Regen after r354656.

Sponsored by:	Rubicon Communications, LLC (netgate.com)
This commit is contained in:
Glen Barber 2019-11-12 19:20:18 +00:00
parent 3d69b24356
commit a59ebc2685
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=53594

View file

@ -37,8 +37,10 @@
contain up-to-date copies of this document (as of the time of
the snapshot). </p><p xmlns="http://www.w3.org/TR/xhtml1/transitional">For a list of all FreeBSD CERT security advisories, see <a xmlns="http://www.w3.org/1999/xhtml" class="link" href="https://www.FreeBSD.org/security/" target="_top">https://www.FreeBSD.org/security/</a>. </p></div><div class="sect1"><div xmlns="" class="titlepage"><div><div><h2 xmlns="http://www.w3.org/1999/xhtml" class="title" style="clear: both"><a id="security"></a>2. Security Advisories</h2></div></div></div><div class="informaltable"><table width="100%" border="0"><colgroup><col width="40%" /><col width="30%" /><col width="30%" /></colgroup><thead><tr><th>Advisory</th><th>Date</th><th>Topic</th></tr></thead><tbody><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:12.telnet.asc" target="_top">FreeBSD-SA-19:12.telnet</a></td><td>24 July 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Multiple vulnerabilities </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:13.pts.asc" target="_top">FreeBSD-SA-19:13.pts</a></td><td>24 July 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Write-after-free vulnerability </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:14.freebsd32.asc" target="_top">FreeBSD-SA-19:14.freebsd32</a></td><td>24 July 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Kernel memory disclosure </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:15.mqueuefs.asc" target="_top">FreeBSD-SA-19:15.mqueuefs</a></td><td>24 July 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Reference count overflow </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:16.bhyve.asc" target="_top">FreeBSD-SA-19:16.bhyve</a></td><td>24 July 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional"><a xmlns="http://www.w3.org/1999/xhtml" class="citerefentry" href="https://www.FreeBSD.org/cgi/man.cgi?query=xhci&amp;sektion=4&amp;manpath=freebsd-release-ports"><span class="citerefentry"><span class="refentrytitle">xhci</span>(4)</span></a> out-of-bounds read </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:17.fd.asc" target="_top">FreeBSD-SA-19:17.fd</a></td><td>24 July 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Reference count leak </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:18.bzip2.asc" target="_top">FreeBSD-SA-19:18.bzip2</a></td><td>6 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Multiple vulnerabilities </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:19.mldv2.asc" target="_top">FreeBSD-SA-19:19.mldv2</a></td><td>6 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Out-of-bounds memory access </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:20.bsnmp.asc" target="_top">FreeBSD-SA-19:20.bsnmp</a></td><td>6 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Insufficient message length
validation </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:21.bhyve.asc" target="_top">FreeBSD-SA-19:21.bhyve</a></td><td>6 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Insufficient validation of guest-supplied
data </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:22.mbuf.asc" target="_top">FreeBSD-SA-19:22.mbuf</a></td><td>20 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">IPv6 remove denial-of-service </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:23.midi.asc" target="_top">FreeBSD-SA-19:23.midi</a></td><td>20 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Kernel memory disclosure </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:24.mqueuefs.asc" target="_top">FreeBSD-SA-19:24.mqueuefs</a></td><td>20 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Reference count overflow </p></td></tr></tbody></table></div></div><div class="sect1"><div xmlns="" class="titlepage"><div><div><h2 xmlns="http://www.w3.org/1999/xhtml" class="title" style="clear: both"><a id="errata"></a>3. Errata Notices</h2></div></div></div><div class="informaltable"><table width="100%" border="0"><colgroup><col width="40%" /><col width="30%" /><col width="30%" /></colgroup><thead><tr><th>Errata</th><th>Date</th><th>Topic</th></tr></thead><tbody><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:13.mds.asc" target="_top">FreeBSD-EN-19:13.mds</a></td><td>24 July 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">System crash from Intel CPU vulnerability
mitigation </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:15.libunwind.asc" target="_top">FreeBSD-EN-19:15.libunwind</a></td><td>6 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Incorrect exception handling </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:16.bhyve.asc" target="_top">FreeBSD-EN-19:16.bhyve</a></td><td>20 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Instruction emulation improvements </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:17.ipfw.asc" target="_top">FreeBSD-EN-19:17.ipfw</a></td><td>20 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">"jail" keyword fix </p></td></tr></tbody></table></div></div><div class="sect1"><div xmlns="" class="titlepage"><div><div><h2 xmlns="http://www.w3.org/1999/xhtml" class="title" style="clear: both"><a id="open-issues"></a>4. Open Issues</h2></div></div></div><div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"><p xmlns="http://www.w3.org/TR/xhtml1/transitional">[2019-07-04] An issue which can cause a crash when
data </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:22.mbuf.asc" target="_top">FreeBSD-SA-19:22.mbuf</a></td><td>20 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">IPv6 remove denial-of-service </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:23.midi.asc" target="_top">FreeBSD-SA-19:23.midi</a></td><td>20 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Kernel memory disclosure </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:24.mqueuefs.asc" target="_top">FreeBSD-SA-19:24.mqueuefs</a></td><td>20 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Reference count overflow </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:25.mcepsc.asc" target="_top">FreeBSD-SA-19:25.mcepce</a></td><td>12 November 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Machine Check Exception on Page Size
Change </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:26.mcu.asc" target="_top">FreeBSD-SA-19:26.mcu</a></td><td>12 November 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Intel CPU Microcode Update </p></td></tr></tbody></table></div></div><div class="sect1"><div xmlns="" class="titlepage"><div><div><h2 xmlns="http://www.w3.org/1999/xhtml" class="title" style="clear: both"><a id="errata"></a>3. Errata Notices</h2></div></div></div><div class="informaltable"><table width="100%" border="0"><colgroup><col width="40%" /><col width="30%" /><col width="30%" /></colgroup><thead><tr><th>Errata</th><th>Date</th><th>Topic</th></tr></thead><tbody><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:13.mds.asc" target="_top">FreeBSD-EN-19:13.mds</a></td><td>24 July 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">System crash from Intel CPU vulnerability
mitigation </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:15.libunwind.asc" target="_top">FreeBSD-EN-19:15.libunwind</a></td><td>6 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Incorrect exception handling </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:16.bhyve.asc" target="_top">FreeBSD-EN-19:16.bhyve</a></td><td>20 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Instruction emulation improvements </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:17.ipfw.asc" target="_top">FreeBSD-EN-19:17.ipfw</a></td><td>20 August 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">"jail" keyword fix </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:18.tzdata.asc" target="_top">FreeBSD-EN-19:18.tzdata</a></td><td>23 October 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Timezone database information
update </p></td></tr></tbody></table></div></div><div class="sect1"><div xmlns="" class="titlepage"><div><div><h2 xmlns="http://www.w3.org/1999/xhtml" class="title" style="clear: both"><a id="open-issues"></a>4. Open Issues</h2></div></div></div><div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"><p xmlns="http://www.w3.org/TR/xhtml1/transitional">[2019-07-04] An issue which can cause a crash when
connecting to a <a xmlns="http://www.w3.org/1999/xhtml" class="citerefentry" href="https://www.FreeBSD.org/cgi/man.cgi?query=bhyve&amp;sektion=4&amp;manpath=freebsd-release-ports"><span class="citerefentry"><span class="refentrytitle">bhyve</span>(4)</span></a> instance with
a <acronym xmlns="http://www.w3.org/1999/xhtml" class="acronym">VNC</acronym> client under certain circumstances
had been reported. An errata notice is planned