- Keywords: security
This result was limited to 500 bugs. See all search results for this query.
| ID | Product | Component | Assignee▲ | Status▲ | Resolution | Summary▲ | Changed |
|---|---|---|---|---|---|---|---|
| 26286 | Documentation | Manual Pages | bugs | Closed | Overcome By Eve | *printf(3) etc should gain format string warnings | 2022-07-22 |
| 233478 | Base System | bin | bugs | New | --- | Authentication fails if password > 128 characters | 2018-11-28 |
| 258519 | Ports & Packages | Individual Port(s) | kai | Closed | FIXED | Bump lang/python37 to 3.7.12 | 2021-09-19 |
| 186252 | Base System | misc | bugs | Open | --- | Cannot mount an encrypted swap file in fstab | 2019-02-20 |
| 193871 | Base System | bin | bapt | Closed | FIXED | Certificates in /etc/ssl/certs not considered by pkg and fetch | 2016-02-20 |
| 277228 | Base System | misc | geom | New | --- | Device permissions security hole with partitioning (/dev/geom.ctl) | 2024-03-03 |
| 219527 | Base System | misc | delphij | Closed | FIXED | Flawed umask handling in /etc/rc.d/random | 2017-05-31 |
| 206607 | Services | Security Team | koobs | Closed | Not A Bug | Forthcoming OpenSSL Security Releases (1.0.2f, 1.0.1r.) | 2016-04-17 |
| 233801 | Base System | bin | secteam | Closed | FIXED | FreeBSD 11.x vulnerability in OpenSSH | 2020-06-08 |
| 261306 | Base System | conf | bugs | New | --- | Geli rc.d script does not support insertion of USB devices containing a keyfile. | 2023-04-27 |
| 206551 | Base System | kern | bugs | Closed | Not A Bug | Heap overflow in iconv kernel module | 2016-01-24 |
| 238787 | Base System | kern | jtl | Closed | FIXED | IPv6 remote DoS (panic) vulnerability via m_pulldown() bug | 2019-11-13 |
| 206573 | Base System | misc | bugs | Closed | FIXED | Improper userland pointer handling in aacraid | 2016-05-06 |
| 239977 | Base System | bin | markj | Closed | FIXED | Integer Overflow: ping(8) option "-G" and "-g", bypass the invalid sweepmax and sweepmin packet size check | 2020-12-01 |
| 239978 | Base System | bin | markj | Closed | FIXED | Integer Overflow: ping(8) option "-h", bypass the invalid sweepincr packet size check | 2020-12-01 |
| 206626 | Base System | kern | emaste | Closed | FIXED | Integer overflow in nfssvc system call | 2016-10-07 |
| 237922 | Base System | kern | kib | Closed | FIXED | Kernel stack disclosure in function freebsd32_swapcontext of sys/arm64/arm64/freebsd32_machdep.c | 2019-12-15 |
| 206761 | Base System | kern | bugs | Closed | FIXED | Kernel stack overflow in sysctl handler for kern.binmisc.add | 2016-04-05 |
| 202571 | Services | Bug Tracker | bugmeister | Closed | FIXED | Links like "ports|src|doc rNUMBER" use http instead of https | 2017-02-18 |
| 242676 | Base System | kern | Andrew | In Progress | --- | Mitigating speculative execution beyond ERET on aarch64 | 2019-12-20 |
| 211930 | Ports & Packages | Individual Port(s) | portmgr | Closed | Not Accepted | Mk/bsd.default-versions.mk: Change default Perl version to 5.22 or 5.24 (5.20 End-of-Life) | 2016-08-17 |
| 241516 | Ports & Packages | Ports Framework | portmgr | Open | --- | Mk/bsd.port.mk: Fix certificate verification for 'make makesum' | 2024-02-12 |
| 247149 | Ports & Packages | Individual Port(s) | secteam | Closed | FIXED | Multiple sqlite3 vulnerabilities (ports and base) | 2020-08-06 |
| 258802 | Ports & Packages | Package Infrastruc | portmgr | Closed | FIXED | No updates to vuln.xml since 2021-09-16 | 2021-09-30 |
| 206678 | Base System | kern | lifanov | Closed | FIXED | OGIO_KEYMAP command does not restore priority level | 2017-01-17 |
| 225451 | Base System | bin | bugs | New | --- | OpenSSH only looks for .k5login in user directory | 2022-09-09 |
| 205008 | Base System | misc | security-officer | Closed | FIXED | OpenSSL: Multiple Security Vulnerabilities (Update to 1.0.2e) | 2015-12-05 |
| 206754 | Base System | kern | bugs | Closed | FIXED | Out of bounds negative array index in iicrdwr | 2019-01-15 |
| 238486 | Base System | kern | bugs | Open | --- | Possible buffer overflow bug in sc_allocate_keyboard() of sys/dev/syscons/syscons.c | 2023-07-31 |
| 206584 | Base System | kern | bugs | Closed | Works As Intend | Possible integer overflow in update_intel | 2016-01-24 |
| 242415 | Base System | kern | glebius | Closed | FIXED | Running any command that interacts with network connections as an underprivileged user panics the OS | 2019-12-15 |
| 234112 | Services | Security Team | secteam | Closed | FIXED | SQLite: Remote code execution vulnerability (Magellan) | 2019-03-30 |
| 272902 | Base System | kern | bugs | New | --- | Security: allow passphrases for WPA-EAP to be saved without using clear text in a world-readable file | 2023-08-02 |
| 212305 | Base System | bin | emaste | Closed | FIXED | Security: possible to edit crontab of other user | 2017-01-19 |
| 260138 | Base System | kern | bugs | New | --- | TPM2 Support in bootloader / kernel in order to retrieve GELI passphrase | 2024-02-07 |
| 260590 | Ports & Packages | Individual Port(s) | tcberner | Closed | FIXED | URGENT graphics/p5-Image-ExifTool security update needs commit since February, Request MAINTAINER'ship | 2022-03-25 |
| 233578 | Base System | bin | bugs | Open | --- | Unprivileged local user can prevent other users logging in by locking utx.active | 2019-05-19 |
| 234113 | Base System | misc | cy | Closed | FIXED | Update SQlite to 3.26.0 | 2019-01-09 |
| 207934 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | Update textproc/apache-poi to version 3.14 | 2016-04-24 |
| 270723 | Ports & Packages | Individual Port(s) | philip | Closed | FIXED | VuXML new entries for 20 vulnerable ports | 2023-04-12 |
| 256957 | Base System | wireless | hrs | Open | --- | Wi-Fi: rc.conf(5) NOAUTO, ifconfig(8) up and unwanted WLAN connections to open networks | 2023-12-21 |
| 201709 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | [MAINTAINER-UPDATE]: www/magento: Update to 1.9.2.0 | 2016-10-14 |
| 199162 | Ports & Packages | Individual Port(s) | jbeich | Closed | FIXED | [MAINTAINER] devel/dulwich: Update to 0.10.1a (Security Update) | 2015-04-17 |
| 202738 | Ports & Packages | Individual Port(s) | ports-bugs | Closed | FIXED | [MAINTAINER] dns/powerdns: Update to 3.4.6 | 2015-09-02 |
| 199414 | Ports & Packages | Individual Port(s) | jbeich | Closed | FIXED | [MAINTAINER] games/wesnoth: Update to 1.12.2 | 2015-04-17 |
| 201192 | Ports & Packages | Individual Port(s) | delphij | Closed | FIXED | [MAINTAINER] games/wesnoth: Update to to 1.12.4 | 2015-07-01 |
| 198508 | Ports & Packages | Individual Port(s) | ports-bugs | Closed | FIXED | [MAINTAINER] mail/sympa: security update to 6.1.24 | 2015-03-13 |
| 202812 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | [MAINTAINER] multimedia/kodi: update to 15.1 (fixes multiple vulnerabilites in internal ffmpeg) | 2015-09-26 |
| 200963 | Ports & Packages | Individual Port(s) | delphij | Closed | FIXED | [MAINTAINER] net-mgmt/cacti: Update to 0.8.8d, Fix security vulnerabilities | 2015-06-23 |
| 204044 | Ports & Packages | Individual Port(s) | mat | Closed | FIXED | [MAINTAINER] net-mgmt/lldpd: Update to 0.7.19, Fixes security vulnerabilities | 2015-12-02 |
| 201134 | Ports & Packages | Individual Port(s) | amdmi3 | Closed | FIXED | [MAINTAINER] print/cups-filters: update to 1.0.70 | 2015-07-07 |
| 200044 | Ports & Packages | Individual Port(s) | xmj | Closed | FIXED | [MAINTAINER] sysutils/py-salt : Update to 2015.5.1 | 2015-05-24 |
| 203977 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | [MAINTAINER] www/drupal7: Update Drupal 7.40 to 7.41 (Fix security vulnerabilities) | 2015-10-24 |
| 211590 | Ports & Packages | Individual Port(s) | tz | Closed | FIXED | [MAINTAINER] www/piwik: Update to 2.16.2 (security update) | 2016-08-11 |
| 206504 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | [MAINTAINER] www/privoxy: Update to 3.0.24 stable | 2016-01-26 |
| 201374 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | [MAINTAINER] www/squid: Update to 3.5.6 | 2015-07-17 |
| 205009 | Services | Security Team | secteam | Closed | FIXED | [META] Track Base & Ports Updates for OpenSSL Security Advisory [3 Dec 2015] | 2015-12-05 |
| 209669 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | [PATCHE] www/tomcat7 and www/tomcat-native upgrade | 2016-06-26 |
| 200431 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | [PATCH] [CVE] lang/php5: Update to 5.4.41, addresses CVE vulnerabilities | 2015-05-26 |
| 199585 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | [PATCH] [SECURITY] lang/php5*: updates to 5.6.8, 5.5.24, 5.4.40 | 2015-05-22 |
| 219154 | Base System | bin | kib | Closed | FIXED | [PATCH] buffer overflows in realpath(3) | 2017-12-17 |
| 226491 | Ports & Packages | Individual Port(s) | miwi | Closed | FIXED | [PATCH] devel/zziplib: update to 0.13.69 which fixes multiple CVEs | 2018-07-09 |
| 254526 | Ports & Packages | Individual Port(s) | cy | Closed | FIXED | [PATCH] mail/spamassassin Update to 3.4.5 fixing CVE-2020-1946 | 2021-04-14 |
| 227642 | Ports & Packages | Individual Port(s) | ports-bugs | Closed | FIXED | [PATCH] mail/sympa: security update to 2.6.32 | 2018-05-23 |
| 239839 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | [PATCH] net-mgmt/prometheus2: Update to 2.11.2 | 2019-08-14 |
| 235375 | Ports & Packages | Individual Port(s) | swills | Closed | FIXED | [PATCH] net-mgmt/prometheus2: Update to 2.7.1 | 2019-02-01 |
| 241456 | Ports & Packages | Individual Port(s) | egypcio | Closed | FIXED | [PATCH] net/pacemaker1: update 1.1.19 to 1.1.22 | 2020-02-04 |
| 241460 | Ports & Packages | Individual Port(s) | egypcio | Closed | FIXED | [PATCH] net/pacemaker2: update 2.0.0-rc4 to 2.0.3 | 2020-02-04 |
| 201231 | Ports & Packages | Individual Port(s) | ports-secteam | Closed | FIXED | [PATCH] net/turnserver: update to 4.4.5.3 (Fixes security vulnerability) | 2015-07-07 |
| 262327 | Ports & Packages | Individual Port(s) | egypcio | Closed | FIXED | [PATCH] security/meek: update 0.35.0 to 0.37.0 | 2022-08-07 |
| 269030 | Ports & Packages | Individual Port(s) | garga | Closed | FIXED | [PATCH] security/sudo update 1.9.12p2 (fix CVE-2023-22809) | 2023-02-27 |
| 241154 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | [PATCH] www/mod_perl2: update to 2.0.11, fix CVE-2011-2767 | 2019-10-25 |
| 201603 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | [PATCH][UPDATE] security/polarssl: 1.2.13->1.2.14, fixing security issues | 2015-07-28 |
| 211846 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | [Security Advisory] audio/teamspeak3-server: Several vulnerabilities found in Teamspeak3-server | 2016-08-14 |
| 203394 | Ports & Packages | Ports Framework | pfg | Closed | FIXED | [exp-run] Toolchain hardening: Enable stack-protector-all & partial RELRO | 2016-06-01 |
| 247708 | Ports & Packages | Individual Port(s) | tcberner | Closed | FIXED | [exp-run] graphics/exiv2: Update to 0.27.3 (Bug and security fixes) | 2020-07-09 |
| 219271 | Ports & Packages | Individual Port(s) | kwm | Closed | FIXED | [exp-run] print/freetype2 update to 2.8 | 2017-05-21 |
| 215909 | Ports & Packages | Individual Port(s) | tijl | Closed | FIXED | [exp-run] security/gnutls: Update to 3.5.8 | 2017-01-12 |
| 182518 | Base System | conf | bugs | Open | --- | [login.conf] Better Password Hashes | 2023-08-18 |
| 204643 | Base System | kern | kp | Closed | FIXED | [msdosfs] [panic] Crash while accessing files with large, non-english names | 2017-10-13 |
| 235056 | Ports & Packages | Individual Port(s) | ler | Closed | FIXED | [new port] security/git-secret: tool for storing secret data in a git repo using gpg | 2019-01-19 |
| 273417 | Ports & Packages | Individual Port(s) | makc | Closed | FIXED | [patch] archivers/7-zip: Update to 23.00 or 23.01 (Security) | 2024-02-16 |
| 200888 | Base System | gnu | pfg | Closed | FIXED | [patch] libiberty: integer overflow (CVE-2012-3509) | 2017-12-12 |
| 208404 | Ports & Packages | Individual Port(s) | kevlo | Closed | FIXED | [patch] net/openvswitch CVE-2016-2074 | 2016-07-03 |
| 232495 | Base System | kern | oshogbo | Closed | FIXED | [patch] ppoll(2) is not permitted in capability mode | 2019-01-30 |
| 203995 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | [patch] www/joomla15: Deprecation | 2015-11-10 |
| 221201 | Base System | kern | kp | Closed | FIXED | [pf] Prevent possible endless loop when searching for an unused nat port | 2018-02-26 |
| 262295 | Base System | misc | bugs | New | --- | [pf] Tables and anchors | 2022-03-02 |
| 201513 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | [security] graphics/libwmf - multiple vulnerabilities | 2015-09-07 |
| 200506 | Ports & Packages | Individual Port(s) | riggs | Closed | FIXED | [security] multimedia/avidemux2 - Multiple vulnerabilities | 2015-06-14 |
| 200507 | Ports & Packages | Individual Port(s) | riggs | Closed | FIXED | [security] multimedia/avidemux26 - Multiple vulnerabilities | 2015-06-01 |
| 196146 | Base System | bin | delphij | Closed | FIXED | [security] ntpd <= 2.4.7 vulnerable to possible buffer overrun, denial of service, weak cryptography | 2015-03-12 |
| 209225 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | [security] www/gitlab: Update to 8.7.1 | 2016-05-03 |
| 206579 | Base System | kern | bugs | Closed | Not A Bug | amr(4): Multiple vulnerabilities in AMR ioctl handler | 2016-01-25 |
| 259534 | Ports & Packages | Individual Port(s) | ygy | Closed | FIXED | archivers/advancecomp: Update to 2.1-6-g7b08f7a and take maintainership | 2021-11-19 |
| 267937 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | archivers/advancecomp: update to 2.4 | 2022-11-27 |
| 238854 | Ports & Packages | Individual Port(s) | swills | Closed | FIXED | archivers/bzip2: Update to 1.0.7 (Fixes security vulnerabilities) | 2019-06-30 |
| 213199 | Ports & Packages | Individual Port(s) | kwm | Closed | FIXED | archivers/file-roller CVE-2016-7162 | 2016-12-28 |
| 268190 | Ports & Packages | Individual Port(s) | glewis | Closed | FIXED | archivers/libarchive: Fix CVE 2022-36227 | 2022-12-06 |
| 210493 | Ports & Packages | Individual Port(s) | glewis | Closed | FIXED | archivers/libarchive: update to 3.2.1 | 2016-06-23 |
| 233896 | Ports & Packages | Individual Port(s) | ports-secteam | Closed | FIXED | archivers/libmspack: Update to 0.9.1 (Fixes several security vulnerabilities) | 2020-07-24 |
| 228239 | Ports & Packages | Individual Port(s) | cs | Closed | FIXED | archivers/p7zip: Current version is vulnerable (CVE-2018-10115) | 2021-12-11 |
| 214940 | Ports & Packages | Individual Port(s) | rakuco | Closed | FIXED | archivers/p7zip: Security vulnerability (CVE-2016-9296) | 2016-12-01 |
| 211114 | Ports & Packages | Individual Port(s) | rakuco | Closed | FIXED | archivers/p7zip: update to 15.14.1 (Fixes security vulnerabilities) | 2016-07-15 |
| 204413 | Ports & Packages | Individual Port(s) | ehaupt | Closed | FIXED | archivers/unzip multiple vulnerabilities | 2016-01-05 |
| 226271 | Ports & Packages | Individual Port(s) | multimedia | Closed | FIXED | audio/libsndfile: Fix for multiple vulnerabilities | 2018-03-04 |
| 248268 | Ports & Packages | Individual Port(s) | riggs | Closed | FIXED | audio/libsndfile: Update to master branch and use cmake | 2020-07-28 |
| 201778 | Ports & Packages | Individual Port(s) | ports-secteam | Closed | Not Accepted | audio/sox: Multiple memory corruption vulnerabilities in SoX 14.4.2 | 2019-02-15 |
| 243566 | Ports & Packages | Individual Port(s) | multimedia | Closed | FIXED | audio/taglib: Update to 1.12b1 (fixes CVE-2018-11439) | 2020-05-02 |
| 211911 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | audio/teamspeak3-server: Update to 3.0.13.2 (fixes security vulnerabilities) | 2016-08-30 |
| 244429 | Ports & Packages | Individual Port(s) | 0mp | Closed | FIXED | audio/timidity++: update 2.14.0 -> 2.15.0, fix CVE-2017-11546 | 2020-03-02 |
| 202941 | Ports & Packages | Individual Port(s) | naddy | Closed | FIXED | audio/vorbis-tools: buffer overflow issue with invalid aiff files (CVE-2015-6749) | 2015-09-11 |
| 264435 | Base System | bhyve | jhb | Closed | FIXED | bhyve: hda_write() can index (and jump) beyond end of array | 2023-02-01 |
| 206581 | Base System | kern | net | Closed | FIXED | bxe_ioctl_nvram handler is faulty | 2018-05-23 |
| 238843 | Base System | bin | delphij | Closed | FIXED | bzip2: Merge recent upstream bugfixes incl. 3 security vulnerabilities | 2019-08-19 |
| 210581 | Ports & Packages | Individual Port(s) | junovitch | Closed | Overcome By Eve | chinese/wordpress-zh_CN and chinese/wordpress-zh_TW: update 4.5.2 -> 4.5.3 (security) | 2016-08-29 |
| 209409 | Ports & Packages | Individual Port(s) | miwi | Closed | FIXED | chinese/wordpress-zh_CN: update 4.4.2 -> 4.5.2 (security) | 2016-05-20 |
| 230753 | Ports & Packages | Individual Port(s) | ports-bugs | Closed | FIXED | comms/minicom: Change minicom's permissions for security reasons | 2020-02-05 |
| 222632 | Base System | kern | testing | Open | --- | connect(2) not available in capability mode | 2021-12-20 |
| 271839 | Base System | bin | emaste | Closed | FIXED | crypto/openssh: Status of CVE-2023-28531 | 2023-06-21 |
| 267624 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | databases/cassandra3: Update to 3.11.14 | 2023-01-11 |
| 237322 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | databases/influxdb: Update to 1.7.6 | 2019-06-06 |
| 216662 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | databases/mantis - CVE-2016-6837 | 2017-02-04 |
| 270050 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | databases/mantis: Update to 2.25.6 | 2023-03-10 |
| 276022 | Ports & Packages | Individual Port(s) | dvl | Closed | FIXED | databases/mantis: Update to patch known vulns | 2024-01-06 |
| 252639 | Ports & Packages | Individual Port(s) | lwhsu | Closed | FIXED | databases/mantis: update to 2.24.4 | 2021-03-10 |
| 257066 | Ports & Packages | Individual Port(s) | riggs | Closed | FIXED | databases/mantis: update to 2.25.2 | 2021-07-10 |
| 211274 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb*-server: Multiple vulnerabilities | 2016-08-08 |
| 212616 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb100-server: CVE 2016-6662 | 2016-09-28 |
| 205159 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb100-server: Not updated in 2015Q4 | 2015-12-09 |
| 209318 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb100-server: Update to 10.0.25 | 2016-05-07 |
| 235574 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb101-client: Update to 10.1.38 | 2019-02-22 |
| 223482 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb101-server - invalid vuxml entry | 2017-11-07 |
| 212617 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb101-server: CVE 2016-6662 | 2016-09-28 |
| 228148 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb101-server: Update to 10.1.33 | 2018-05-13 |
| 235573 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb101-server: Update to 10.1.38 | 2019-02-08 |
| 219045 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb101-server: Upgrade to latest version(v10.1.23) - current(v10.1.22) has critical vulnerabilities | 2017-05-30 |
| 239653 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb103-server upgrade to 10.3.17 | 2019-09-03 |
| 250286 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb103-server: Update to 10.3.25 | 2020-10-24 |
| 264170 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb103-server: Update to 10.3.35 (includes security fixes) | 2022-05-24 |
| 239981 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb104-{server,client}: Update to 10.4.7 (with 5 CVEs fixed) | 2019-11-29 |
| 264999 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb106-server: conf.d/wsrep.cnf overrides bind-address in conf.d/server.cnf. | 2023-04-10 |
| 261969 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb10[345]-server: Update to latest versions (security releases) | 2022-02-19 |
| 266133 | Ports & Packages | Individual Port(s) | ports-bugs | Closed | FIXED | databases/mariadb10[456]-server: update to latest security releases | 2022-09-09 |
| 212615 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb55-server: CVE 2016-6662 | 2016-09-28 |
| 204410 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | databases/mariadb55-server: Multiple security vulnerabilities | 2017-02-01 |
| 239717 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | databases/mongodb34: Update to 3.4.22 (bugfix & security release) | 2019-10-11 |
| 240126 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | databases/mongodb36: Update to 3.6.14 (bugfix & security release) | 2019-10-11 |
| 247394 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | databases/mongodb36: Update to 3.6.18 | 2020-06-29 |
| 258978 | Ports & Packages | Individual Port(s) | yasu | Closed | FIXED | databases/mongodb50: update to 5.0.3 | 2021-10-27 |
| 212606 | Ports & Packages | Individual Port(s) | ports-secteam | Closed | FIXED | databases/mysql*-server, databases/percona*-server: CVE 2016-6662 | 2016-11-27 |
| 239571 | Ports & Packages | Individual Port(s) | mmokhi | Closed | FIXED | databases/mysql55-server databases/mysql56-server databases/mysql57-server databases/mysql80-server - security fixes | 2019-09-20 |
| 220849 | Ports & Packages | Individual Port(s) | ports-secteam | Closed | FIXED | databases/mysql55-server databases/mysql56-server databases/mysql57-server security/vuxml: Update to latest (Fixes security vulnerabilities) | 2017-08-07 |
| 211248 | Ports & Packages | Individual Port(s) | ports-secteam | Closed | FIXED | databases/mysql55-server, databases/mysql56-server, databases/mysql57-server: Multiple CVE | 2017-04-25 |
| 212614 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | databases/mysql55-server: CVE 2016-6662 | 2016-11-27 |
| 221128 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | databases/mysql55-server: Needs to be updated to 5.5.57 | 2017-08-07 |
| 225241 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | databases/mysql55-server: Update to 5.5.59 fixes multiple CVE | 2018-01-31 |
| 230409 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | databases/mysql55-server: Update to 5.5.61 fixes multiple CVE | 2019-02-15 |
| 227767 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | databases/mysql55-server: Update to MySQL-Server 5.5.60 to fix multiple CVE | 2018-04-26 |
| 232699 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | databases/mysql55-server: Update to MySQL-Server 5.5.62 to fix multiple CVE | 2018-10-26 |
| 209344 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | databases/mysql56-server: 2016Q2 branch still unpatched | 2016-05-10 |
| 212613 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | databases/mysql56-server: CVE 2016-6662 | 2016-11-27 |
| 225240 | Ports & Packages | Individual Port(s) | mmokhi | Closed | FIXED | databases/mysql56-server: Update to 5.6.39 fixes multiple CVE | 2018-01-17 |
| 237398 | Ports & Packages | Individual Port(s) | mmokhi | Closed | FIXED | databases/mysql56-server: Update to 5.6.44 (Fixes multiple CVE) | 2019-05-13 |
| 241870 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | databases/mysql56-server: Update to 5.6.46 (< 5.6.46 is vulnerable to many CVE's) | 2020-01-20 |
| 212612 | Ports & Packages | Individual Port(s) | ports-bugs | Closed | FIXED | databases/mysql57-server: CVE 2016-6662 | 2016-11-27 |
| 218934 | Ports & Packages | Individual Port(s) | mmokhi | Closed | FIXED | databases/mysql57-server: Quarterly (2017Q2) branch version vulnerable | 2017-04-29 |
| 227621 | Ports & Packages | Individual Port(s) | mmokhi | Closed | FIXED | databases/mysql57-server: Update to 5.7.22 fixes multiple CVE | 2018-05-06 |
| 229860 | Ports & Packages | Individual Port(s) | ports-secteam | Closed | FIXED | databases/mysql57-server: Update to 5.7.23 (Fixes multiple CVE's) | 2018-08-14 |
| 232685 | Ports & Packages | Individual Port(s) | mmokhi | Closed | FIXED | databases/mysql57-server: Update to 5.7.24 fixes multiple CVE | 2018-11-16 |
| 234983 | Ports & Packages | Individual Port(s) | mmokhi | Closed | FIXED | databases/mysql57-server: Update to 5.7.25 fixes multiple CVE | 2019-01-21 |
| 237399 | Ports & Packages | Individual Port(s) | mmokhi | Closed | FIXED | databases/mysql57-server: Update to 5.7.26 (Fixes multiple CVE) | 2019-05-13 |
| 239271 | Ports & Packages | Individual Port(s) | mmokhi | Closed | FIXED | databases/mysql57-server: Update to 5.7.27 (Fixes multiple CVE) | 2019-12-05 |
| 255748 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | databases/mysql57-server: Update to 5.7.34 (fixes security vulnerabilities??) | 2021-08-26 |
| 259338 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | databases/mysql57-server: Update to 5.7.36 (fixes security vulnerabilities) | 2021-11-01 |
| 206998 | Ports & Packages | Individual Port(s) | riggs | Closed | FIXED | databases/mysql57-{server,client}: Update to 5.7.12 | 2016-05-07 |
| 229861 | Ports & Packages | Individual Port(s) | mmokhi | Closed | FIXED | databases/mysql80-server: Update to 8.0.12 fixes multiple CVE | 2018-08-14 |
| 234984 | Ports & Packages | Individual Port(s) | mmokhi | Closed | FIXED | databases/mysql80-server: Update to 8.0.14 fixes multiple CVE | 2019-01-26 |
| 239272 | Ports & Packages | Individual Port(s) | mmokhi | Closed | FIXED | databases/mysql80-server: Update to 8.0.17 (Fixes multiple CVE) | 2019-12-05 |
| 255937 | Ports & Packages | Individual Port(s) | fluffy | Closed | FIXED | databases/mysql80-server: Update to 8.0.25 (Fixes security vulnerability) | 2021-05-24 |
| 257832 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | databases/mysql80-server: Update to 8.0.26 (fixes multiple CVE) | 2021-08-29 |
| 263640 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | databases/mysql80-server: Update to 8.0.29 (Fixes multiple CVE) | 2022-05-17 |
| 265468 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | databases/mysql80-server: Update to 8.0.30 (Fixes several CVE) | 2022-09-16 |
| 212618 | Ports & Packages | Individual Port(s) | flo | Closed | FIXED | databases/percona55-server: CVE 2016-6662 | 2016-09-13 |
| 230932 | Ports & Packages | Individual Port(s) | flo | Closed | FIXED | databases/percona55-server: and -client update to 5.5.61-38.13 | 2018-09-09 |
| 212619 | Ports & Packages | Individual Port(s) | flo | Closed | FIXED | databases/percona56-server: CVE 2016-6662 | 2016-09-13 |
| 235930 | Ports & Packages | Individual Port(s) | flo | Closed | FIXED | databases/percona56-{server,client}: Update to 5.6.43-84.3 (fixes several vulnerabilities) | 2019-08-22 |
| 236570 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | databases/percona57-{server,client} update to 5.7.26-29 (fixes several vulnerabilities) | 2019-12-10 |
| 200537 | Ports & Packages | Individual Port(s) | delphij | Closed | FIXED | databases/pgbouncer: Security vulnerability (CVE-2015-4054) | 2022-10-26 |
| 261499 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | databases/phpmyadmin5 : Update to 5.1.2 | 2022-02-02 |
| 245096 | Ports & Packages | Individual Port(s) | fjoe | Closed | FIXED | databases/phpmyadmin: 4.9.5 is not a vulnerable version, but still marked vulnerable (matches < 5.0.2 entries) | 2020-05-05 |
| 233953 | Ports & Packages | Individual Port(s) | matthew | Closed | FIXED | databases/phpmyadmin: Update to 4.84 | 2018-12-12 |
| 244985 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | databases/postgresql*-server | 2020-03-29 |
| 223583 | Ports & Packages | Individual Port(s) | girgen | Closed | FIXED | databases/postgresql{92,93,94,95,96,10}-server: Please merge to 2017Q4, (security) update from r453847 | 2017-11-10 |
| 263623 | Ports & Packages | Individual Port(s) | yasu | Closed | Overcome By Eve | databases/redis: Update to 6.2.7 on 2022Q2 branch | 2022-08-29 |
| 258936 | Ports & Packages | Individual Port(s) | osa | Closed | FIXED | databases/redis{,5,6}: Update to latest releases | 2021-10-05 |
| 199483 | Ports & Packages | Individual Port(s) | jbeich | Closed | FIXED | databases/sqlite3: Multiple vulnerabilities corrected in 3.8.9.0 | 2015-05-09 |
| 233712 | Ports & Packages | Individual Port(s) | swills | Closed | FIXED | databases/sqlite3: Update to 3.26.0 | 2019-01-02 |
| 211580 | Base System | kern | jail | Closed | FIXED | deny system message buffer access from jails | 2018-10-20 |
| 247406 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | deskutils/anydesk: Update to 5.5.5 | 2020-11-02 |
| 204407 | Ports & Packages | Individual Port(s) | madpilot | Closed | FIXED | deskutils/owncloudclient: Missing VUXML entry for CVE-2015-7298 | 2015-11-13 |
| 213537 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | deskutils/py-khal: Update to 0.7.1 (security fixes) | 2016-10-18 |
| 202942 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | deskutils/remind: security update 3.1.13 -> 3.1.15 (fixes CVE-2015-5957 buffer overflow) | 2015-09-18 |
| 255368 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | devel/binutils: Backport patch fixing CVE-2021-3487 | 2021-08-18 |
| 251385 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | devel/binutils: Update to 2.37 | 2021-08-21 |
| 206417 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | devel/cgit: Update to 0.12 (Security fixes) | 2016-01-21 |
| 230361 | Ports & Packages | Individual Port(s) | riggs | Closed | FIXED | devel/cgit: Update to 1.2.1 (Fixes CVE-2018-14912) | 2018-08-12 |
| 198816 | Ports & Packages | Individual Port(s) | brooks | Closed | FIXED | devel/cross-binutils: Multiple security vulnerabilities | 2015-03-24 |
| 203479 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | devel/gdcm: Update to version 2.6.3 (Fixes security vulnerability) | 2016-02-01 |
| 208074 | Ports & Packages | Individual Port(s) | garga | Closed | FIXED | devel/git - CVE-2016-2315 & CVE-2016-2324 | 2016-03-18 |
| 267177 | Ports & Packages | Individual Port(s) | garga | Closed | FIXED | devel/git: Update to 2.38.1 (security release) | 2022-10-19 |
| 220977 | Ports & Packages | Individual Port(s) | bofh | Closed | FIXED | devel/gsoap: Update to 2.8.50 (Fixes security vulnerability: CVE-2017-9765) | 2017-07-25 |
| 207173 | Ports & Packages | Individual Port(s) | demon | Closed | FIXED | devel/hive: Apache Hive authorization bug disclosure in 1.2.1 (CVE-2015-7521) | 2016-07-03 |
| 265082 | Ports & Packages | Individual Port(s) | dbaio | Closed | FIXED | devel/ipython: 7.31.1 was a security release but not marked or merged (CVE-2022-21699) | 2022-11-12 |
| 209219 | Ports & Packages | Individual Port(s) | vanilla | Closed | FIXED | devel/jansson: denial of service vulnerability (CVE-2016-4425) | 2016-05-20 |
| 203110 | Ports & Packages | Individual Port(s) | lwhsu | Closed | FIXED | devel/jenkins: CSRF / Code Execution security vulnerability | 2016-01-06 |
| 246145 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | devel/json-c: Update to 0.14 | 2020-05-21 |
| 247089 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | devel/json-c: update quarterly to 0.14 | 2020-11-20 |
| 215085 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | devel/libdwarf: Update to 20161124 (Fixes many security vulnerabilities) | 2017-01-09 |
| 196640 | Ports & Packages | Individual Port(s) | mm | Closed | FIXED | devel/libevent2: update to 2.0.22 (to fix CVE-2014-6272) | 2015-01-12 |
| 239599 | Ports & Packages | Individual Port(s) | jbeich | Closed | FIXED | devel/libevent: update to 2.1.11 | 2019-08-27 |
| 261273 | Ports & Packages | Individual Port(s) | wen | Closed | Overcome By Eve | devel/liblas: Vulnerable to multiple CVEs, Deprecated, fails to run tests: crashes | 2024-04-01 |
| 260421 | Ports & Packages | Package Infrastruc | portmgr | Closed | FIXED | devel/log4j: Security vulnerability tracking issue (CVE-2021-44228 / CVE-2021-45046) | 2023-03-01 |
| 198815 | Ports & Packages | Individual Port(s) | feld | Closed | Feedback Timeou | devel/m6811-binutils: Multiple security vulnerabilities | 2017-02-18 |
| 261120 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | devel/mill Update to 0.9.12 (log4j security fix) | 2022-01-12 |
| 241308 | Ports & Packages | Individual Port(s) | dmgk | Closed | FIXED | devel/nexus2-oss: Update to 2.14.15-01 | 2019-11-09 |
| 252564 | Ports & Packages | Individual Port(s) | kevans | Closed | FIXED | devel/nexus2-oss: update to 2.14.20-02 | 2021-09-29 |
| 220818 | Ports & Packages | Individual Port(s) | ports-bugs | Closed | FIXED | devel/oniguruma5: Fix multiple vulnerabilities in 5.9.6_p1 | 2017-11-26 |
| 220438 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | devel/oniguruma6: Update to 6.4.0 | 2017-10-09 |
| 240368 | Ports & Packages | Individual Port(s) | mandree | Closed | FIXED | devel/oniguruma: Update to 6.9.3 (Fixes CVE-2019-13224) | 2019-09-07 |
| 260534 | Ports & Packages | Individual Port(s) | truckman | Closed | FIXED | devel/opengrok: Update to 1.6.9 (>1.6.7), fixes security vulnerability (CVE-2021-2322) | 2022-04-26 |
| 206157 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | devel/p5-PathTools: Update to 3.62 | 2016-01-13 |
| 203667 | Ports & Packages | Individual Port(s) | perl | Closed | FIXED | devel/p5-UI-Dialog: patch 1.09 for shell command execution bug (CVE-2008-7315) | 2015-10-10 |
| 233455 | Ports & Packages | Individual Port(s) | danfe | Closed | FIXED | devel/patch affected by multiple vulnerabilities | 2020-01-26 |
| 208260 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | devel/pcre - CVE-2016-1283 | 2016-04-03 |
| 200661 | Ports & Packages | Individual Port(s) | bf | Closed | FIXED | devel/pcre: 8.37 has unresolved vulnerabilities | 2015-06-10 |
| 202209 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | devel/pcre: Heap Overflow Vulnerability (CVE TBD) | 2015-09-23 |
| 198813 | Ports & Packages | Individual Port(s) | ports-bugs | Closed | FIXED | devel/psptoolchain-binutils: Multiple security vulnerabilities | 2022-06-30 |
| 215651 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | devel/py-Jinja2: Update to 2.8.2 | 2017-04-04 |
| 273363 | Ports & Packages | Individual Port(s) | skreuzer | Closed | FIXED | devel/py-joblib: upgrade to 1.3.2 and fixes CVE-2022-21797 | 2023-08-29 |
| 260549 | Ports & Packages | Individual Port(s) | truckman | Closed | FIXED | devel/py-opengrok-tools: Possible security issue: Update to 1.6.9 (>1.6.7?) | 2022-05-05 |
| 263060 | Ports & Packages | Individual Port(s) | python | Closed | FIXED | devel/py-py: Update to 1.10.0 (security) -> 1.11.0 (for @py311 support) | 2023-09-01 |
| 245252 | Ports & Packages | Individual Port(s) | dbaio | Closed | FIXED | devel/py-twisted: Update to 20.3.0 (includes security updates) | 2020-04-27 |
| 261791 | Ports & Packages | Individual Port(s) | kai | Closed | FIXED | devel/py-twisted: Update to 22.1.0 (includes a security update) | 2022-02-13 |
| 237501 | Ports & Packages | Individual Port(s) | jpaetzel | Closed | FIXED | devel/py-yaml: Update to 5.1 | 2020-01-13 |
| 256220 | Ports & Packages | Individual Port(s) | dbaio | Closed | FIXED | devel/py-yaml: update to 5.4.1 | 2021-06-02 |
| 245023 | Ports & Packages | Individual Port(s) | ruby | Closed | FIXED | devel/rubygem-json: Update to 2.3.0 (CVE-2020-10663) | 2020-04-03 |
| 221747 | Ports & Packages | Individual Port(s) | lev | Closed | Overcome By Eve | devel/subversion: 1.9.7 should be MFH to quarterly | 2017-10-17 |
| 268754 | Ports & Packages | Individual Port(s) | dvl | Closed | FIXED | devel/viewvc-devel: update to 1.3.0-20230104 | 2023-01-13 |
| 207740 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | devel/websvn: Add patches for CVE-2013-6892 and CVE-2016-2511 | 2016-03-06 |
| 255949 | Ports & Packages | Individual Port(s) | riggs | Closed | FIXED | devel/websvn: update to 2.6.1 | 2022-02-26 |
| 260481 | Ports & Packages | Individual Port(s) | lwhsu | Closed | FIXED | devel/zookeeper: Update log4j to 2.16 | 2021-12-18 |
| 260570 | Ports & Packages | Individual Port(s) | lwhsu | Closed | FIXED | devel/zookeeper: Update log4j to 2.17 | 2021-12-20 |
| 275999 | Ports & Packages | Individual Port(s) | bofh | Closed | FIXED | devel/zookeeper: Update to 3.8.3 (Fixes critical security vulnerability) and release the port | 2023-12-29 |
| 266766 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | devel/zydis: update to 3.2.1 | 2022-10-04 |
| 248780 | Ports & Packages | Individual Port(s) | zeising | Closed | FIXED | dns/adns: Update to 1.6.0 | 2020-08-20 |
| 241362 | Ports & Packages | Individual Port(s) | mat | Closed | Not Accepted | dns/bind911: Merge ports r514624 (9.11.12) to 2019Q4 (Fixes security vulnerability) | 2019-10-20 |
| 262662 | Ports & Packages | Individual Port(s) | mat | Closed | FIXED | dns/bind91{1,6,8}: CVE-2021-25220 CVE-2022-0396 CVE-2022-0635 CVE-2022-0667 | 2022-03-25 |
| 213495 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | dns/c-ares: Update to 1.12.0 (CVE-2016-5180) | 2016-10-20 |
| 257900 | Ports & Packages | Individual Port(s) | zi | Closed | FIXED | dns/c-ares: Update to 1.17.2 | 2021-08-17 |
| 277261 | Ports & Packages | Individual Port(s) | rodrigo | Closed | FIXED | dns/c-ares: upgrade to 1.27.0 required (moderate security issue) | 2024-02-23 |
| 262537 | Ports & Packages | Individual Port(s) | diizzy | Closed | Not Accepted | dns/dns2blackhole : dns2blackhole-update2 is downloading executable to make ddos | 2023-06-19 |
| 222739 | Ports & Packages | Individual Port(s) | mandree | Closed | FIXED | dns/dnsmasq: Security update to 2.78 | 2017-10-02 |
| 229485 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | dns/knot-resolver: Update to 2.4.1 (security fix - CVE-2018-10920) | 2018-08-15 |
| 211407 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | dns/libidn: update 1.31 -> 1.33 | 2016-08-01 |
| 211693 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | dns/nsd: Update to 4.1.11 (Fixes security vulnerability: Fixes CVE-2016-6173) | 2016-08-10 |
| 239964 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | dns/nsd: Update to 4.2.2 | 2019-08-19 |
| 262879 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | dns/powerdns dns/powerdns-recursor: Update to 4.6.1 (fixes CVE-2022-27227) + fix building against LibreSSL | 2022-04-06 |
| 211854 | Ports & Packages | Individual Port(s) | ports-secteam | Closed | Overcome By Eve | dns/powerdns*: backport CVE-2016-6172 fix to 3.x series | 2016-11-27 |
| 233603 | Ports & Packages | Individual Port(s) | swills | Closed | FIXED | dns/powerdns-recursor: Update to 4.1.8 (Fixes CVE-2018-16855) | 2018-12-09 |
| 235113 | Ports & Packages | Individual Port(s) | swills | Closed | FIXED | dns/powerdns-recursor: Update to 4.1.9 (fixes CVE-2019-3806 and CVE-2019-3807) | 2019-01-28 |
| 250318 | Ports & Packages | Individual Port(s) | dch | Closed | FIXED | dns/powerdns-recursor: Update to 4.3.5 | 2020-11-08 |
| 216135 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | dns/powerdns-recursor: Upgrade to recent version (v4.0.4) - current(4.0.3) is vulnerable | 2017-01-18 |
| 269116 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | dns/powerdns-recursor: update to 4.8.1 (fixes CVE-2023-22617) | 2023-01-24 |
| 238705 | Ports & Packages | Individual Port(s) | swills | Closed | FIXED | dns/powerdns: Update to 4.1.10 (Fixes security vulnerabilities) | 2019-07-01 |
| 233139 | Ports & Packages | Individual Port(s) | swills | Closed | FIXED | dns/powerdns: Update to 4.1.5 (Fixes security vulnerabilities) | 2018-11-20 |
| 236634 | Ports & Packages | Individual Port(s) | swills | Closed | FIXED | dns/powerdns: Update to 4.1.7 (Fixes security vulnerabilities) | 2019-03-19 |
| 216136 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | dns/powerdns: Upgrade to recent version (v4.0.2) - current(4.0.1) has critical vulnerabilities | 2017-01-18 |
| 246569 | Ports & Packages | Individual Port(s) | delphij | Closed | FIXED | dns/unbound: Update to 1.10.1 | 2020-05-22 |
| 266654 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | dns/unbound: Update to 1.16.3 | 2022-09-29 |
| 241033 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | dns/unbound:Update to 1.9.4 (fixes CVE-2019-16866) | 2019-10-20 |
| 211100 | Ports & Packages | Individual Port(s) | ports-secteam | Closed | Overcome By Eve | editors/libreoffice: Update to latest version, security vulnerability (CVE-2016-4324) | 2018-02-23 |
| 205814 | Ports & Packages | Individual Port(s) | bofh | Closed | FIXED | emulators/qemu {-devel}: multiple vulnerabilities | 2021-11-02 |
| 202402 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | emulators/qemu-devel emulators/qemu-sbruno: multiple vulnerabilities (CVE-2015-5154, CVE-2015-5166, CVE-2015-5165) | 2016-01-03 |
| 203112 | Ports & Packages | Individual Port(s) | bofh | Closed | FIXED | emulators/qemu-devel: Multiple security vulnerabilities | 2016-01-01 |
| 206726 | Ports & Packages | Individual Port(s) | sbruno | Closed | DUPLICATE | emulators/qemu-sbruno: Missing VuXML entry | 2016-10-07 |
| 205813 | Ports & Packages | Individual Port(s) | sbruno | Closed | FIXED | emulators/qemu-sbruno: multiple vulnerabilities | 2021-11-02 |
| 201064 | Ports & Packages | Individual Port(s) | nox | Closed | FIXED | emulators/qemu: Heap overflow in QEMU PCNET controller, allowing guest->host escape (CVE-2015-3209) | 2015-06-27 |
| 274270 | Ports & Packages | Individual Port(s) | vbox | Open | --- | emulators/virtualbox-ose-legacy family, including www/phpvirtualbox-legacy: deprecate six legacy ports | Tue 16:45 |
| 272586 | Ports & Packages | Individual Port(s) | grahamperrin | Closed | DUPLICATE | emulators/virtualbox-ose: FORBIDDEN for all 6.1.4⋯ versions of ports in the family | 2023-07-19 |
| 244212 | Ports & Packages | Individual Port(s) | madpilot | Closed | FIXED | emulators/virtualbox-ose: Update to 5.2.44 | 2020-07-19 |
| 266907 | Ports & Packages | Individual Port(s) | vvd | Closed | FIXED | emulators/virtualbox-ose{-*}: Update to 6.1.44 | 2023-05-26 |
| 205841 | Ports & Packages | Individual Port(s) | royger | Closed | FIXED | emulators/xen {-tools/-kernel}: multiple security advisories (XSA-157 to XSA-169) | 2021-11-02 |
| 208476 | Ports & Packages | Individual Port(s) | royger | Closed | Not A Bug | emulators/xen {-tools/-kernel}: security advisories (XSA-172) | 2016-04-04 |
| 211482 | Ports & Packages | Individual Port(s) | royger | Closed | FIXED | emulators/xen {-tools/-kernel}: security advisories (XSA-182,183,184) | 2016-08-02 |
| 214936 | Ports & Packages | Individual Port(s) | royger | Closed | FIXED | emulators/xen {-tools/-kernel}: security advisories (XSA-185 - XSA-201) | 2016-12-04 |
| 247735 | Ports & Packages | Individual Port(s) | danilo | Open | --- | envoy/istio: Multiple vulnerabilites | 2020-07-05 |
| 212455 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | ftp/curl: Security Vulnerability: CVE-2016-7141 <= 7.50.2 | 2016-10-09 |
| 221362 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | ftp/curl: Security update to 7.55.0 | 2017-08-10 |
| 206756 | Ports & Packages | Individual Port(s) | zeising | Closed | FIXED | ftp/curl: Update to 7.47.0 (Fixes CVE-2016-0755) | 2016-02-03 |
| 211575 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | ftp/curl: Update to 7.50.1 (Fixes 3 Security Vulnerabilities), security/vuxml: Add entry | 2016-08-04 |
| 212677 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | ftp/curl: Update to 7.50.3 / fix vuln | 2016-09-21 |
| 214000 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | ftp/curl: Update to 7.51.0 (Fixes multiple vulnerabilities) | 2016-11-02 |
| 229753 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | ftp/curl: Update to 7.61.0 (Fixes CVE-2018-0500) | 2018-07-27 |
| 254773 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | ftp/curl: Update to 7.76.1 | 2021-04-28 |
| 257306 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | ftp/curl: Update to 7.78.0 (security and bugfix release) | 2021-08-20 |
| 270357 | Ports & Packages | Individual Port(s) | portmgr | Closed | FIXED | ftp/curl: Update to 8.0.1 | 2023-04-18 |
| 269967 | Ports & Packages | Individual Port(s) | yasu | Closed | FIXED | ftp/curl: security update to 7.88.1 | 2023-03-19 |
| 278463 | Ports & Packages | Individual Port(s) | pi | New | --- | ftp/filezilla: needs update to 3.67.0 to fix PuTTY bug leaking info on NIST-P521 based private keys [CVE-2024-31497] | Sun 07:23 |
| 247554 | Ports & Packages | Individual Port(s) | mm | Closed | FIXED | ftp/proftpd: Update to 1.3.6d | 2020-08-17 |
| 214941 | Ports & Packages | Individual Port(s) | vd | Closed | FIXED | ftp/wget - missing vuxml entry | 2016-11-30 |
| 210421 | Ports & Packages | Individual Port(s) | vd | Closed | FIXED | ftp/wget: Update to 1.18 (Fixes CVE-2016-4971) | 2016-06-24 |
| 210512 | Ports & Packages | Individual Port(s) | vd | Closed | FIXED | ftp/wget: bump to 1.18 in 2016Q2 (CVE-2016-4971) | 2016-06-24 |
| 250425 | Ports & Packages | Individual Port(s) | jhale | Closed | FIXED | games/chocolate-doom: update to 3.0.1 | 2021-01-22 |
| 263824 | Base System | bin | karels | Closed | FIXED | genet(4): Driver interface may overwrite memory in a consecutive memory copy operations when parsing TX packet | 2022-05-23 |
| 262174 | Documentation | Books & Articles | carlavilla | Closed | FIXED | gpg.conf options in Committer's guide should be reviewed/updated | 2023-09-07 |
| 255818 | Ports & Packages | Individual Port(s) | thierry | Closed | FIXED | graphics/ImageMagick6: Upgrade to 6.9.12-12 | 2021-07-20 |
| 222622 | Ports & Packages | Individual Port(s) | kwm | Closed | FIXED | graphics/ImageMagick7: Please MFH r450491 (contains a security vulnerability fix) | 2017-09-27 |
| 214511 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | graphics/ImageMagick7: Update to 7.0.3-7 (security fixes) | 2016-12-05 |
| 238199 | Ports & Packages | Individual Port(s) | kwm | Closed | FIXED | graphics/ImageMagick7: Update to 7.0.8-47 (Fixes many vulnerabilities) | 2019-05-30 |
| 255802 | Ports & Packages | Individual Port(s) | kwm | Closed | FIXED | graphics/ImageMagick7: upgrade to 7.0.11-12 and fix some vulnerabilities | 2021-05-28 |
| 209241 | Ports & Packages | Individual Port(s) | kwm | Closed | FIXED | graphics/ImageMagick: Add VuXML entry to report vulnerability for CVE-2016-3714 | 2016-05-07 |
| 214517 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | graphics/ImageMagick: Update to 6.9.6-4 (security fixes) | 2016-12-05 |
| 213032 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | graphics/ImageMagick: Upgrade to 6.9.5-10 (security fixes) | 2016-10-12 |
| 213020 | Ports & Packages | Individual Port(s) | dinoex | Closed | FIXED | graphics/gd: Fix integer overflow in gdImageWebpCtx | 2016-10-16 |
| 211124 | Ports & Packages | Individual Port(s) | cmt | Closed | FIXED | graphics/gimp: update to 2.8.18 | 2016-07-29 |
| 207686 | Ports & Packages | Individual Port(s) | jbeich | Closed | FIXED | graphics/graphite2: update to 1.3.6 | 2016-03-08 |
| 206372 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | graphics/imlib2: Update to 1.4.7 | 2016-01-22 |
| 255369 | Ports & Packages | Individual Port(s) | portmgr | Closed | Not A Bug | graphics/jpeg-turbo: CVE-2021-20205 | 2021-04-25 |
| 250190 | Ports & Packages | Individual Port(s) | ports-secteam | Closed | FIXED | graphics/jpeg-turbo: Update to 2.0.5 | 2020-11-16 |
| 250616 | Ports & Packages | Individual Port(s) | portmgr | Closed | FIXED | graphics/jpeg: update or remove | 2020-10-26 |
| 207001 | Ports & Packages | Individual Port(s) | riggs | Closed | FIXED | graphics/jpgraph2 - CVE-2009-4422 | 2016-03-14 |
| 259590 | Ports & Packages | Individual Port(s) | office | Closed | FIXED | graphics/libemf: update to 1.0.13 | 2021-11-02 |
| 244060 | Ports & Packages | Individual Port(s) | dbaio | Closed | FIXED | graphics/libexif: Fix security vulnerabilities | 2020-02-15 |
| 250105 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | graphics/libexif: Update to 0.6.22 | 2020-10-07 |
| 258354 | Ports & Packages | Individual Port(s) | diizzy | Closed | FIXED | graphics/libpano13: Update to 2.9.20 | 2021-09-23 |
| 205502 | Ports & Packages | Individual Port(s) | gnome | Closed | FIXED | graphics/librsvg2: update 2.40.10 -> 2.40.12 | 2015-12-23 |
| 212207 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | graphics/mupdf: CVE-2016-6525, CVE-2016-6265 | 2016-10-12 |
| 253415 | Ports & Packages | Individual Port(s) | tcberner | Closed | FIXED | graphics/opencv: add HARDENING and LTO options | 2021-02-11 |
| 234473 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | graphics/openjpeg: Fix CVE-2018-6616 | 2019-01-24 |
| 216952 | Ports & Packages | Individual Port(s) | madpilot | Closed | FIXED | graphics/optipng: update to 0.7.6 | 2017-02-16 |
| 224960 | Ports & Packages | Individual Port(s) | yuri | Closed | FIXED | graphics/optipng: update to 0.7.7 | 2018-02-12 |
| 264618 | Ports & Packages | Individual Port(s) | nc | Closed | FIXED | graphics/p5-Image-ExifTool: Update to 12.42 - (fixed security vulnerability) | 2022-06-24 |
| 216660 | Ports & Packages | Individual Port(s) | feld | Closed | Overcome By Eve | graphics/png - CVE-2016-10087 | 2017-06-09 |
| 204551 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | graphics/png: buffer overflows in libpng 1.6.18 (CVE-2015-8126) | 2015-11-17 |
| 220608 | Ports & Packages | Individual Port(s) | swills | Closed | FIXED | graphics/poppler: Update to >= 0.56.0, Multiple security (CVE) vulnerabilities | 2017-08-24 |
| 207054 | Ports & Packages | Individual Port(s) | rakuco | Closed | FIXED | graphics/py-imaging: Backport 2 Pillow security fixes. | 2016-02-11 |
| 207053 | Ports & Packages | Individual Port(s) | koobs | Closed | FIXED | graphics/py-pillow: Backport security fixes from 3.1.1. | 2016-02-13 |
| 214412 | Ports & Packages | Individual Port(s) | koobs | Closed | FIXED | graphics/py-pillow: Multiple vulnerabilities (CVE-2016-9189, CVE-2016-9190) | 2017-01-09 |
| 215615 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | graphics/py-pillow: Update to 3.4.2 (security fixes) | 2017-01-09 |
| 241268 | Ports & Packages | Individual Port(s) | kai | Closed | FIXED | graphics/py-pillow: Update to 6.2.0 | 2019-10-20 |
| 243336 | Ports & Packages | Individual Port(s) | kai | Closed | FIXED | graphics/py-pillow: Update to 6.2.2 | 2020-01-28 |
| 255361 | Ports & Packages | Individual Port(s) | sunpoet | Closed | Overcome By Eve | graphics/py-pillow: Update to 8.2.0 (fixes security vulnerabilities) | 2024-04-08 |
| 246803 | Ports & Packages | Individual Port(s) | tobik | Closed | Overcome By Eve | graphics/sane-backends: update to 1.0.30, security fixes | 2020-05-30 |
| 214952 | Ports & Packages | Individual Port(s) | portmgr | Closed | Not Enough Info | graphics/tiff - CVE-2016-8331 | 2017-06-09 |
| 205923 | Ports & Packages | Individual Port(s) | rakuco | Closed | FIXED | graphics/tiff: Add patches for CVE-2015-8665, CVE-2015-8683 and other vulnerabilities | 2016-01-05 |
| 211113 | Ports & Packages | Individual Port(s) | portmgr | Closed | FIXED | graphics/tiff: Backport fixes for CVE-2016-5875, CVE-2016-3186 | 2016-07-27 |
| 267276 | Ports & Packages | Individual Port(s) | desktop | Open | --- | graphics/tiff: Backport fixes for CVE-2022-2519, CVE-2022-2520 and CVE-2022-2521 | 2023-02-23 |
| 211405 | Ports & Packages | Individual Port(s) | ports-secteam | Closed | FIXED | graphics/tiff: Remove gif2tiff (Reporting still vulnerable to CVE-2016-5102) | 2016-08-06 |
| 203671 | Ports & Packages | Individual Port(s) | portmgr | Closed | Feedback Timeou | graphics/tiff: security/vuxml: denial of service bug in libtiff (CVE-2015-7313) | 2016-04-13 |
| 233146 | Ports & Packages | Individual Port(s) | portmgr | Closed | FIXED | graphics/tiff: update to 4.10.0 | 2018-11-17 |
| 219783 | Ports & Packages | Individual Port(s) | bofh | Closed | Overcome By Eve | graphics/tiffgt is vulnerable, possibly duplicate | 2017-06-06 |
| 256273 | Ports & Packages | Individual Port(s) | x11 | Closed | FIXED | graphics/wayland: fix CVE-2013-2003 | 2021-05-31 |
| 271695 | Ports & Packages | Individual Port(s) | diizzy | Closed | FIXED | graphics/webp: Patch CVE-2023-1999 | 2023-06-06 |
| 273749 | Ports & Packages | Individual Port(s) | sunpoet | Closed | Overcome By Eve | graphics/webp: backport fix for CVE-2023-4863 | 2023-09-15 |
| 273766 | Ports & Packages | Individual Port(s) | sunpoet | Open | --- | graphics/webp: critical vulnerability (affects browsers) | 2023-10-01 |
| 241066 | Ports & Packages | Individual Port(s) | cy | Closed | FIXED | graphics/xpdf3: Backport fix for CVE-2019-16927 and CVE-2019-9877 | 2019-10-19 |
| 206585 | Base System | kern | bugs | Closed | FIXED | hpt_set_info possible buffer overflow | 2019-01-14 |
| 252291 | Ports & Packages | Individual Port(s) | jrm | Closed | FIXED | irc/inspircd: Update to 3.8.1 (fixes security vulnerability) | 2021-01-01 |
| 255292 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | irc/ircII: Update to 20210314 (CVE-2021-29376: irc/scrollz, irc/bitchx also affected) | 2022-12-01 |
| 255492 | Ports & Packages | Individual Port(s) | kbowling | Closed | FIXED | irc/ircII: Update to 20210314 (fixes CVE-2021-29376) | 2021-06-15 |
| 212888 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | irc/irssi: Multiple vulnerabilities | 2016-09-21 |
| 215800 | Ports & Packages | Individual Port(s) | vanilla | Closed | FIXED | irc/irssi: Update to 0.8.21 (Security fixes) | 2017-01-08 |
| 217878 | Ports & Packages | Individual Port(s) | riggs | Closed | FIXED | irc/irssi: Update to 1.0.2 | 2017-03-22 |
| 219827 | Ports & Packages | Individual Port(s) | vlad-fbsd | Closed | FIXED | irc/irssi: Update to 1.0.3 (security fixes) | 2017-06-08 |
| 220544 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | irc/irssi: Update to 1.0.4 (security fixes) | 2017-07-08 |
| 234798 | Ports & Packages | Individual Port(s) | dbaio | Closed | FIXED | irc/irssi: Update to 1.1.2 | 2019-01-10 |
| 238892 | Ports & Packages | Individual Port(s) | kai | Closed | FIXED | irc/irssi: Update to 1.2.1 | 2019-07-02 |
| 198809 | Ports & Packages | Individual Port(s) | makc | Closed | FIXED | irc/quassel: Generates 1024 bit RSA keys by default, which are a bit dated | 2015-03-24 |
| 205670 | Ports & Packages | Individual Port(s) | makc | Closed | Overcome By Eve | irc/quassel: Vulnerable version in 2015Q4 branch. | 2016-01-04 |
| 209218 | Ports & Packages | Individual Port(s) | makc | Closed | FIXED | irc/quassel: update to 0.12.4 (CVE-2016-4414) | 2016-07-07 |
| 262693 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | irc/scrollz: Update to 2.3.1 | 2022-04-12 |
| 244117 | Ports & Packages | Individual Port(s) | diizzy | Closed | FIXED | irc/unreal: Update to 5.0.3.1 | 2022-06-12 |
| 262180 | Base System | kern | bugs | Open | --- | jail escaping via jail-friendly nullfs | 2023-11-24 |
| 197546 | Ports & Packages | Individual Port(s) | robak | Closed | FIXED | japanese/lynx-current: Add CPE information | 2015-03-17 |
| 208462 | Ports & Packages | Individual Port(s) | ports-secteam | Closed | FIXED | java/jakarta-struts: Security vulnerability: input validation bypass (JVN#86448949/CVE-2015-0899) | 2016-09-10 |
| 211099 | Ports & Packages | Individual Port(s) | ports-bugs | Closed | Overcome By Eve | java/jakarta-struts: Vulnerable to CVE-2016-3092 | 2016-12-01 |
| 204268 | Ports & Packages | Individual Port(s) | glewis | Closed | FIXED | java/openjdk7 - multiple security vulnerabilities | 2016-01-21 |
| 204269 | Ports & Packages | Individual Port(s) | java | Closed | FIXED | java/openjdk8 - multiple security vulnerabilities | 2015-12-15 |
| 206680 | Base System | kern | emaste | Closed | FIXED | kbd spl calls obscure locking | 2024-01-07 |
| 207334 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | lang/bsh: Update to version 2.0b6 (Fixes security vulnerability, CVE-2016-2510) | 2016-02-21 |
| 216661 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | lang/chicken - multiple vulnerabilities | 2017-03-05 |
| 200980 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | lang/chicken: CVE-2015-4556: out-of-bounds read in CHICKEN Scheme's string-translate* procedure | 2015-08-02 |
| 202633 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | lang/go {14}: security/vuxml: multiple vulnerabilties (CVE-2015-5739, CVE-2015-5740, CVE-2015-5741) | 2015-09-28 |
| 207304 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | lang/go: Merge 406071 (security vulnerability fix) to quarterly branch 2016Q1 | 2016-02-24 |
| 216663 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | lang/guile2 - CVE-2016-8605 & CVE-2016-8606 | 2017-02-04 |
| 211561 | Ports & Packages | Individual Port(s) | perl | Closed | FIXED | lang/perl5.20, 5.22 & 5.24: Multiple Vulnerabilities | 2016-08-15 |
| 203541 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | lang/php*: security/vuxml: security update to PHP 5.5.30, 5.6.14 | 2015-10-12 |
| 202906 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | lang/php5 lang/php55 lang/php56: 5.4.45, 5.5.29 5.6.13 released (11 Security Vulnerabilities fixed) | 2015-09-10 |
| 206129 | Ports & Packages | Individual Port(s) | miwi | Closed | FIXED | lang/php55 lang/php56: Update to latest versions (5.5.31, 5.6.17) - Fixes Security Vulnerabilities | 2016-01-11 |
| 209779 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | lang/php55 lang/php56: Update to latest versions (5.5.36, 5.6.22) fixes security vulnerabilities | 2016-05-28 |
| 210502 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | lang/php56 PHP 5.6.23 released (fixing "several security bugs") | 2016-06-25 |
| 213589 | Ports & Packages | Individual Port(s) | tz | Closed | FIXED | lang/php56 lang/php70: Update to latest versions (5.6.27, 7.0.12) - Fixes Security Vulnerabilities | 2016-10-21 |
| 220809 | Ports & Packages | Individual Port(s) | tz | Closed | FIXED | lang/php56: Change from oniguruma5 to oniguruma6 | 2017-11-26 |
| 208465 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | lang/php56: Update to 5.6.20 | 2016-04-03 |
| 209145 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | lang/php56: Update to 5.6.21 | 2016-05-03 |
| 211290 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | lang/php56: Update to 5.6.24 | 2016-07-26 |
| 213664 | Ports & Packages | Individual Port(s) | koobs | Closed | DUPLICATE | lang/php56: Update to 5.6.27 | 2016-10-21 |
| 223319 | Ports & Packages | Individual Port(s) | ale | Closed | Overcome By Eve | lang/php56: Update to 5.6.32 (Fixes security vulnerabilities) | 2018-02-26 |
| 227246 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | lang/php56: Update to 5.6.35, Fixes security vulnerabilities | 2018-04-26 |
| 233847 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | lang/php56: Update to 5.6.39 | 2018-12-10 |
| 216664 | Ports & Packages | Individual Port(s) | feld | Closed | Overcome By Eve | lang/php70 - CVE-2017-5340 | 2017-02-04 |
| 216654 | Ports & Packages | Individual Port(s) | feld | Closed | Not Enough Info | lang/php70-gd & lang/php56-gd - CVE-2016-8670 | 2017-06-09 |
| 210491 | Ports & Packages | Individual Port(s) | miwi | Closed | FIXED | lang/php70: Update to 7.0.8 (Security fixes) | 2016-06-25 |
| 211251 | Ports & Packages | Individual Port(s) | tz | Closed | FIXED | lang/php70: Update to 7.0.9 (multiple security fixes) | 2016-07-27 |
| 246480 | Ports & Packages | Individual Port(s) | tz | Closed | FIXED | lang/php72: Update to 7.2.31 | 2020-05-15 |
| 248569 | Ports & Packages | Individual Port(s) | tz | Closed | FIXED | lang/php72: Update to 7.2.33 | 2020-08-19 |
| 246481 | Ports & Packages | Individual Port(s) | tz | Closed | FIXED | lang/php73: Update to 7.3.18 | 2020-05-18 |
| 248568 | Ports & Packages | Individual Port(s) | tz | Closed | FIXED | lang/php73: Update to 7.3.21 | 2020-08-19 |
| 246482 | Ports & Packages | Individual Port(s) | tz | Closed | FIXED | lang/php74: Update to 7.4.6 | 2020-05-16 |
| 248567 | Ports & Packages | Individual Port(s) | tz | Closed | FIXED | lang/php74: Update to 7.4.9 | 2020-08-19 |
| 246984 | Ports & Packages | Individual Port(s) | dbaio | Closed | FIXED | lang/python* Fix CVE-2020-8492, CVE-2019-18348 | 2020-06-22 |
| 222398 | Ports & Packages | Individual Port(s) | wen | Closed | FIXED | lang/python27: Update to 2.7.14 | 2017-10-14 |
| 228038 | Ports & Packages | Individual Port(s) | python | Closed | DUPLICATE | lang/python27: Update to 2.7.15 (bugfix & likely security update) | 2018-05-07 |
| 228028 | Ports & Packages | Individual Port(s) | wen | Closed | FIXED | lang/python27: Update to 2.7.15 (bugfix & security update) | 2018-05-26 |
| 245776 | Ports & Packages | Individual Port(s) | wen | Closed | FIXED | lang/python27: Update to 2.7.18 (Fixes vulnerability) | 2020-05-15 |
| 270767 | Ports & Packages | Individual Port(s) | python | Closed | FIXED | lang/python311 backport 3.11.3 to quarterly | 2023-06-16 |
| 210539 | Ports & Packages | Individual Port(s) | brnrd | Closed | FIXED | lang/python33: HTTP Header Injection in Python urllib (CVE-2016-5699) | 2016-11-30 |
| 210325 | Ports & Packages | Individual Port(s) | rm | Closed | FIXED | lang/python35, lang/python34, lang/python33, lang/python27: Backport patches for CVE-2016-5636 | 2016-06-19 |
| 249187 | Ports & Packages | Individual Port(s) | fluffy | Closed | FIXED | lang/python35: Update to 3.5.10 | 2020-09-25 |
| 241586 | Ports & Packages | Individual Port(s) | wen | Closed | FIXED | lang/python35: Update to 3.5.9 (python.org shipped broken 3.5.8, tread carefully) | 2020-03-15 |
| 246808 | Ports & Packages | Individual Port(s) | koobs | Closed | DUPLICATE | lang/python36: Update to 3.6.10 (and backport security fixes) | 2020-06-15 |
| 246738 | Ports & Packages | Individual Port(s) | dbaio | Closed | FIXED | lang/python36: Update to 3.6.11 | 2020-06-13 |
| 258518 | Ports & Packages | Individual Port(s) | kai | Closed | FIXED | lang/python36: Update to 3.6.15 | 2021-09-19 |
| 238952 | Ports & Packages | Individual Port(s) | wen | Closed | FIXED | lang/python36: Update to 3.6.9 | 2019-07-23 |
| 258195 | Ports & Packages | Individual Port(s) | wen | In Progress | --- | lang/python38: Update to 3.8.12 | 2021-09-19 |
| 266286 | Ports & Packages | Individual Port(s) | wen | Closed | FIXED | lang/python39: Update to 3.9.14 | 2022-09-19 |
| 267080 | Ports & Packages | Individual Port(s) | wen | In Progress | --- | lang/python39: Update to 3.9.15 | 2022-12-14 |
| 268244 | Ports & Packages | Individual Port(s) | wen | Closed | FIXED | lang/python39: Update to 3.9.16 | 2022-12-22 |
| 254783 | Ports & Packages | Individual Port(s) | wen | Closed | FIXED | lang/python39: Update to 3.9.4 | 2021-04-20 |
| 232435 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | lang/ruby24: Update to 2.4.5 (Fixes multiple vulnerabilities: CVE-2018-1639[56]) | 2018-10-24 |
| 240983 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | lang/ruby24: Update to 2.4.9 | 2019-10-02 |
| 232431 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | lang/ruby25: Update to 2.5.3 (Fixes multiple vulnerabilities: CVE-2018-1639[56]) | 2018-10-24 |
| 240984 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | lang/ruby25: Update to 2.5.7 | 2019-10-02 |
| 240985 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | lang/ruby26: Update to 2.6.5 | 2019-10-02 |
| 238319 | Base System | kern | bugs | Open | --- | login: Extend and add features to session (struct) | 2019-06-04 |
| 225585 | Ports & Packages | Individual Port(s) | adamw | Closed | FIXED | mail/dovecot: FOLLOW UP: Fix memory leak in auth_client_request_abort() | 2018-02-01 |
| 225446 | Ports & Packages | Individual Port(s) | zeising | Closed | FIXED | mail/dovecot: Fix memory leak in auth_client_request_abort() (CVE-2017-15132) | 2018-01-31 |
| 248640 | Ports & Packages | Individual Port(s) | ler | Closed | FIXED | mail/dovecot: Update to 2.3.11.3 | 2020-08-15 |
| 252415 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | mail/dovecot: Update to 2.3.13 (security) | 2021-01-06 |
| 254007 | Ports & Packages | Individual Port(s) | ler | Closed | FIXED | mail/dovecot: Update to 2.3.14 | 2021-07-03 |
| 256860 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | mail/dovecot: Update to 2.3.15 | 2021-07-04 |
| 235523 | Ports & Packages | Individual Port(s) | ler | Closed | FIXED | mail/dovecot: Update to 2.3.4.1 (CVE-2019-3814) | 2019-02-05 |
| 240174 | Ports & Packages | Individual Port(s) | ler | Closed | FIXED | mail/dovecot: Update to 2.3.7.2 (Fixes CVE-2019-11500) | 2019-08-29 |
| 239441 | Ports & Packages | Individual Port(s) | vsevolod | Closed | FIXED | mail/exim: Update to 4.92.1 which fixes CVE-2019-13917 | 2019-07-26 |
| 240362 | Ports & Packages | Individual Port(s) | vsevolod | Closed | FIXED | mail/exim: Update to 4.92.2 (Fixes CVE-2019-15846) | 2019-09-06 |
| 274235 | Ports & Packages | Individual Port(s) | fluffy | Closed | FIXED | mail/exim: update 4.96 -> 4.96.1 to fix several CVEs | 2023-10-03 |
| 257480 | Ports & Packages | Individual Port(s) | mandree | Closed | FIXED | mail/fetchmail: Update to 6.4.20 (security fix) | 2021-07-29 |
| 258071 | Ports & Packages | Individual Port(s) | mandree | Closed | FIXED | mail/fetchmail: security update to 6.4.22.rc2 - CVE-2021-39272 | 2021-08-29 |
| 267049 | Ports & Packages | Individual Port(s) | horde | Closed | FIXED | mail/horde-imp: address ZDI-20-1051 / ZDI-CAN-10436 | 2022-10-28 |
| 264523 | Ports & Packages | Individual Port(s) | horde | Closed | FIXED | mail/horde-turba: Update to 4.2.29 (4.2.26 fixes RCE security vulnerability: CVE-2022-30287) | 2022-10-14 |
| 203461 | Ports & Packages | Individual Port(s) | junovitch | Closed | FIXED | mail/james: security/vuxml: update to 2.3.2.1 (arbitrary system command execution for servers) | 2015-10-05 |
| 259938 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | mail/libspf2: Update to 1.2.11 (Fixes CVE-2021-20314) | 2022-05-13 |
| 274215 | Ports & Packages | Individual Port(s) | sunpoet | Closed | FIXED | mail/libspf2: add fix for CVE-2023-42118 | 2023-10-05 |
| 212378 | Ports & Packages | Individual Port(s) | mandree | Closed | FIXED | mail/mailman - missing vuxml entry | 2016-09-06 |
| 247400 | Ports & Packages | Individual Port(s) | zeising | Closed | FIXED | mail/mutt: Update to 1.14.5 | 2020-07-15 |
| 251277 | Ports & Packages | Individual Port(s) | fernape | Closed | FIXED | mail/mutt: Update to 2.0.2 | 2020-11-23 |
| 257582 | Ports & Packages | Individual Port(s) | ports-bugs | Closed | Overcome By Eve | mail/opendmarc: Update to 1.4.1.1; Add ARC support | 2021-12-25 |
| 240505 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | mail/opendmarc: fix multiple addresses in From vulnerability | 2021-12-30 |
| 260594 | Ports & Packages | Individual Port(s) | mikael | Closed | FIXED | mail/opendmarc: update to 1.4.2 | 2021-12-30 |
| 243686 | Ports & Packages | Individual Port(s) | fluffy | Closed | FIXED | mail/opensmtpd: Update to v6.6.2p1 (Fixes critical LPE / RCE vulnerability) | 2020-01-31 |
| 204500 | Ports & Packages | Individual Port(s) | ports-bugs | Closed | FIXED | mail/phpmailer: Update to 5.2.14, Take MAINTAINER'ship, Add VuXML entry. | 2015-12-03 |
| 215576 | Ports & Packages | Individual Port(s) | tz | Closed | FIXED | mail/phpmailer: Update to 5.2.18 | 2017-01-03 |
| 233420 | Ports & Packages | Individual Port(s) | joneum | Closed | FIXED | mail/phpmailer: Update to 5.2.27 (Fixes CVE-2018-19296) | 2018-11-25 |
| 209841 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | mail/roundcube: 1.1.5 vulnerable to CVE-2016-5103 | 2016-06-10 |
| 274520 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | mail/roundcube: Security update to 1.6.4 | 2023-11-10 |
| 276491 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | mail/roundcube: Security update to 1.6.6 | 2024-01-24 |
| 205779 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | mail/roundcube: Update to 1.1.4 | 2016-01-02 |
| 214925 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | mail/roundcube: Update to 1.2.3 (Fixes security vulnerability) | 2016-12-14 |
| 219789 | Ports & Packages | Individual Port(s) | feld | Closed | FIXED | mail/roundcube: Update to 1.2.5 (security fix) | 2017-06-09 |
| 223547 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | mail/roundcube: Update to 1.3.3, fixes security vulnerability (CVE-2017-16651) | 2017-11-11 |
| 227476 | Ports & Packages | Individual Port(s) | ale | Closed | FIXED | mail/roundcube: Update to 1.3.6 (a security update for CVE-2018-9846 | 2018-04-14 |
| 219801 | Ports & Packages | Individual Port(s) | swills | Closed | FIXED | mail/squirrelmail, mail/squirrelmail-translations: Update to 20170705 (Also fixes CVE-2017-7692) | 2017-08-25 |
| 255455 | Ports & Packages | Individual Port(s) | nc | Closed | FIXED | mail/sympa: security upgrade to 6.2.62 | 2021-04-28 |
| 245672 | Ports & Packages | Individual Port(s) | pi | Closed | FIXED | mail/sympa: update to 6.2.54 - security fix | 2020-05-27 |
| 213141 | Ports & Packages | Individual Port(s) | gecko | Closed | FIXED | mail/thunderbird: 45.4.0 | 2020-10-02 |
| 214631 | Ports & Packages | Individual Port(s) | cmt | Closed | FIXED | mail/thunderbird: 45.5.0 (with enigmail 1.9.6.1) | 2016-11-22 |
| 210749 | Ports & Packages | Individual Port(s) | cmt | Closed | FIXED | mail/thunderbird: update to 45.2.0 | 2016-07-09 |
| 212463 | Ports & Packages | Individual Port(s) | cmt | Closed | FIXED | mail/thunderbird: update to 45.3.0 | 2016-09-10 |
| 215733 | Ports & Packages | Individual Port(s) | cmt | Closed | FIXED | mail/thunderbird: update to 45.6.0 | 2017-01-06 |
| 216584 | Ports & Packages | Individual Port(s) | cmt | Closed | FIXED | mail/thunderbird: update to 45.7.1 | 2017-03-03 |
| 219006 | Ports & Packages | Individual Port(s) | cmt | Closed | FIXED | mail/thunderbird: update to 52.1.0 | 2017-05-02 |
| 226892 | Ports & Packages | Individual Port(s) | gecko | Closed | FIXED | mail/thunderbird: update to 52.7.0 | 2018-03-27 |
| 229452 | Ports & Packages | Individual Port(s) | cmt | Closed | FIXED | mail/thunderbird: update to 52.9.0 | 2018-07-09 |
| 232796 | Ports & Packages | Individual Port(s) | cmt | Closed | FIXED | mail/thunderbird: update to 60.3.0 | 2018-10-30 |
| 259637 | Ports & Packages | Individual Port(s) | wen | Closed | FIXED | math/py-numpy: Update to 1.22.4 | 2022-06-23 |
| 238638 | Base System | kern | bugs | Open | --- | mfi: Remove unnecessary pointer printing in mfi.c | 2019-06-17 |
| 207174 | Ports & Packages | Individual Port(s) | danilo | Closed | FIXED | misc/xdelta3: update to 3.0.11 (address CVE-2014-9765 in < 3.0.9) | 2016-03-02 |
| 214488 | Base System | kern | kib | Closed | FIXED | mqueuefs mq_setattr() leaks stack memory | 2016-12-04 |
| 206282 | Ports & Packages | Individual Port(s) | riggs | Closed | FIXED | multimedia/ffmpeg zero-day vulnerability HLS | 2016-01-17 |
