[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-19:15.mqueuefs

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA512

=============================================================================
FreeBSD-SA-19:15.mqueuefs Security Advisory
The FreeBSD Project

Topic: Reference count overflow in mqueue filesystem

Category: core
Module: kernel
Announced: 2019-07-24
Credits: Mateusz Guzik
Affects: All supported versions of FreeBSD.
Corrected: 2019-07-23 21:12:32 UTC (stable/12, 12.0-STABLE)
2019-07-24 12:55:16 UTC (releng/12.0, 12.0-RELEASE-p8)
2019-07-23 21:15:28 UTC (stable/11, 11.2-STABLE)
2019-07-24 12:55:16 UTC (releng/11.2, 11.2-RELEASE-p12)
2019-07-24 12:55:16 UTC (releng/11.3,

(Read more...)

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-19:14.freebsd32

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA512

=============================================================================
FreeBSD-SA-19:14.freebsd32 Security Advisory
The FreeBSD Project

Topic: Kernel memory disclosure in freebsd32_ioctl

Category: core
Module: kernel
Announced: 2019-07-24
Credits: Ilja van Sprundel, IOActive
Affects: FreeBSD 11.2 and FreeBSD 11.3
Corrected: 2019-07-22 18:14:34 UTC (stable/11, 11.2-STABLE)
2019-07-24 12:54:10 UTC (releng/11.2, 11.2-RELEASE-p12)
2019-07-24 12:54:10 UTC (releng/11.3, 11.3-RELEASE-p1)
CVE Name: CVE-2019-5605

For general information regarding FreeBSD

(Read more...)

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-19:13.pts

—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA512

=============================================================================
FreeBSD-SA-19:13.pts Security Advisory
The FreeBSD Project

Topic: pts(4) write-after-free

Category: core
Module: kernel
Announced: 2019-07-24
Credits: syzkaller
Affects: All supported versions of FreeBSD.
Corrected: 2019-07-07 14:19:46 UTC (stable/12, 12.0-STABLE)
2019-07-24 12:53:06 UTC (releng/12.0, 12.0-RELEASE-p8)
2019-07-07 14:20:14 UTC (stable/11, 11.2-STABLE)
2019-07-24 12:53:06 UTC (releng/11.2, 11.2-RELEASE-p12)
2019-07-24 12:53:06 UTC (releng/11.3, 11.3-RELEASE-p1)
CVE Name: CVE-2019-5606

For

(Read more...)

A small rconfig update

Aaron LI’s fixed a bug in rconfig tag names.  This is minor, but I think rconfig(8) is a very powerful and underappreciated utility, so I point it out whenever possible.

First time dbus reminder

I’ve mentioned dbus and DragonFly a few times; here’s one of those “you will eventually do this” tidbits: if for some reason you are installing it for the first time, remember to start it with the rc script.

Lazy Reading for 2019/07/21

Accidental theme: heavy metal. A literary appreciation of the Olson/Zoneinfo/tz database.  Found while researching tz formats. Buster Keaton: slapstick anarchism.  A continuation of an article I linked before. An Illustrated history of Easter Eggs.  Delightful!  (video, via) crontab converter for different time zones in unix? lowRISC has open source-related job openings. History and effective use …

Continue reading “Lazy Reading

(Read more...)

em, igb updates in DragonFly

If you are running an em(4) or igb(4) device in DragonFly, Sepherosa Ziehau has updated the drivers.  This brings it to Intel driver versions em-7.7.4 and igb-2.5.6.

Lazy Reading for 2019/07/14

Who can recommend a dynamic DNS service?  (I’d like to know from direct experience, not Googling.)  I’ve been using Dyn for years, but they’ve been unintelligibly merged into the Oracle behemoth, and I need to change. Paper Books Can’t Be Shut Off from Afar.  (via) Trajectories for the future of software.  (also via) Chain Letter …

Continue reading “Lazy Reading

(Read more...)

Scriptable audio on BSD

This could be an In Other BSDs item, but it’s worth highlighting: saugns is a “Scriptable AUdio GeNeration System”; a utility for generating sounds – specifically FM modulation, in a way that will make you think “synthesizers!”  There’s a whole language behind it, and the program, as the author, Joel K Pettersson, points out, compiles …

Continue reading “Scriptable audio

(Read more...)

An easier upgrade on DragonFly

You’re probably used to the ‘make buildworld; make buildkernel; make installkernel; etc etc’ dance on each upgrade at this point.  ‘Tse’ has created a script that rolls that all up into a single action.