git: b19cf24325 - main - Add security advisories affecting 14.4R, 14.5R, 15.0R and 15.1R

Go to: [ bottom of page ] [ top of archives ] [ this month ]
From: Philip Paeps <philip_at_FreeBSD.org>
Date: Wed, 30 Sep 2026 10:43:35 UTC
The branch main has been updated by philip:

URL: https://cgit.FreeBSD.org/doc/commit/?id=b19cf24325b472aba120dc94f46b1bc1d9e367df

commit b19cf24325b472aba120dc94f46b1bc1d9e367df
Author:     Philip Paeps <philip@FreeBSD.org>
AuthorDate: 2026-09-30 10:42:43 +0000
Commit:     Philip Paeps <philip@FreeBSD.org>
CommitDate: 2026-09-30 10:42:43 +0000

    Add security advisories affecting 14.4R, 14.5R, 15.0R and 15.1R
    
    FreeBSD-SA-26:64.sysvsem affects all supported releases
    FreeBSD-SA-26:65.kqueue affects 15.1R
    FreeBSD-SA-26:66.jail affects all supported releases
    FreeBSD-SA-26:67.ktls affects all supported releases
    FreeBSD-SA-26:68.openssl affects all supported releases
    FreeBSD-SA-26:69.udp affects all supported releases
    
    While here, note that FreeBSD-SA-26:50.kqueue did not affect 15.0R.
---
 website/content/en/releases/14.4R/errata.adoc | 5 +++++
 website/content/en/releases/14.5R/errata.adoc | 8 +++++---
 website/content/en/releases/15.0R/errata.adoc | 6 +++++-
 website/content/en/releases/15.1R/errata.adoc | 6 ++++++
 4 files changed, 21 insertions(+), 4 deletions(-)

diff --git a/website/content/en/releases/14.4R/errata.adoc b/website/content/en/releases/14.4R/errata.adoc
index 4a291c6ca0..12dbda08bf 100644
--- a/website/content/en/releases/14.4R/errata.adoc
+++ b/website/content/en/releases/14.4R/errata.adoc
@@ -95,6 +95,11 @@ For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:61.openssl.asc[FreeBSD-SA-26:61.openssl] |25 August 2026 |Multiple vulnerabilities in OpenSSL
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:62.tty.asc[FreeBSD-SA-26:62.tty] |25 August 2026 |Kernel use-after-free via tty ioctls
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:63.posixshm.asc[FreeBSD-SA-26:63.posixshm] |25 August 2026 |TOCTOU race in POSIX shared memory large page configuration
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:64.sysvsem.asc[FreeBSD-SA-26:64.sysvsem] |29 September 2026 |Heap out-of-bounds access in semop(2)
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:66.jail.asc[FreeBSD-SA-26:66.jail] |29 September 2026 |Multiple jail filesystem root escapes
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:67.ktls.asc[FreeBSD-SA-26:67.ktls] |29 September 2026 |Remote DoS via receive-side kernel TLS
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:68.openssl.asc[FreeBSD-SA-26:68.openssl] |29 September 2026 |Out-of-bounds read in OpenSSL DTLS retransmission
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:69.udp.asc[FreeBSD-SA-26:69.udp] |29 September 2026 |IPv6 UDP sendto(2) bypasses jail loopback restriction
 |===
 
 [[errata]]
diff --git a/website/content/en/releases/14.5R/errata.adoc b/website/content/en/releases/14.5R/errata.adoc
index c6846990b3..cf113ae72e 100644
--- a/website/content/en/releases/14.5R/errata.adoc
+++ b/website/content/en/releases/14.5R/errata.adoc
@@ -44,9 +44,11 @@ For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/
 [width="100%",cols="40%,30%,30%",options="header",]
 |===
 |Advisory |Date |Topic
-
-|No advisories.||
-
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:64.sysvsem.asc[FreeBSD-SA-26:64.sysvsem] |29 September 2026 |Heap out-of-bounds access in semop(2)
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:66.jail.asc[FreeBSD-SA-26:66.jail] |29 September 2026 |Multiple jail filesystem root escapes
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:67.ktls.asc[FreeBSD-SA-26:67.ktls] |29 September 2026 |Remote DoS via receive-side kernel TLS
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:68.openssl.asc[FreeBSD-SA-26:68.openssl] |29 September 2026 |Out-of-bounds read in OpenSSL DTLS retransmission
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:69.udp.asc[FreeBSD-SA-26:69.udp] |29 September 2026 |IPv6 UDP sendto(2) bypasses jail loopback restriction
 |===
 
 [[errata]]
diff --git a/website/content/en/releases/15.0R/errata.adoc b/website/content/en/releases/15.0R/errata.adoc
index 62836781e4..df614a5589 100644
--- a/website/content/en/releases/15.0R/errata.adoc
+++ b/website/content/en/releases/15.0R/errata.adoc
@@ -92,7 +92,6 @@ For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:47.linux.asc[FreeBSD-SA-26:47.linux] |30 June 2026 |Kernel stack disclosure in Linux compatibility layer
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:48.compat32.asc[FreeBSD-SA-26:48.compat32] |30 June 2026 |Kernel stack disclosure in 32-bit compatibility support
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:49.iconv.asc[FreeBSD-SA-26:49.iconv] |30 June 2026 |Multiple vulnerabilities in iconv(3)
-|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:50.kqueue.asc[FreeBSD-SA-26:50.kqueue] |UNKNOWN |Use-after-free in kqueue copy-on-fork
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:51.ktimer.asc[FreeBSD-SA-26:51.ktimer] |29 July 2026 |Kernel stack disclosure via timer_settime(2)
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:52.if_wg.asc[FreeBSD-SA-26:52.if_wg] |29 July 2026 |Missing MAC validation in wg(4) packet decryption
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:53.ktrace.asc[FreeBSD-SA-26:53.ktrace] |29 July 2026 |ktrace(2) privilege incorrectly validated in jails
@@ -106,6 +105,11 @@ For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:61.openssl.asc[FreeBSD-SA-26:61.openssl] |25 August 2026 |Multiple vulnerabilities in OpenSSL
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:62.tty.asc[FreeBSD-SA-26:62.tty] |25 August 2026 |Kernel use-after-free via tty ioctls
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:63.posixshm.asc[FreeBSD-SA-26:63.posixshm] |25 August 2026 |TOCTOU race in POSIX shared memory large page configuration
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:64.sysvsem.asc[FreeBSD-SA-26:64.sysvsem] |29 September 2026 |Heap out-of-bounds access in semop(2)
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:66.jail.asc[FreeBSD-SA-26:66.jail] |29 September 2026 |Multiple jail filesystem root escapes
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:67.ktls.asc[FreeBSD-SA-26:67.ktls] |29 September 2026 |Remote DoS via receive-side kernel TLS
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:68.openssl.asc[FreeBSD-SA-26:68.openssl] |29 September 2026 |Out-of-bounds read in OpenSSL DTLS retransmission
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:69.udp.asc[FreeBSD-SA-26:69.udp] |29 September 2026 |IPv6 UDP sendto(2) bypasses jail loopback restriction
 |===
 
 [[errata]]
diff --git a/website/content/en/releases/15.1R/errata.adoc b/website/content/en/releases/15.1R/errata.adoc
index 0420f0ae4b..b3de64ee1f 100644
--- a/website/content/en/releases/15.1R/errata.adoc
+++ b/website/content/en/releases/15.1R/errata.adoc
@@ -69,6 +69,12 @@ For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:61.openssl.asc[FreeBSD-SA-26:61.openssl] |25 August 2026 |Multiple vulnerabilities in OpenSSL
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:62.tty.asc[FreeBSD-SA-26:62.tty] |25 August 2026 |Kernel use-after-free via tty ioctls
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:63.posixshm.asc[FreeBSD-SA-26:63.posixshm] |25 August 2026 |TOCTOU race in POSIX shared memory large page configuration
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:64.sysvsem.asc[FreeBSD-SA-26:64.sysvsem] |29 September 2026 |Heap out-of-bounds access in semop(2)
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:65.kqueue.asc[FreeBSD-SA-26:65.kqueue] |29 September 2026 |Memory safety bugs in kqueue copy-on-fork implementation
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:66.jail.asc[FreeBSD-SA-26:66.jail] |29 September 2026 |Multiple jail filesystem root escapes
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:67.ktls.asc[FreeBSD-SA-26:67.ktls] |29 September 2026 |Remote DoS via receive-side kernel TLS
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:68.openssl.asc[FreeBSD-SA-26:68.openssl] |29 September 2026 |Out-of-bounds read in OpenSSL DTLS retransmission
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:69.udp.asc[FreeBSD-SA-26:69.udp] |29 September 2026 |IPv6 UDP sendto(2) bypasses jail loopback restriction
 |===
 
 [[errata]]