Multiple vulnerabilities in OpenSSL
FreeBSD-SA-26:01.openssl · CVE-2025-11187, CVE-2025-15467, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796
Our decision for FreeSense
FreeBSD corrected this on 2026-01-27, before the FreeBSD source pin of every FreeSense version.
- Advisory: corrected 2026-01-27
- FreeSense 1.0 pin: e004ff15f87e (2026-08-03)
- FreeSense 1.1 pin: a52c50b4b7c2 (2026-10-04)
- FreeSense 1.2 pin: a52c50b4b7c2 (2026-10-04)
By FreeSense version
| Version | Status | FreeBSD pin |
|---|---|---|
| FreeSense 1.01.0.7 · frozen, no further fixes | FixedFreeBSD pin of 2026-08-03 | 2026-08-03e004ff15 |
| FreeSense 1.11.1.9 | FixedFreeBSD pin of 2026-10-04 | 2026-10-04a52c50b4 |
| FreeSense 1.21.2.0-DEVELOPMENT | FixedFreeBSD pin of 2026-10-04 | 2026-10-04a52c50b4 |
Workaround
No workaround is available.
What FreeBSD says
Multiple issues have been reported as part of this advisory with different issues affecting different OpenSSL versions and therefore different FreeBSD versions. Instead of exhaustively listing detailed writeups for each issue, please see the referenced advisory from OpenSSL. Issues affecting FreeBSD 15.0 (OpenSSL 3.5): CVE-2025-11187 - Improper validation of PBMAC1 parameters in PKCS#12 MAC verification CVE-2025-15467 - Stack buffer overflow in CMS AuthEnvelopedData parsing CVE-2025-15468 - NULL dereference in SSL_CIPHER_find() function on unknown cipher ID CVE-2025-15469 - "openssl dgst" one-shot codepath silently truncates inputs >16MB CVE-2025-66199 - TLS 1.3 CompressedCertificate excessive memory allocation CVE-2025-68160 - Heap out-of-bounds write in BIO_f_linebuffer on short writes CVE-2025-69418 - Unauthenticated/unencrypted trailing bytes with low-level OCB function calls CVE-202
Impact
The issues include improper/missing validation, NULL pointer dereferences, out-of-bounds writes, incorrect data exposure, input truncation, excessive memory allocation, and a stack buffer overflow. Security impact can be a minimal information disclosure to a potential remote code execution. See the OpenSSL advisory for specific details.
Excerpt from the FreeBSD advisory. Read the original for the full text and the fix.