diff options
| author | Mark Johnston <markj@FreeBSD.org> | 2026-04-28 20:27:45 +0000 |
|---|---|---|
| committer | Mark Johnston <markj@FreeBSD.org> | 2026-04-28 20:33:59 +0000 |
| commit | d7784de043f1543a1575e9fae8cd56a4fd7c776d (patch) | |
| tree | 94db09856f0ab94d524acda3e0be70862212cca3 | |
| parent | 4f0992ce23b0934043daca0b85a7b73f0e0dc0a3 (diff) | |
| -rw-r--r-- | UPDATING | 26 | ||||
| -rw-r--r-- | sys/conf/newvers.sh | 2 |
2 files changed, 27 insertions, 1 deletions
@@ -12,6 +12,32 @@ Items affecting the ports and packages system can be found in /usr/ports/UPDATING. Please read that file before updating system packages and/or ports. +20260429: + 14.4-RELEASE-p3 SA-26:12.dhclient + SA-26:13.exec + SA-26:14.pf + SA-26:15.dhclient + SA-26:16.libnv + SA-26:17.libnv + EN-26:09.tzdata + EN-26:10.amd64 + + Remote code execution via malicious DHCP options. [SA-26:12.dhclient] + + Local privilege escalation via execve(). [SA-26:13.exec] + + pf can overflow the stack parsing crafted SCTP packets. [SA-26:14.pf] + + Remotely triggerable out-of-bounds heap write in dhclient. [SA-26:15.dhclient] + + Stack overflow via select() file descriptor set overflow. [SA-26:16.libnv] + + Heap overflow in libnv. [SA-26:17.libnv] + + Timezone database information update. [EN-26:09.tzdata] + + TLB invalidation bug on AMD systems with INVLPGB. [EN-26:10.amd64] + 20260421: 14.4-RELEASE-p2 SA-26:10.tty SA-26:11.amd64 diff --git a/sys/conf/newvers.sh b/sys/conf/newvers.sh index 98a10bc4526c..e514963a2651 100644 --- a/sys/conf/newvers.sh +++ b/sys/conf/newvers.sh @@ -53,7 +53,7 @@ TYPE="FreeBSD" REVISION="14.4" -BRANCH="RELEASE-p2" +BRANCH="RELEASE-p3" if [ -n "${BRANCH_OVERRIDE}" ]; then BRANCH=${BRANCH_OVERRIDE} fi |
