Posts in category deadsimple BSD Security Advisories and Announcements
[FreeBSD-Announce] FreeBSD Quarterly ...
FreeBSD Quarterly Status Report - 2nd Quarter 2017
FreeBSD continues to defy the rumors of its demise.
Much of the development work done this quarter was not particularly
visible, especially the effort needed to ensure the upcoming 11.1
release has as few regressions as possible. Planning is also well under
way for the 10.4 m [...]
LibreSSL 2.6.2 Released
We have released LibreSSL 2.6.2, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon. This is the third
development release from the 2.6 series, which will eventually be part of
OpenBSD 6.2. It includes the following fixes:
* Provide a useful error with libtls if there are no OCSP URLs in a
peer certifica [...]
OpenBSD Errata: September 22nd, 2017 ...
Errata patches for perl have been released for OpenBSD 6.0 and 6.1.
A buffer over-read and heap overflow in perl\'s regexp may result in
a crash or memory leak.
Binary updates for the amd64 and i386 platforms are available via the
syspatch utility. Source code patches can be found on the respective
errata pages:
https://www.openbsd.org/e [...]
nyftp.netbsd.org down for datacenter ...
NetBSD users and developers,
NetBSD\'s New York build cluster and associated services will be offline
beginning Monday, September 18, 2017, for a period of about two weeks.
This means that, through early October 2017, our daily builds of NetBSD
and pkgsrc will not be available.
NetBSD\'s cluster runs in space generously made available by n [...]
NetBSD Security Advisory 2017-004: bu...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
NetBSD Security Advisory 2017-004
=================================
Topic: buffer overflow via cmap for 4 graphics drivers
Version: NetBSD-current: source prior to June 13th
NetBSD 8.0_BETA: affected
NetBSD 7.1: affected
NetBSD 7.0 - 7.0.2: affected
NetBSD 6.1 - 6.1.5: affected
[...]
NetBSD Security Advisory 2017-006: Vn...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
NetBSD Security Advisory 2017-006
=================================
Topic: Vnode reference leak in the openat system call
Version: NetBSD-current: source prior to Sun, July 9th 2017
NetBSD 8.0 beta: affected
NetBSD 7.1: affected
NetBSD 7.0 - 7.0.2: affected
NetBSD 6.1 - 6.1.4: n [...]
NetBSD Security Advisory 2017-005: x8...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
NetBSD Security Advisory 2017-005
=================================
Topic: x86: vulnerabilities in context handling
Version: NetBSD-current: source prior to Sun, Jul 1st 2017
NetBSD 7.1: affected
NetBSD 7.0 - 7.0.2: affected
NetBSD 6.1 - 6.1.4: affected
NetBSD 6.0 - 6.0.5: affec [...]
[FreeBSD-Announce] pass for OpenZFS D...
Hello,
The FreeBSD Foundation has an extra pass to attend the OpenZFS Developer Summit taking place in San Francisco, CA, Oct. 24-25, 2017.
http://open-zfs.org/wiki/OpenZFS_Developer_Summit
If you’re interested in using this pass, please email info at freebsdfoundation dot org.
Thanks,
Anne
Anne Dickison
Marketing Director
FreeBSD Founda [...]
LibreSSL 2.6.1 released
We have released LibreSSL 2.6.1, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon. This is the second
development release from the 2.6 series, which will eventually be part of
OpenBSD 6.2. It includes the following changes:
* Added a \"-T tlscompat\" option to nc(1), which enables the use of all
TLS prot [...]
OpenBSD Errata: August 30th, 2017 (ne...
Errata patches for the wireless stack have been released for OpenBSD 6.1
and 6.0.
State transition errors could cause reinstallation of old WPA keys.
Binary updates for the amd64 and i386 platforms are available via the
syspatch utility. Source code patches can be found on the respective
errata pages:
https://www.openbsd.org/errata60.htm [...]
OpenBSD Errata: August 26th, 2017 (sm...
Errata patches for smap have been released for OpenBSD 6.1 and 6.0.
SMAP enforcement could be bypassed by userland code.
Binary updates for the amd64 and i386 platforms are available via the
syspatch utility. Source code patches can be found on the respective
errata pages:
https://www.openbsd.org/errata60.html
https://www.openbsd.org/e [...]
[FreeBSD-Announce] FreeBSD Errata Not...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
=============================================================================
FreeBSD-EN-17:08.pf Errata Notice
The FreeBSD Project
Topic: pf(4) housekeeping thread causes kernel pani [...]
[FreeBSD-Announce] FreeBSD Security A...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
=============================================================================
FreeBSD-SA-17:06.openssh Security Advisory
The FreeBSD Project
Topic: OpenSSH Denial of Service vulnerability
Cat [...]
[FreeBSD-Announce] FreeBSD Errata Not...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
=============================================================================
FreeBSD-EN-17:07.vnet Errata Notice
The FreeBSD Project
Topic: VNET kernel panic with asynchronous I/O
Cat [...]
OpenBSD Errata: August 3rd, 2017 (ker...
Errata patches for a number of kernel issues have been released for
OpenBSD 6.1 and 6.0.
A SIGIO-related use-after-free can occur in two drivers.
A missing length check in sendsyslog() may result in a kernel panic.
An out-of-bound read in vfs_getcwd_scandir() (mainly used for FUSE)
may result in a kernel panic or info leak.
An alignment i [...]
[FreeBSD-Announce] FreeBSD 11.1-RELEA...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
FreeBSD 11.1-RELEASE Announcement
The FreeBSD Release Engineering Team is pleased to announce the
availability of FreeBSD 11.1-RELEASE. This is the second release of the
stable/11 branch.
Some of the highlights:
* Clang, LLVM, LLD, LLDB, and libc++ hav [...]
nyftp.netbsd.org outage 2017-07-24 th...
Due to urgent construction, nyftp.netbsd.org and other NetBSD resources
hosted at Columbia University will be offline beginning mid-day (New York
time) today, the 24th of July, and will come back online some time late in
the day tomorrow, the 25th.
[Security-announce] pfSense-SA-17_06....
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
=============================================================================
pfSense-SA-17_06.webgui Security Advisory
pfSense
Topic: Brute force login protection weakness in the [...]
[Security-announce] pfSense-SA-17_05....
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
=============================================================================
pfSense-SA-17_05.webgui Security Advisory
pfSense
Topic: Multiple XSS vulnerabilities in the WebGUI
[...]
OpenNTPD 6.1p1, 6.2p1 released
We have made two new portable OpenNTPD releases today. These should be
arriving soon in the OpenNTPD directory of an OpenBSD mirror near you.
OpenNTPD 6.1p1 represents the version shipped with OpenBSD 6.1. It
provides a number of new features and reliability improvements.
OpenNTPD 6.2p1 is the first development snapshot from what will becom [...]
