Regen after r349860.

Sponsored by:	Rubicon Communications, LLC (Netgate)
This commit is contained in:
Glen Barber 2019-07-10 14:47:57 +00:00
parent 4ffb0e9d91
commit ded178fb56
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=53243

View file

@ -35,29 +35,7 @@
errata are located at <a xmlns="http://www.w3.org/1999/xhtml" class="link" href="https://www.FreeBSD.org/releases/" target="_top">https://www.FreeBSD.org/releases/</a>, plus any
sites which keep up-to-date mirrors of this location. </p><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Source and binary snapshots of FreeBSD 11.3-STABLE also
contain up-to-date copies of this document (as of the time of
the snapshot). </p><p xmlns="http://www.w3.org/TR/xhtml1/transitional">For a list of all FreeBSD CERT security advisories, see <a xmlns="http://www.w3.org/1999/xhtml" class="link" href="https://www.FreeBSD.org/security/" target="_top">https://www.FreeBSD.org/security/</a>. </p></div><div class="sect1"><div xmlns="" class="titlepage"><div><div><h2 xmlns="http://www.w3.org/1999/xhtml" class="title" style="clear: both"><a id="security"></a>2. Security Advisories</h2></div></div></div><div class="informaltable"><table width="100%" border="0"><colgroup><col width="40%" /><col width="30%" /><col width="30%" /></colgroup><thead><tr><th>Advisory</th><th>Date</th><th>Topic</th></tr></thead><tbody><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-18:08.tcp.asc" target="_top">FreeBSD-SA-18:08.tcp</a></td><td>06 August 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Resource exhaustion in TCP
reassembly </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-18:09.l1tf.asc" target="_top">FreeBSD-SA-18:09.l1tf</a></td><td>14 August 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">L1 Terminal Fault (L1TF) Kernel Information
Disclosure </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-18:10.ip.asc" target="_top">FreeBSD-SA-18:10.ip</a></td><td>14 August 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Resource exhaustion in IP fragment
reassembly </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-18:11.hostapd.asc" target="_top">FreeBSD-SA-18:11.hostapd</a></td><td>14 August 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Unauthenticated EAPOL-Key Decryption
Vulnerability </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-18:12.elf.asc" target="_top">FreeBSD-SA-18:12.elf</a></td><td>12 September 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Improper ELF header parsing </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-18:13.nfs.asc" target="_top">FreeBSD-SA-18:13.nfs</a></td><td>27 November 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Multiple vulnerabilities </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-18:14.bhyve.asc" target="_top">FreeBSD-SA-18:14.bhyve</a></td><td>4 December 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Insufficient bounds checking </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-18:15.bootpd.asc" target="_top">FreeBSD-SA-18:15.bootpd</a></td><td>19 December 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Buffer overflow </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:01.syscall.asc" target="_top">FreeBSD-SA-19:01.syscall</a></td><td>5 February 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Kernel data register leak </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:02.fd.asc" target="_top">FreeBSD-SA-19:02.fd</a></td><td>5 February 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">File description reference count
leak </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:03.wpa.asc" target="_top">FreeBSD-SA-19:03.wpa</a></td><td>14 May 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Multiple vulnerabilities </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:04.ntp.asc" target="_top">FreeBSD-SA-19:04.ntp</a></td><td>14 May 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Authenticated denial of service in
<a xmlns="http://www.w3.org/1999/xhtml" class="citerefentry" href="https://www.FreeBSD.org/cgi/man.cgi?query=ntpd&amp;sektion=8&amp;manpath=freebsd-release-ports"><span class="citerefentry"><span class="refentrytitle">ntpd</span>(8)</span></a> </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:05.pf.asc" target="_top">FreeBSD-SA-19:05.pf</a></td><td>14 May 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">IPv6 fragment reassembly panic in
<a xmlns="http://www.w3.org/1999/xhtml" class="citerefentry" href="https://www.FreeBSD.org/cgi/man.cgi?query=pf&amp;sektion=4&amp;manpath=freebsd-release-ports"><span class="citerefentry"><span class="refentrytitle">pf</span>(4)</span></a> </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:06.pf.asc" target="_top">FreeBSD-SA-19:06.pf</a></td><td>14 May 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">ICMP/ICMP6 packet filter bypass in
<a xmlns="http://www.w3.org/1999/xhtml" class="citerefentry" href="https://www.FreeBSD.org/cgi/man.cgi?query=pf&amp;sektion=4&amp;manpath=freebsd-release-ports"><span class="citerefentry"><span class="refentrytitle">pf</span>(4)</span></a> </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:07.mds.asc" target="_top">FreeBSD-SA-19:07.mds</a></td><td>14 May 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Microarchitectural Data Sampling </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:09.iconv.asc" target="_top">FreeBSD-SA-19:09.iconv</a></td><td>2 July 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional"><a xmlns="http://www.w3.org/1999/xhtml" class="citerefentry" href="https://www.FreeBSD.org/cgi/man.cgi?query=iconv&amp;sektion=3&amp;manpath=freebsd-release-ports"><span class="citerefentry"><span class="refentrytitle">iconv</span>(3)</span></a> buffer overflow </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:10.ufs.asc" target="_top">FreeBSD-SA-19:10.ufs</a></td><td>2 July 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Kernel stack disclosure </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:11.cd_ioctl.asc" target="_top">FreeBSD-SA-19:11.cd_ioctl</a></td><td>2 July 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Privilege escalation in <a xmlns="http://www.w3.org/1999/xhtml" class="citerefentry" href="https://www.FreeBSD.org/cgi/man.cgi?query=cd&amp;sektion=4&amp;manpath=freebsd-release-ports"><span class="citerefentry"><span class="refentrytitle">cd</span>(4)</span></a> </p></td></tr></tbody></table></div></div><div class="sect1"><div xmlns="" class="titlepage"><div><div><h2 xmlns="http://www.w3.org/1999/xhtml" class="title" style="clear: both"><a id="errata"></a>3. Errata Notices</h2></div></div></div><div class="informaltable"><table width="100%" border="0"><colgroup><col width="40%" /><col width="30%" /><col width="30%" /></colgroup><thead><tr><th>Errata</th><th>Date</th><th>Topic</th></tr></thead><tbody><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-18:08.lazyfpu.asc" target="_top">FreeBSD-EN-18:08.lazyfpu</a></td><td>12 September 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Regression in Lazy FPU remediation </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-18:09.ip.asc" target="_top">FreeBSD-EN-18:09.ip</a></td><td>27 September 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional"><acronym xmlns="http://www.w3.org/1999/xhtml" class="acronym">IP</acronym> fragment remediation causes
<acronym xmlns="http://www.w3.org/1999/xhtml" class="acronym">IPv6</acronym> reassembly failure </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-18:10.syscall.asc" target="_top">FreeBSD-EN-18:10.syscall</a></td><td>27 September 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Null pointer dereference in
<code xmlns="http://www.w3.org/1999/xhtml" class="literal">freebsd4_getfsstat</code> system
call </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-18:11.listen.asc" target="_top">FreeBSD-EN-18:11.listen</a></td><td>27 September 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Denial of service in <code xmlns="http://www.w3.org/1999/xhtml" class="literal">listen</code>
system call </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-18:12.mem.asc" target="_top">FreeBSD-EN-18:12.mem</a></td><td>27 September 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Small kernel memory disclosures in two system
calls </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-18:13.icmp.asc" target="_top">FreeBSD-EN-18:13.icmp</a></td><td>27 November 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">ICMP buffer underwrite </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-18:14.tzdata.asc" target="_top">FreeBSD-EN-18:14.tzdata</a></td><td>27 November 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Timezone database information
update </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-18:15.loader.asc" target="_top">FreeBSD-EN-18:15.loader</a></td><td>27 November 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Deferred kernel loading breaks loader
password </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-18:16.ptrace.asc" target="_top">FreeBSD-EN-18:16.ptrace</a></td><td>19 December 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Kernel panic when attaching to stopped
process </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-18:17.vm.asc" target="_top">FreeBSD-EN-18:17.vm</a></td><td>19 December 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Kernel panic under load on <span xmlns="http://www.w3.org/1999/xhtml" class="trademark">Intel</span>® Skylake&#8482;
CPUs </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-18:18.zfs.asc" target="_top">FreeBSD-EN-18:18.zfs</a></td><td>19 December 2018</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">ZFS vnode reclaim deadlock </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:03.sqlite.asc" target="_top">FreeBSD-EN-19:03.sqlite</a></td><td>9 January 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">sqlite update </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:04.tzdata.asc" target="_top">FreeBSD-EN-19:04.tzdata</a></td><td>9 January 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Timezone database information
update </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:05.kqueue.asc" target="_top">FreeBSD-EN-19:05.kqueue</a></td><td>9 January 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">kqueue race condition and kernel
panic </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:08.tzdata.asc" target="_top">FreeBSD-EN-19:08.tzdata</a></td><td>14 May 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Timezone database information
update </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:09.xinstall.asc" target="_top">FreeBSD-EN-19:09.xinstall</a></td><td>14 May 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional"><a xmlns="http://www.w3.org/1999/xhtml" class="citerefentry" href="https://www.FreeBSD.org/cgi/man.cgi?query=install&amp;sektion=1&amp;manpath=freebsd-release-ports"><span class="citerefentry"><span class="refentrytitle">install</span>(1)</span></a> broken with partially matching
relative paths </p></td></tr><tr><td><a class="link" href="https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:12.tzdata.asc" target="_top">FreeBSD-EN-19:12.tzdata</a></td><td>2 July 2019</td><td><p xmlns="http://www.w3.org/TR/xhtml1/transitional">Timezone database information
update </p></td></tr></tbody></table></div></div><div class="sect1"><div xmlns="" class="titlepage"><div><div><h2 xmlns="http://www.w3.org/1999/xhtml" class="title" style="clear: both"><a id="open-issues"></a>4. Open Issues</h2></div></div></div><div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"><p xmlns="http://www.w3.org/TR/xhtml1/transitional">[2019-07-04] An issue which can cause a crash when
the snapshot). </p><p xmlns="http://www.w3.org/TR/xhtml1/transitional">For a list of all FreeBSD CERT security advisories, see <a xmlns="http://www.w3.org/1999/xhtml" class="link" href="https://www.FreeBSD.org/security/" target="_top">https://www.FreeBSD.org/security/</a>. </p></div><div class="sect1"><div xmlns="" class="titlepage"><div><div><h2 xmlns="http://www.w3.org/1999/xhtml" class="title" style="clear: both"><a id="security"></a>2. Security Advisories</h2></div></div></div><div class="informaltable"><table width="100%" border="0"><colgroup><col width="40%" /><col width="30%" /><col width="30%" /></colgroup><thead><tr><th>Advisory</th><th>Date</th><th>Topic</th></tr></thead><tbody><tr><td>No advisories.</td><td> </td><td> </td></tr></tbody></table></div></div><div class="sect1"><div xmlns="" class="titlepage"><div><div><h2 xmlns="http://www.w3.org/1999/xhtml" class="title" style="clear: both"><a id="errata"></a>3. Errata Notices</h2></div></div></div><div class="informaltable"><table width="100%" border="0"><colgroup><col width="40%" /><col width="30%" /><col width="30%" /></colgroup><thead><tr><th>Errata</th><th>Date</th><th>Topic</th></tr></thead><tbody><tr><td>No errata notices.</td><td> </td><td> </td></tr></tbody></table></div></div><div class="sect1"><div xmlns="" class="titlepage"><div><div><h2 xmlns="http://www.w3.org/1999/xhtml" class="title" style="clear: both"><a id="open-issues"></a>4. Open Issues</h2></div></div></div><div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"><p xmlns="http://www.w3.org/TR/xhtml1/transitional">[2019-07-04] An issue which can cause a crash when
connecting to a <a xmlns="http://www.w3.org/1999/xhtml" class="citerefentry" href="https://www.FreeBSD.org/cgi/man.cgi?query=bhyve&amp;sektion=4&amp;manpath=freebsd-release-ports"><span class="citerefentry"><span class="refentrytitle">bhyve</span>(4)</span></a> instance with
a <acronym xmlns="http://www.w3.org/1999/xhtml" class="acronym">VNC</acronym> client under certain circumstances
had been reported. An errata notice is planned