssl<br> Announced:=C2=A0 =C2=A0 =C2=A0 2026-06-09<br> Credits:=C2=A0 =C2=A0 =C2=A0 =C2=A0 See linked vendor advisory in Reference= s section<br> Affects:=C2=A0 =C2=A0 =C2=A0 =C2=A0 All supported versions of FreeBSD.<br> Corrected:=C2=A0 =C2=A0 =C2=A0 2026-06-09 19:17:36 UTC (stable/15, 15.1-STA= BLE)<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 2026-06-09 19:20:15= UTC (releng/15.1, 15.1-RC3-p1)<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 2026-06-09 19:19:54= UTC (releng/15.0, 15.0-RELEASE-p10)<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 2026-06-09 19:17:54= UTC (stable/14, 14.4-STABLE)<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 2026-06-09 19:19:16= UTC (releng/14.4, 14.4-RELEASE-p6)<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 2026-06-09 19:18:46= UTC (releng/14.3, 14.3-RELEASE-p15)<br> CVE Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0CVE-2026-7383, CVE-2026-9076, CVE-2026-= 34180,<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CVE-2026-34181, CVE= -2026-34182, CVE-2026-34183,<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CVE-2026-42764, CVE= -2026-42766, CVE-2026-42767,<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CVE-2026-42768, CVE= -2026-42769, CVE-2026-42770,<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CVE-2026-45445, CVE= -2026-45446, CVE-2026-45447<br> <br> For general information regarding FreeBSD Security Advisories,<br> including descriptions of the fields above, security branches, and the<br> following sections, please visit <URL:<a href=3D"https://security.FreeBS= D.org/" rel=3D"noreferrer" target=3D"_blank">https://security.FreeBSD.org/<= /a>>.<br> <br> I.=C2=A0 =C2=A0Background<br> <br> FreeBSD includes software from the OpenSSL Project.=C2=A0 The OpenSSL Proje= ct is a<br> collaborative effort to develop a robust, commercial-grade, full-featured<b= r> Open Source toolkit for the Transport Layer Security (TLS) protocol.=C2=A0 = It is<br> also a general-purpose cryptography library.<br> <br> II.=C2=A0 Problem Description<br> <br> Multiple issues have been reported as part of this advisory with different<= br> issues affecting different OpenSSL versions and therefore different FreeBSD= <br> versions.=C2=A0 Instead of exhaustively listing detailed writeups for each = issue,<br> please see the referenced advisory from OpenSSL.<br> <br> Issues affecting FreeBSD 15.x (OpenSSL 3.5):<br> =C2=A0 CVE-2026-7383=C2=A0 - Possible heap buffer overflow in ASN.1 string = conversion<br> =C2=A0 CVE-2026-9076=C2=A0 - Out-of-bounds read in CMS password-based decry= ption<br> =C2=A0 CVE-2026-34180 - Heap buffer over-read in ASN.1 content parsing<br> =C2=A0 CVE-2026-34181 - PKCS#12 files with PBMAC1 accepted with short HMAC = keys<br> =C2=A0 CVE-2026-34182 - CMS AuthEnvelopedData may accept forged messages<br= > =C2=A0 CVE-2026-34183 - Unbounded memory growth in the QUIC PATH_CHALLENGE = handler<br> =C2=A0 CVE-2026-42764 - NULL dereference in QUIC server initial packet hand= ling<br> =C2=A0 CVE-2026-42766 - Possible NULL dereference in password-based CMS dec= ryption<br> =C2=A0 CVE-2026-42767 - NULL dereference in CRMF EncryptedValue decryption<= br> =C2=A0 CVE-2026-42768 - Bleichenbacher oracle in CMS_decrypt() and PKCS7_de= crypt()<br> =C2=A0 CVE-2026-42769 - Trust-anchor substitution in CMP rootCaKeyUpdate ha= ndling<br> =C2=A0 CVE-2026-42770 - FFC-DH peer validation uses attacker-supplied q<br> =C2=A0 CVE-2026-45445 - AES-OCB IV ignored on the EVP_Cipher() one-shot pat= h<br> =C2=A0 CVE-2026-45446 - Empty-message tag bypass in AES-GCM-SIV and AES-SIV= modes<br> =C2=A0 CVE-2026-45447 - Heap use-after-free in PKCS7_verify()<br> <br> Issues affecting FreeBSD 14.x (OpenSSL 3.0):<br> =C2=A0 CVE-2026-7383=C2=A0 - Possible heap buffer overflow in ASN.1 string = conversion<br> =C2=A0 CVE-2026-9076=C2=A0 - Out-of-bounds read in CMS password-based decry= ption<br> =C2=A0 CVE-2026-34180 - Heap buffer over-read in ASN.1 content parsing<br> =C2=A0 CVE-2026-34182 - CMS AuthEnvelopedData may accept forged messages<br= > =C2=A0 CVE-2026-42766 - Possible NULL dereference in password-based CMS dec= ryption<br> =C2=A0 CVE-2026-42770 - FFC-DH peer validation uses attacker-supplied q<br> =C2=A0 CVE-2026-45445 - AES-OCB IV ignored on the EVP_Cipher() one-shot pat= h<br> =C2=A0 CVE-2026-45446 - Empty-message tag bypass in AES-GCM-SIV and AES-SIV= modes<br> =C2=A0 CVE-2026-45447 - Heap use-after-free in PKCS7_verify()<br> <br> III. Impact<br> <br> The issues include heap buffer overflows and over-reads, NULL pointer<br> dereferences, a use-after-free, unbounded memory allocation, and several<br= > cryptographic flaws permitting message forgery, integrity bypass, or<br> recovery of a private key.<br> <br> Security impact ranges from a Denial of Service to a potential remote code<= br> execution.=C2=A0 See the OpenSSL advisory for specific details.<br> <br> IV.=C2=A0 Workaround<br> <br> No workaround is available.<br> <br> V.=C2=A0 =C2=A0Solution<br> <br> Upgrade your vulnerable system to a supported FreeBSD stable or<br> release / security branch (releng) dated after the correction date.<br> <br> Perform one of the following:<br> <br> 1) To update your vulnerable system installed from base system packages:<br= > <br> Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm64<br> platforms, which were installed using base system packages, can be updated<= br> via the pkg(8) utility:<br> <br> # pkg upgrade -r FreeBSD-base<br> # shutdown -r +10min "Rebooting for a security update"<br> <br> 2) To update your vulnerable system installed from binary distribution sets= :<br> <br> Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platform= s<br> which were not installed using base system packages can be updated via the<= br> freebsd-update(8) utility:<br> <br> # freebsd-update fetch<br> # freebsd-update install<br> # shutdown -r +10min "Rebooting for a security update"<br> <br> 3) To update your vulnerable system via a source code patch:<br> <br> The following patches have been verified to apply to the applicable<br> FreeBSD release branches.<br> <br> a) Download the relevant patch from the location below, and verify the<br> detached PGP signature using your PGP utility.<br> <br> [FreeBSD 15.x]<br> # fetch <a href=3D"https://security.FreeBSD.org/patches/SA-26:35/openssl-15= .patch" rel=3D"noreferrer" target=3D"_blank">https://security.FreeBSD.org/p= atches/SA-26:35/openssl-15.patch</a><br> # fetch <a href=3D"https://security.FreeBSD.org/patches/SA-26:35/openssl-15= .patch.asc" rel=3D"noreferrer" target=3D"_blank">https://security.FreeBSD.o= rg/patches/SA-26:35/openssl-15.patch.asc</a><br> # gpg --verify openssl-15.patch.asc<br> <br> [FreeBSD 14.x]<br> # fetch <a href=3D"https://security.FreeBSD.org/patches/SA-26:35/openssl-14= .patch" rel=3D"noreferrer" target=3D"_blank">https://security.FreeBSD.org/p= atches/SA-26:35/openssl-14.patch</a><br> # fetch <a href=3D"https://security.FreeBSD.org/patches/SA-26:35/openssl-14= .patch.asc" rel=3D"noreferrer" target=3D"_blank">https://security.FreeBSD.o= rg/patches/SA-26:35/openssl-14.patch.asc</a><br> # gpg --verify openssl-14.patch.asc<br> <br> b) Apply the patch.=C2=A0 Execute the following commands as root:<br> <br> # cd /usr/src<br> # patch < /path/to/patch<br> <br> c) Recompile the operating system using buildworld and installworld as<br> described in <URL:<a href=3D"https://www.FreeBSD.org/handbook/makeworld.= html" rel=3D"noreferrer" target=3D"_blank">https://www.FreeBSD.org/handbook= /makeworld.html</a>>.<br> <br> Restart all daemons that use the library, or reboot the system.<br> <br> VI.=C2=A0 Correction details<br> <br> This issue is corrected as of the corresponding Git commit hash in the<br> following stable and release branches:<br> <br> Branch/path=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Hash=C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Revision<br> - -------------------------------------------------------------------------= <br> stable/15/=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 865c8ff56693=C2=A0 =C2=A0 stable/= 15-n283889<br> releng/15.1/=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 083bb80a125a=C2=A0 releng/15.1-n283559<b= r> releng/15.0/=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 0d6ccbb7524f=C2=A0 releng/15.0-n281062<b= r> stable/14/=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ec6bfa889b83=C2=A0 =C2=A0 stable/= 14-n274318<br> releng/14.4/=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 1929d9e173e5=C2=A0 releng/14.4-n273724<b= r> releng/14.3/=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 dd3096b4efe6=C2=A0 releng/14.3-n271524<b= r> - -------------------------------------------------------------------------= <br> <br> Run the following command to see which files were modified by a<br> particular commit:<br> <br> # git show --stat <commit hash><br> <br> Or visit the following URL, replacing NNNNNN with the hash:<br> <br> <URL:<a href=3D"https://cgit.freebsd.org/src/commit/?id=3DNNNNNN" rel=3D= "noreferrer" target=3D"_blank">https://cgit.freebsd.org/src/commit/?id=3DNN= NNNN</a>><br> <br> To determine the commit count in a working tree (for comparison against<br> nNNNNNN in the table above), run:<br> <br> # git rev-list --count --first-parent HEAD<br> <br> VII. References<br> <br> <URL:<a href=3D"https://openssl-library.org/news/secadv/20260609.txt" re= l=3D"noreferrer" target=3D"_blank">https://openssl-library.org/news/secadv/= 20260609.txt</a>><br> <br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7383" rel=3D= "noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-2026-= 7383</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9076" rel=3D= "noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-2026-= 9076</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-34180" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-34180</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-34181" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-34181</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-34182" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-34182</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-34183" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-34183</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-42764" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-42764</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-42766" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-42766</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-42767" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-42767</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-42768" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-42768</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-42769" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-42769</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-42770" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-42770</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45445" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-45445</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45446" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-45446</a>><br> <URL:<a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45447" rel= =3D"noreferrer" target=3D"_blank">https://www.cve.org/CVERecord?id=3DCVE-20= 26-45447</a>><br> <br> The latest revision of this advisory is available at<br> <URL:<a href=3D"https://security.FreeBSD.org/advisories/FreeBSD-SA-26:35= .openssl.asc" rel=3D"noreferrer" target=3D"_blank">https://security.FreeBSD= .org/advisories/FreeBSD-SA-26:35.openssl.asc</a>><br> -----BEGIN PGP SIGNATURE-----<br> <br> iQJPBAEBCgA5FiEEthUnfoEIffdcgYM7bljekB8AGu8FAmoolxkbFIAAAAAABAAO<br> bWFudTIsMi41KzEuMTIsMCwzAAoJEG5Y3pAfABrvIjEQALlvtT/r8WJ72cw03AZP<br> 1qPNWibqFxrMccV/fEtVq2csUzMkSq6PvgK3ZZoKgh8e2whpJkEULxRJ5Th8IEoD<br> McbPdU4+zgqcehfmH6mvuv/yshDJLe0U2iLFSTbzgbx8xe0XRyWJlutlNXSZmLvo<br> N87HGEtO/gXCXJxZuWFDE4JfO/bECn8wgZ468AD+OMwKRnx13hszmqKnp4cn/bZ8<br> 764BqDsyweCBSVbW7AC0A5/BP7e+S+eOGHDSDqm48Jxk8eVsEVvw5wEo7DMLQgQw<br> /kHc9BSiQ6HPgMvjDryUzX/FhF3El3sKQxkUXNFGcYk8yChTEVtD1C+zf3FACQJA<br> ZTeDNgJelmeJdK7uzrJtX/8Laozma0+x1+2+YrY+Y1aCqOZ0iicmlytZHRHgZc3R<br> riEEJdw3nlV6r43WtwBYjJNyOIiqPusYK8K0/RLnMeMtS+mwjjNjGxqcHdFPbSa7<br> Xjs4zSAHgkg9NHMwD4S+F+upRZ3yVoZOvIDtqUKO85Mf70OYHHoaZJE4Q7mIPDyE<br> CbtpeaNpjSkujTR5/Us4JgxRfDqDGyyER/Ub1yZl8uuhKNU7QuOWRQMTeIXp42Es<br> uClHfLQz5Dvmwy7muDfg5cY0R/F9whvpwSOmILrsViBjcygkzFY9lE1ufW685vbH<br> 1srvsOXI5oN55cZrX4+H6G17<br> =3DUV/w<br> -----END PGP SIGNATURE-----<br> <br> </blockquote></div> --00000000000068b7120653f3726d--