summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMark Johnston <markj@FreeBSD.org>2026-04-28 20:31:11 +0000
committerMark Johnston <markj@FreeBSD.org>2026-04-28 20:32:11 +0000
commitbf0db64e038118d5fe6071b1910743790484755e (patch)
tree0551a24dd4add8d1ce139b00a995cbc9d7979921
parentf7f48005fbe256e3af42db3cc5ad33b140050f03 (diff)
-rw-r--r--UPDATING23
-rw-r--r--sys/conf/newvers.sh2
2 files changed, 24 insertions, 1 deletions
diff --git a/UPDATING b/UPDATING
index 036cd2bca339..96bb27d009a6 100644
--- a/UPDATING
+++ b/UPDATING
@@ -12,6 +12,29 @@ Items affecting the ports and packages system can be found in
/usr/ports/UPDATING. Please read that file before updating system packages
and/or ports.
+20260429:
+ 13.5-RELEASE-p13 SA-26:12.dhclient
+ SA-26:13.exec
+ SA-26:14.pf
+ SA-26:15.dhclient
+ SA-26:16.libnv
+ SA-26:17.libnv
+ EN-26:09.tzdata
+
+ Remote code execution via malicious DHCP options. [SA-26:12.dhclient]
+
+ Local privilege escalation via execve(). [SA-26:13.exec]
+
+ pf can overflow the stack parsing crafted SCTP packets. [SA-26:14.pf]
+
+ Remotely triggerable out-of-bounds heap write in dhclient. [SA-26:15.dhclient]
+
+ Stack overflow via select() file descriptor set overflow. [SA-26:16.libnv]
+
+ Heap overflow in libnv. [SA-26:17.libnv]
+
+ Timezone database information update. [EN-26:09.tzdata]
+
20260421:
13.5-RELEASE-p12 SA-26:10.tty
SA-26:11.amd64
diff --git a/sys/conf/newvers.sh b/sys/conf/newvers.sh
index 5c1cfaf7410f..bdc9d027a2d1 100644
--- a/sys/conf/newvers.sh
+++ b/sys/conf/newvers.sh
@@ -53,7 +53,7 @@
TYPE="FreeBSD"
REVISION="13.5"
-BRANCH="RELEASE-p12"
+BRANCH="RELEASE-p13"
if [ -n "${BRANCH_OVERRIDE}" ]; then
BRANCH=${BRANCH_OVERRIDE}
fi