summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMark Johnston <markj@FreeBSD.org>2026-04-28 20:27:45 +0000
committerMark Johnston <markj@FreeBSD.org>2026-04-28 20:33:59 +0000
commitd7784de043f1543a1575e9fae8cd56a4fd7c776d (patch)
tree94db09856f0ab94d524acda3e0be70862212cca3
parent4f0992ce23b0934043daca0b85a7b73f0e0dc0a3 (diff)
-rw-r--r--UPDATING26
-rw-r--r--sys/conf/newvers.sh2
2 files changed, 27 insertions, 1 deletions
diff --git a/UPDATING b/UPDATING
index f311af86ab77..11739da8f1ef 100644
--- a/UPDATING
+++ b/UPDATING
@@ -12,6 +12,32 @@ Items affecting the ports and packages system can be found in
/usr/ports/UPDATING. Please read that file before updating system packages
and/or ports.
+20260429:
+ 14.4-RELEASE-p3 SA-26:12.dhclient
+ SA-26:13.exec
+ SA-26:14.pf
+ SA-26:15.dhclient
+ SA-26:16.libnv
+ SA-26:17.libnv
+ EN-26:09.tzdata
+ EN-26:10.amd64
+
+ Remote code execution via malicious DHCP options. [SA-26:12.dhclient]
+
+ Local privilege escalation via execve(). [SA-26:13.exec]
+
+ pf can overflow the stack parsing crafted SCTP packets. [SA-26:14.pf]
+
+ Remotely triggerable out-of-bounds heap write in dhclient. [SA-26:15.dhclient]
+
+ Stack overflow via select() file descriptor set overflow. [SA-26:16.libnv]
+
+ Heap overflow in libnv. [SA-26:17.libnv]
+
+ Timezone database information update. [EN-26:09.tzdata]
+
+ TLB invalidation bug on AMD systems with INVLPGB. [EN-26:10.amd64]
+
20260421:
14.4-RELEASE-p2 SA-26:10.tty
SA-26:11.amd64
diff --git a/sys/conf/newvers.sh b/sys/conf/newvers.sh
index 98a10bc4526c..e514963a2651 100644
--- a/sys/conf/newvers.sh
+++ b/sys/conf/newvers.sh
@@ -53,7 +53,7 @@
TYPE="FreeBSD"
REVISION="14.4"
-BRANCH="RELEASE-p2"
+BRANCH="RELEASE-p3"
if [ -n "${BRANCH_OVERRIDE}" ]; then
BRANCH=${BRANCH_OVERRIDE}
fi