FreeBSD-SA-22:14.heimdal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:14.heimdal Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in Heimdal REVISED Category: contrib Module: heimdal Announced: 2022-11-15...

FreeBSD-SA-22:13.zlib

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:13.zlib Security Advisory The FreeBSD Project Topic: zlib heap buffer overflow Category: contrib Module: zlib Announced: 2022-08-30 Credits: Evgeny Legerov o...

FreeBSD-SA-22:12.lib9p

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:12.lib9p Security Advisory The FreeBSD Project Topic: Missing bounds check in 9p message handling Category: contrib Module: lib9p Announced: 2022-08-09...

FreeBSD-SA-22:09.elf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:09.elf Security Advisory The FreeBSD Project Topic: Out of bound read in elfnoteprpsinfo Category: core Module: kernel Announced: 2022-08-09 Credits: Josef...

FreeBSD-SA-22:11.vm

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:11.vm Security Advisory The FreeBSD Project Topic: Memory disclosure by stale virtual memory mapping Category: core Module: vm Announced: 2022-08-09 Credits:...

FreeBSD-SA-22:10.aio

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:10.aio Security Advisory The FreeBSD Project Topic: AIO credential reference count leak Category: core Module: kernel Announced: 2022-08-09 Credits: Chris J-...

FreeBSD-SA-22:05.bhyve

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:05.bhyve Security Advisory The FreeBSD Project Topic: Bhyve e82545 device emulation out-of-bounds write Category: core Module: bhyve Announced: 2022-04-06...

FreeBSD-SA-22:06.ioctl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:06.ioctl Security Advisory The FreeBSD Project Topic: mpr/mps/mpt driver ioctl heap out-of-bounds write Category: core Module: mpr, mps, mpt Announced:...

FreeBSD-SA-22:04.netmap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:04.netmap Security Advisory The FreeBSD Project Topic: Potential jail escape vulnerabilities in netmap Category: core Module: netmap Announced: 2022-04-06...

FreeBSD-SA-22:07.wifi_meshid

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:07.wifimeshid Security Advisory The FreeBSD Project Topic: 802.11 heap buffer overflow Category: core Module: net80211 Announced: 2022-04-06 Credits: m00nbsd...

FreeBSD-SA-22:08.zlib

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:08.zlib Security Advisory The FreeBSD Project Topic: zlib compression out-of-bounds write Category: zlib Module: contrib Announced: 2022-04-06 Credits: Danil...

FreeBSD-SA-22:03.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:03.openssl Security Advisory The FreeBSD Project Topic: OpenSSL certificate parsing infinite loop Category: contrib Module: openssl Announced: 2022-03-15...

FreeBSD-SA-22:02.wifi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:02.wifi Security Advisory The FreeBSD Project Topic: Multiple WiFi issues Category: core Module: net80211 Announced: 2022-03-15 Affects: FreeBSD 12.x and...

FreeBSD-SA-22:01.vt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:01.vt Security Advisory The FreeBSD Project Topic: vt console buffer overflow Category: kernel Module: vt Announced: 2022-01-11 Credits: Oleg Bulyzhin...

FreeBSD-SA-21:14.ggatec

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:14.ggatec Security Advisory The FreeBSD Project Topic: Remote code execution in ggatec8 Category: core Module: ggatec Announced: 2021-08-24 Credits: Johannes...

FreeBSD-SA-21:17.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:17.openssl Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenSSL Category: contrib Module: openssl Announced: 2021-08-24 Affects:...

FreeBSD-SA-21:16.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:16.openssl Security Advisory The FreeBSD Project Topic: Multiple OpenSSL vulnerabilities Category: contrib Module: openssl Announced: 2021-08-24 Credits: See...

FreeBSD-SA-21:13.bhyve

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:13.bhyve Security Advisory The FreeBSD Project Topic: Missing error handling in bhyve8 device models Category: core Module: bhyve Announced: 2021-08-24...

FreeBSD-SA-21:15.libfetch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:15.libfetch Security Advisory The FreeBSD Project Topic: libfetch out of bounds read Category: core Module: libfetch Announced: 2021-08-24 Credits: Samanta...

FreeBSD-SA-21:12.libradius

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:12.libradius Security Advisory The FreeBSD Project Topic: Missing message validation in libradius3 Category: core Module: libradius Announced: 2021-05-26...

FreeBSD-SA-21:11.smap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:11.smap Security Advisory The FreeBSD Project Topic: SMAP bypass Category: core Module: amd64 Announced: 2021-05-26 Credits: I lost my dog if you see him...

FreeBSD-SA-21:10.jail_mount

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:10.jailmount Security Advisory The FreeBSD Project Topic: jail escape possible by mounting over jail root Category: core Module: jail Announced: 2021-04-06...

FreeBSD-SA-21:09.accept_filter

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:09.acceptfilter Security Advisory The FreeBSD Project Topic: double free in acceptfilter9 socket configuration interface Category: core Module: acceptfilter...

FreeBSD-SA-21:08.vm

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:08.vm Security Advisory The FreeBSD Project Topic: Memory disclosure by stale virtual memory mapping Category: core Module: vm Announced: 2021-04-06 Credits:...

FreeBSD-SA-21:07.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:07.openssl Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenSSL Category: contrib Module: openssl Announced: 2021-03-25 Affects:...

FreeBSD-SA-21:06.xen

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:06.xen Security Advisory The FreeBSD Project Topic: Xen grant mapping error handling issues Category: contrib Module: xen Announced: 2021-02-24 Credits: See...

FreeBSD-SA-21:04.jail_remove

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:04.jailremove Security Advisory The FreeBSD Project Topic: jailremove2 fails to kill all jailed processes Category: core Module: jail Announced: 2021-02-24...

FreeBSD-SA-21:03.pam_login_access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:03.pamloginaccess Security Advisory The FreeBSD Project Topic: login.access fails to apply rules Category: core Module: pamloginaccess Announced: 2021-02-24...

FreeBSD-SA-21:05.jail_chdir

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:05.jailchdir Security Advisory The FreeBSD Project Topic: jailattach2 relies on the caller to change the cwd Category: core Module: jail Announced: 2021-02-2...

FreeBSD-SA-21:02.xenoom

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:02.xenoom Security Advisory The FreeBSD Project Topic: Xen guests can triger backend Out Of Memory Category: contrib Module: Xen Announced: 2021-01-29...

FreeBSD-SA-21:01.fsdisclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:01.fsdisclosure Security Advisory The FreeBSD Project Topic: Uninitialized kernel stack leaks in several file systems Category: core Module: fs Announced:...

FreeBSD-SA-20:33.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:33.openssl Security Advisory The FreeBSD Project Topic: OpenSSL NULL pointer de-reference Category: contrib Module: openssl Announced: 2020-12-08 Affects: Al...

FreeBSD-SA-20:32.rtsold

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:32.rtsold Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in rtsold Category: core Module: rtsold Announced: 2020-12-01 Credits:...

FreeBSD-SA-20:31.icmp6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:31.icmp6 Security Advisory The FreeBSD Project Topic: ICMPv6 use-after-free in error message handling Category: core Module: icmp6 Announced: 2020-12-01...

FreeBSD-SA-20:28.bhyve_vmcs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:28.bhyvevmcs Security Advisory The FreeBSD Project Topic: bhyve privilege escalation via VMCS access Category: core Module: bhyve Announced: 2020-09-15...

FreeBSD-SA-20:30.ftpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:30.ftpd Security Advisory The FreeBSD Project Topic: ftpd privilege escalation via ftpchroot feature Category: core Module: ftpd Announced: 2020-09-15...

FreeBSD-SA-20:29.bhyve_svm

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:29.bhyvesvm Security Advisory The FreeBSD Project Topic: bhyve SVM guest escape Category: core Module: bhyve Announced: 2020-09-15 Credits: Maxime Villard...

FreeBSD-SA-20:27.ure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:27.ure Security Advisory The FreeBSD Project Topic: ure device driver susceptible to packet-in-packet attack Category: core Module: ure Announced: 2020-09-15...

FreeBSD-SA-20:26.dhclient

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:26.dhclient Security Advisory The FreeBSD Project Topic: dhclient heap overflow Category: core Module: dhclient Announced: 2020-09-02 Credits: Shlomi Oberman...

FreeBSD-SA-20:24.ipv6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:24.ipv6 Security Advisory The FreeBSD Project Topic: IPv6 Hop-by-Hop options use-after-free bug Category: core Module: kernel Announced: 2020-09-02 Affects:...

FreeBSD-SA-20:25.sctp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:25.sctp Security Advisory The FreeBSD Project Topic: SCTP socket use-after-free bug Category: core Module: kernel Announced: 2020-09-02 Credits:...

FreeBSD-SA-20:23.sendmsg

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:23.sendmsg Security Advisory The FreeBSD Project Topic: sendmsg2 privilege escalation Category: core Module: kernel compat32 Announced: 2020-08-05 Credits:...

FreeBSD-SA-20:21.usb_net

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:21.usbnet Security Advisory The FreeBSD Project Topic: Potential memory corruption in USB network device drivers Category: core Module: kernel Announced:...

FreeBSD-SA-20:22.sqlite

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:22.sqlite Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in sqlite3 Category: contrib Module: sqlite3 Announced: 2020-08-05 Affects:...

FreeBSD-SA-20:20.ipv6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:20.ipv6 Security Advisory The FreeBSD Project Topic: IPv6 socket option race condition and use after free Category: core Module: network Announced: 2020-07-0...

FreeBSD-SA-20:18.posix_spawnp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:18.posixspawnp Security Advisory The FreeBSD Project Topic: posixspawnp3 buffer overflow Category: core Module: libc Announced: 2020-07-08 Credits: Andrew...

FreeBSD-SA-20:19.unbound

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:19.unbound Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in unbound Category: contrib Module: unbound Announced: 2020-07-08 Affects:...

FreeBSD-SA-20:17.usb

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:17.usb Security Advisory The FreeBSD Project Topic: USB HID descriptor parsing error Category: core Module: kernel Announced: 2020-06-09 Credits: Andy Nguyen...

FreeBSD-SA-20:16.cryptodev

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:16.cryptodev Security Advisory The FreeBSD Project Topic: Insufficient cryptodev MAC key length check Category: core Module: cryptodev Announced: 2020-05-12...

FreeBSD-SA-20:14.sctp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:14.sctp Security Advisory The FreeBSD Project Topic: Improper checking in SCTP-AUTH shared key update Category: core Module: kernel Announced: 2020-05-12...