https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:41:38 +0000 https://vulnerability.circl.lu/vuln/cve-2026-4748 <p><strong>Affected:</strong> FreeBSD</p> <p>A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) involved to be silently dropped as duplicates. Only the first of such rules is actually loaded into pf. Ranges expressed using the address[/mask-bits] syntax were not affected.</p> <p>Some keywords representing actions taken on a packet-matching rule, such as &#39;log&#39;, &#39;return tll&#39;, or &#39;dnpipe&#39;, may suffer from the same issue. It is unlikely that users have such configurations, as these rules would always be redundant.</p> <p>Affected rules are silently ignored, which can lead to unexpected behaviour including over- and underblocking.</p> <p><strong>Affected:</strong> FreeBSD</p> <p>A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) involved to be silently dropped as duplicates. Only the first of such rules is actually loaded into pf. Ranges expressed using the address[/mask-bits] syntax were not affected.</p> <p>Some keywords representing actions taken on a packet-matching rule, such as &#39;log&#39;, &#39;return tll&#39;, or &#39;dnpipe&#39;, may suffer from the same issue. It is unlikely that users have such configurations, as these rules would always be redundant.</p> <p>Affected rules are silently ignored, which can lead to unexpected behaviour including over- and underblocking.</p> https://vulnerability.circl.lu/vuln/cve-2026-4748