git: 2355679549 - main - Add security advisories affecting 14.4R, 14.5R and 15.1R
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 15 Oct 2026 03:21:44 UTC
The branch main has been updated by philip:
URL: https://cgit.FreeBSD.org/doc/commit/?id=2355679549f9f9566fe6586ccf1d7f35928b0eb0
commit 2355679549f9f9566fe6586ccf1d7f35928b0eb0
Author: Philip Paeps <philip@FreeBSD.org>
AuthorDate: 2026-10-15 03:18:05 +0000
Commit: Philip Paeps <philip@FreeBSD.org>
CommitDate: 2026-10-15 03:18:05 +0000
Add security advisories affecting 14.4R, 14.5R and 15.1R
FreeBSD-SA-26:70.tcp affects 15.1R
FreeBSD-SA-26:71.sound affects all supported releases
FreeBSD-SA-26:72.bhyve affects all supported releases
---
website/content/en/releases/14.4R/errata.adoc | 2 ++
website/content/en/releases/14.5R/errata.adoc | 2 ++
website/content/en/releases/15.1R/errata.adoc | 3 +++
3 files changed, 7 insertions(+)
diff --git a/website/content/en/releases/14.4R/errata.adoc b/website/content/en/releases/14.4R/errata.adoc
index d8a3cd8885..09d3edecf8 100644
--- a/website/content/en/releases/14.4R/errata.adoc
+++ b/website/content/en/releases/14.4R/errata.adoc
@@ -100,6 +100,8 @@ For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/
|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:67.ktls.asc[FreeBSD-SA-26:67.ktls] |29 September 2026 |Remote DoS via receive-side kernel TLS
|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:68.openssl.asc[FreeBSD-SA-26:68.openssl] |29 September 2026 |Out-of-bounds read in OpenSSL DTLS retransmission
|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:69.udp.asc[FreeBSD-SA-26:69.udp] |29 September 2026 |IPv6 UDP sendto(2) bypasses jail loopback restriction
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:71.sound.asc[FreeBSD-SA-26:71.sound] |14 October 2026 |TOCTOU race between sound(4) buffer resizing and mmap
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:72.bhyve.asc[FreeBSD-SA-26:72.bhyve] |14 October 2026 |Multiple vulnerabilities in bhyve device models
|===
[[errata]]
diff --git a/website/content/en/releases/14.5R/errata.adoc b/website/content/en/releases/14.5R/errata.adoc
index 6af81c7872..a747716338 100644
--- a/website/content/en/releases/14.5R/errata.adoc
+++ b/website/content/en/releases/14.5R/errata.adoc
@@ -49,6 +49,8 @@ For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/
|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:67.ktls.asc[FreeBSD-SA-26:67.ktls] |29 September 2026 |Remote DoS via receive-side kernel TLS
|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:68.openssl.asc[FreeBSD-SA-26:68.openssl] |29 September 2026 |Out-of-bounds read in OpenSSL DTLS retransmission
|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:69.udp.asc[FreeBSD-SA-26:69.udp] |29 September 2026 |IPv6 UDP sendto(2) bypasses jail loopback restriction
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:71.sound.asc[FreeBSD-SA-26:71.sound] |14 October 2026 |TOCTOU race between sound(4) buffer resizing and mmap
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:72.bhyve.asc[FreeBSD-SA-26:72.bhyve] |14 October 2026 |Multiple vulnerabilities in bhyve device models
|===
[[errata]]
diff --git a/website/content/en/releases/15.1R/errata.adoc b/website/content/en/releases/15.1R/errata.adoc
index edff985fe4..c5703429e7 100644
--- a/website/content/en/releases/15.1R/errata.adoc
+++ b/website/content/en/releases/15.1R/errata.adoc
@@ -75,6 +75,9 @@ For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/
|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:67.ktls.asc[FreeBSD-SA-26:67.ktls] |29 September 2026 |Remote DoS via receive-side kernel TLS
|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:68.openssl.asc[FreeBSD-SA-26:68.openssl] |29 September 2026 |Out-of-bounds read in OpenSSL DTLS retransmission
|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:69.udp.asc[FreeBSD-SA-26:69.udp] |29 September 2026 |IPv6 UDP sendto(2) bypasses jail loopback restriction
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:70.tcp.asc[FreeBSD-SA-26:70.tcp] |14 October 2026 |Remotely triggerable buffer overflow in tcp_rack
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:71.sound.asc[FreeBSD-SA-26:71.sound] |14 October 2026 |TOCTOU race between sound(4) buffer resizing and mmap
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:72.bhyve.asc[FreeBSD-SA-26:72.bhyve] |14 October 2026 |Multiple vulnerabilities in bhyve device models
|===
[[errata]]