diff --git a/website/data/security/advisories.toml b/website/data/security/advisories.toml index 6a3d6ed32c..2c697786f8 100644 --- a/website/data/security/advisories.toml +++ b/website/data/security/advisories.toml @@ -1,2619 +1,2623 @@ # Sort advisories by year, month and day # $FreeBSD$ +[[advisories]] +name = "FreeBSD-SA-23:01.geli" +date = "2023-02-08" + [[advisories]] name = "FreeBSD-SA-22:15.ping" date = "2022-11-29" [[advisories]] name = "FreeBSD-SA-22:14.heimdal" date = "2022-11-15" [[advisories]] name = "FreeBSD-SA-22:13.zlib" date = "2022-08-30" [[advisories]] name = "FreeBSD-SA-22:12.lib9p" date = "2022-08-09" [[advisories]] name = "FreeBSD-SA-22:11.vm" date = "2022-08-09" [[advisories]] name = "FreeBSD-SA-22:10.aio" date = "2022-08-09" [[advisories]] name = "FreeBSD-SA-22:09.elf" date = "2022-08-09" [[advisories]] name = "FreeBSD-SA-22:08.zlib" date = "2022-04-06" [[advisories]] name = "FreeBSD-SA-22:07.wifi_meshid" date = "2022-04-06" [[advisories]] name = "FreeBSD-SA-22:06.ioctl" date = "2022-04-06" [[advisories]] name = "FreeBSD-SA-22:05.bhyve" date = "2022-04-06" [[advisories]] name = "FreeBSD-SA-22:04.netmap" date = "2022-04-06" [[advisories]] name = "FreeBSD-SA-22:03.openssl" date = "2022-03-15" [[advisories]] name = "FreeBSD-SA-22:02.wifi" date = "2022-03-15" [[advisories]] name = "FreeBSD-SA-22:01.vt" date = "2022-01-11" [[advisories]] name = "FreeBSD-SA-21:17.openssl" date = "2021-08-24" [[advisories]] name = "FreeBSD-SA-21:16.openssl" date = "2021-08-24" [[advisories]] name = "FreeBSD-SA-21:15.libfetch" date = "2021-08-24" [[advisories]] name = "FreeBSD-SA-21:14.ggatec" date = "2021-08-24" [[advisories]] name = "FreeBSD-SA-21:13.bhyve" date = "2021-08-24" [[advisories]] name = "FreeBSD-SA-21:12.libradius" date = "2021-05-26" [[advisories]] name = "FreeBSD-SA-21:11.smap" date = "2021-05-26" [[advisories]] name = "FreeBSD-SA-21:10.jail_mount" date = "2021-04-06" [[advisories]] name = "FreeBSD-SA-21:09.accept_filter" date = "2021-04-06" [[advisories]] name = "FreeBSD-SA-21:08.vm" date = "2021-04-06" [[advisories]] name = "FreeBSD-SA-21:07.openssl" date = "2021-03-25" [[advisories]] name = "FreeBSD-SA-21:06.xen" date = "2021-02-24" [[advisories]] name = "FreeBSD-SA-21:05.jail_chdir" date = "2021-02-24" [[advisories]] name = "FreeBSD-SA-21:04.jail_remove" date = "2021-02-24" [[advisories]] name = "FreeBSD-SA-21:03.pam_login_access" date = "2021-02-24" [[advisories]] name = "FreeBSD-SA-21:02.xenoom" date = "2021-01-29" [[advisories]] name = "FreeBSD-SA-21:01.fsdisclosure" date = "2021-01-29" [[advisories]] name = "FreeBSD-SA-20:33.openssl" date = "2020-12-08" [[advisories]] name = "FreeBSD-SA-20:32.rtsold" date = "2020-12-01" [[advisories]] name = "FreeBSD-SA-20:31.icmp6" date = "2020-12-01" [[advisories]] name = "FreeBSD-SA-20:30.ftpd" date = "2020-09-15" [[advisories]] name = "FreeBSD-SA-20:29.bhyve_svm" date = "2020-09-15" [[advisories]] name = "FreeBSD-SA-20:28.bhyve_vmcs" date = "2020-09-15" [[advisories]] name = "FreeBSD-SA-20:27.ure" date = "2020-09-15" [[advisories]] name = "FreeBSD-SA-20:26.dhclient" date = "2020-09-02" [[advisories]] name = "FreeBSD-SA-20:25.sctp" date = "2020-09-02" [[advisories]] name = "FreeBSD-SA-20:24.ipv6" date = "2020-09-02" [[advisories]] name = "FreeBSD-SA-20:23.sendmsg" date = "2020-08-05" [[advisories]] name = "FreeBSD-SA-20:22.sqlite" date = "2020-08-05" [[advisories]] name = "FreeBSD-SA-20:21.usb_net" date = "2020-08-05" [[advisories]] name = "FreeBSD-SA-20:20.ipv6" date = "2020-07-08" [[advisories]] name = "FreeBSD-SA-20:19.unbound" date = "2020-07-08" [[advisories]] name = "FreeBSD-SA-20:18.posix_spawnp" date = "2020-07-08" [[advisories]] name = "FreeBSD-SA-20:17.usb" date = "2020-06-09" [[advisories]] name = "FreeBSD-SA-20:16.cryptodev" date = "2020-05-12" [[advisories]] name = "FreeBSD-SA-20:15.cryptodev" date = "2020-05-12" [[advisories]] name = "FreeBSD-SA-20:14.sctp" date = "2020-05-12" [[advisories]] name = "FreeBSD-SA-20:13.libalias" date = "2020-05-12" [[advisories]] name = "FreeBSD-SA-20:12.libalias" date = "2020-05-12" [[advisories]] name = "FreeBSD-SA-20:11.openssl" date = "2020-04-21" [[advisories]] name = "FreeBSD-SA-20:10.ipfw" date = "2020-04-21" [[advisories]] name = "FreeBSD-SA-20:09.ntp" date = "2020-03-19" [[advisories]] name = "FreeBSD-SA-20:08.jail" date = "2020-03-19" [[advisories]] name = "FreeBSD-SA-20:07.epair" date = "2020-03-19" [[advisories]] name = "FreeBSD-SA-20:06.if_ixl_ioctl" date = "2020-03-19" [[advisories]] name = "FreeBSD-SA-20:05.if_oce_ioctl" date = "2020-03-19" [[advisories]] name = "FreeBSD-SA-20:04.tcp" date = "2020-03-19" [[advisories]] name = "FreeBSD-SA-20:03.thrmisc" date = "2020-01-28" [[advisories]] name = "FreeBSD-SA-20:02.ipsec" date = "2020-01-28" [[advisories]] name = "FreeBSD-SA-20:01.libfetch" date = "2020-01-28" [[advisories]] name = "FreeBSD-SA-19:26.mcu" date = "2019-11-12" [[advisories]] name = "FreeBSD-SA-19:25.mcepsc" date = "2019-11-12" [[advisories]] name = "FreeBSD-SA-19:24.mqueuefs" date = "2019-08-20" [[advisories]] name = "FreeBSD-SA-19:23.midi" date = "2019-08-20" [[advisories]] name = "FreeBSD-SA-19:22.mbuf" date = "2019-08-20" [[advisories]] name = "FreeBSD-SA-19:21.bhyve" date = "2019-08-06" [[advisories]] name = "FreeBSD-SA-19:20.bsnmp" date = "2019-08-06" [[advisories]] name = "FreeBSD-SA-19:19.mldv2" date = "2019-08-06" [[advisories]] name = "FreeBSD-SA-19:18.bzip2" date = "2019-08-06" [[advisories]] name = "FreeBSD-SA-19:17.fd" date = "2019-07-24" [[advisories]] name = "FreeBSD-SA-19:16.bhyve" date = "2019-07-24" [[advisories]] name = "FreeBSD-SA-19:15.mqueuefs" date = "2019-07-24" [[advisories]] name = "FreeBSD-SA-19:14.freebsd32" date = "2019-07-24" [[advisories]] name = "FreeBSD-SA-19:13.pts" date = "2019-07-24" [[advisories]] name = "FreeBSD-SA-19:12.telnet" date = "2019-07-24" [[advisories]] name = "FreeBSD-SA-19:11.cd_ioctl" date = "2019-07-02" [[advisories]] name = "FreeBSD-SA-19:10.ufs" date = "2019-07-02" [[advisories]] name = "FreeBSD-SA-19:09.iconv" date = "2019-07-02" [[advisories]] name = "FreeBSD-SA-19:08.rack" date = "2019-06-19" [[advisories]] name = "FreeBSD-SA-19:07.mds" date = "2019-05-14" [[advisories]] name = "FreeBSD-SA-19:06.pf" date = "2019-05-14" [[advisories]] name = "FreeBSD-SA-19:05.pf" date = "2019-05-14" [[advisories]] name = "FreeBSD-SA-19:04.ntp" date = "2019-05-14" [[advisories]] name = "FreeBSD-SA-19:03.wpa" date = "2019-05-14" [[advisories]] name = "FreeBSD-SA-19:02.fd" date = "2019-02-05" [[advisories]] name = "FreeBSD-SA-19:01.syscall" date = "2019-02-05" [[advisories]] name = "FreeBSD-SA-18:15.bootpd" date = "2018-12-19" [[advisories]] name = "FreeBSD-SA-18:14.bhyve" date = "2018-12-04" [[advisories]] name = "FreeBSD-SA-18:13.nfs" date = "2018-11-27" [[advisories]] name = "FreeBSD-SA-18:12.elf" date = "2018-09-12" [[advisories]] name = "FreeBSD-SA-18:11.hostapd" date = "2018-08-14" [[advisories]] name = "FreeBSD-SA-18:10.ip" date = "2018-08-14" [[advisories]] name = "FreeBSD-SA-18:09.l1tf" date = "2018-08-14" [[advisories]] name = "FreeBSD-SA-18:08.tcp" date = "2018-08-06" [[advisories]] name = "FreeBSD-SA-18:07.lazyfpu" date = "2018-06-21" [[advisories]] name = "FreeBSD-SA-18:06.debugreg" date = "2018-05-08" [[advisories]] name = "FreeBSD-SA-18:05.ipsec" date = "2018-04-04" [[advisories]] name = "FreeBSD-SA-18:04.vt" date = "2018-04-04" [[advisories]] name = "FreeBSD-SA-18:03.speculative_execution" date = "2018-03-14" [[advisories]] name = "FreeBSD-SA-18:02.ntp" date = "2018-03-07" [[advisories]] name = "FreeBSD-SA-18:01.ipsec" date = "2018-03-07" [[advisories]] name = "FreeBSD-SA-17:12.openssl" date = "2017-12-09" [[advisories]] name = "FreeBSD-SA-17:11.openssl" date = "2017-11-29" [[advisories]] name = "FreeBSD-SA-17:10.kldstat" date = "2017-11-15" [[advisories]] name = "FreeBSD-SA-17:09.shm" date = "2017-11-15" [[advisories]] name = "FreeBSD-SA-17:08.ptrace" date = "2017-11-15" [[advisories]] name = "FreeBSD-SA-17:07.wpa" date = "2017-10-17" [[advisories]] name = "FreeBSD-SA-17:06.openssh" date = "2017-08-10" [[advisories]] name = "FreeBSD-SA-17:05.heimdal" date = "2017-07-12" [[advisories]] name = "FreeBSD-SA-17:04.ipfilter" date = "2017-04-27" [[advisories]] name = "FreeBSD-SA-17:03.ntp" date = "2017-04-12" [[advisories]] name = "FreeBSD-SA-17:02.openssl" date = "2017-02-23" [[advisories]] name = "FreeBSD-SA-17:01.openssh" date = "2017-01-11" [[advisories]] name = "FreeBSD-SA-16:39.ntp" date = "2016-12-22" [[advisories]] name = "FreeBSD-SA-16:38.bhyve" date = "2016-12-06" [[advisories]] name = "FreeBSD-SA-16:37.libc" date = "2016-12-06" [[advisories]] name = "FreeBSD-SA-16:36.telnetd" date = "2016-12-06" [[advisories]] name = "FreeBSD-SA-16:35.openssl" date = "2016-11-02" [[advisories]] name = "FreeBSD-SA-16:34.bind" date = "2016-11-02" [[advisories]] name = "FreeBSD-SA-16:33.openssh" date = "2016-11-02" [[advisories]] name = "FreeBSD-SA-16:32.bhyve" date = "2016-10-25" [[advisories]] name = "FreeBSD-SA-16:31.libarchive" date = "2016-10-10" [[advisories]] name = "FreeBSD-SA-16:30.portsnap" date = "2016-10-10" [[advisories]] name = "FreeBSD-SA-16:29.bspatch" date = "2016-10-10" [[advisories]] name = "FreeBSD-SA-16:28.bind" date = "2016-10-10" [[advisories]] name = "FreeBSD-SA-16:27.openssl" date = "2016-10-10" [[advisories]] name = "FreeBSD-SA-16:26.openssl" date = "2016-09-23" [[advisories]] name = "FreeBSD-SA-16:25.bspatch" date = "2016-07-25" [[advisories]] name = "FreeBSD-SA-16:24.ntp" date = "2016-06-04" [[advisories]] name = "FreeBSD-SA-16:23.libarchive" date = "2016-05-31" [[advisories]] name = "FreeBSD-SA-16:22.libarchive" date = "2016-05-31" [[advisories]] name = "FreeBSD-SA-16:21.43bsd" date = "2016-05-31" [[advisories]] name = "FreeBSD-SA-16:20.linux" date = "2016-05-31" [[advisories]] name = "FreeBSD-SA-16:19.sendmsg" date = "2016-05-17" [[advisories]] name = "FreeBSD-SA-16:18.atkbd" date = "2016-05-17" [[advisories]] name = "FreeBSD-SA-16:17.openssl" date = "2016-05-04" [[advisories]] name = "FreeBSD-SA-16:16.ntp" date = "2016-04-29" [[advisories]] name = "FreeBSD-SA-16:15.sysarch" date = "2016-03-16" [[advisories]] name = "FreeBSD-SA-16:14.openssh" date = "2016-03-16" [[advisories]] name = "FreeBSD-SA-16:13.bind" date = "2016-03-10" [[advisories]] name = "FreeBSD-SA-16:12.openssl" date = "2016-03-10" [[advisories]] name = "FreeBSD-SA-16:11.openssl" date = "2016-01-30" [[advisories]] name = "FreeBSD-SA-16:10.linux" date = "2016-01-27" [[advisories]] name = "FreeBSD-SA-16:09.ntp" date = "2016-01-27" [[advisories]] name = "FreeBSD-SA-16:08.bind" date = "2016-01-27" [[advisories]] name = "FreeBSD-SA-16:07.openssh" date = "2016-01-14" [[advisories]] name = "FreeBSD-SA-16:06.bsnmpd" date = "2016-01-14" [[advisories]] name = "FreeBSD-SA-16:05.tcp" date = "2016-01-14" [[advisories]] name = "FreeBSD-SA-16:04.linux" date = "2016-01-14" [[advisories]] name = "FreeBSD-SA-16:03.linux" date = "2016-01-14" [[advisories]] name = "FreeBSD-SA-16:02.ntp" date = "2016-01-14" [[advisories]] name = "FreeBSD-SA-16:01.sctp" date = "2016-01-14" [[advisories]] name = "FreeBSD-SA-15:27.bind" date = "2015-12-16" [[advisories]] name = "FreeBSD-SA-15:26.openssl" date = "2015-12-06" [[advisories]] name = "FreeBSD-SA-15:25.ntp" date = "2015-10-26" [[advisories]] name = "FreeBSD-SA-15:24.rpcbind" date = "2015-09-29" [[advisories]] name = "FreeBSD-SA-15:23.bind" date = "2015-09-02" [[advisories]] name = "FreeBSD-SA-15:22.openssh" date = "2015-08-25" [[advisories]] name = "FreeBSD-SA-15:21.amd64" date = "2015-08-25" [[advisories]] name = "FreeBSD-SA-15:20.expat" date = "2015-08-18" [[advisories]] name = "FreeBSD-SA-15:19.routed" date = "2015-08-05" [[advisories]] name = "FreeBSD-SA-15:18.bsdpatch" date = "2015-08-05" [[advisories]] name = "FreeBSD-SA-15:17.bind" date = "2015-07-28" [[advisories]] name = "FreeBSD-SA-15:16.openssh" date = "2015-07-28" [[advisories]] name = "FreeBSD-SA-15:15.tcp" date = "2015-07-28" [[advisories]] name = "FreeBSD-SA-15:14.bsdpatch" date = "2015-07-28" [[advisories]] name = "FreeBSD-SA-15:13.tcp" date = "2015-07-21" [[advisories]] name = "FreeBSD-SA-15:12.openssl" date = "2015-07-09" [[advisories]] name = "FreeBSD-SA-15:11.bind" date = "2015-07-07" [[advisories]] name = "FreeBSD-SA-15:10.openssl" date = "2015-06-12" [[advisories]] name = "FreeBSD-SA-15:09.ipv6" date = "2015-04-07" [[advisories]] name = "FreeBSD-SA-15:08.bsdinstall" date = "2015-04-07" [[advisories]] name = "FreeBSD-SA-15:07.ntp" date = "2015-04-07" [[advisories]] name = "FreeBSD-SA-15:06.openssl" date = "2015-03-19" [[advisories]] name = "FreeBSD-SA-15:05.bind" date = "2015-02-25" [[advisories]] name = "FreeBSD-SA-15:04.igmp" date = "2015-02-25" [[advisories]] name = "FreeBSD-SA-15:03.sctp" date = "2015-01-27" [[advisories]] name = "FreeBSD-SA-15:02.kmem" date = "2015-01-27" [[advisories]] name = "FreeBSD-SA-15:01.openssl" date = "2015-01-14" [[advisories]] name = "FreeBSD-SA-14:31.ntp" date = "2014-12-23" [[advisories]] name = "FreeBSD-SA-14:30.unbound" date = "2014-12-17" [[advisories]] name = "FreeBSD-SA-14:29.bind" date = "2014-12-10" [[advisories]] name = "FreeBSD-SA-14:28.file" date = "2014-12-10" [[advisories]] name = "FreeBSD-SA-14:27.stdio" date = "2014-12-10" [[advisories]] name = "FreeBSD-SA-14:26.ftp" date = "2014-11-04" [[advisories]] name = "FreeBSD-SA-14:25.setlogin" date = "2014-11-04" [[advisories]] name = "FreeBSD-SA-14:24.sshd" date = "2014-11-04" [[advisories]] name = "FreeBSD-SA-14:23.openssl" date = "2014-10-21" [[advisories]] name = "FreeBSD-SA-14:22.namei" date = "2014-10-21" [[advisories]] name = "FreeBSD-SA-14:21.routed" date = "2014-10-21" [[advisories]] name = "FreeBSD-SA-14:20.rtsold" date = "2014-10-21" [[advisories]] name = "FreeBSD-SA-14:19.tcp" date = "2014-09-16" [[advisories]] name = "FreeBSD-SA-14:18.openssl" date = "2014-09-09" [[advisories]] name = "FreeBSD-SA-14:17.kmem" date = "2014-07-08" [[advisories]] name = "FreeBSD-SA-14:16.file" date = "2014-06-24" [[advisories]] name = "FreeBSD-SA-14:15.iconv" date = "2014-06-24" [[advisories]] name = "FreeBSD-SA-14:14.openssl" date = "2014-06-05" [[advisories]] name = "FreeBSD-SA-14:13.pam" date = "2014-06-03" [[advisories]] name = "FreeBSD-SA-14:12.ktrace" date = "2014-06-03" [[advisories]] name = "FreeBSD-SA-14:11.sendmail" date = "2014-06-03" [[advisories]] name = "FreeBSD-SA-14:10.openssl" date = "2014-05-13" [[advisories]] name = "FreeBSD-SA-14:09.openssl" date = "2014-04-30" [[advisories]] name = "FreeBSD-SA-14:08.tcp" date = "2014-04-30" [[advisories]] name = "FreeBSD-SA-14:07.devfs" date = "2014-04-30" [[advisories]] name = "FreeBSD-SA-14:06.openssl" date = "2014-04-08" [[advisories]] name = "FreeBSD-SA-14:05.nfsserver" date = "2014-04-08" [[advisories]] name = "FreeBSD-SA-14:04.bind" date = "2014-01-14" [[advisories]] name = "FreeBSD-SA-14:03.openssl" date = "2014-01-14" [[advisories]] name = "FreeBSD-SA-14:02.ntpd" date = "2014-01-14" [[advisories]] name = "FreeBSD-SA-14:01.bsnmpd" date = "2014-01-14" [[advisories]] name = "FreeBSD-SA-13:14.openssh" date = "2013-11-19" [[advisories]] name = "FreeBSD-SA-13:13.nullfs" date = "2013-09-10" [[advisories]] name = "FreeBSD-SA-13:12.ifioctl" date = "2013-09-10" [[advisories]] name = "FreeBSD-SA-13:11.sendfile" date = "2013-09-10" [[advisories]] name = "FreeBSD-SA-13:10.sctp" date = "2013-08-22" [[advisories]] name = "FreeBSD-SA-13:09.ip_multicast" date = "2013-08-22" [[advisories]] name = "FreeBSD-SA-13:08.nfsserver" date = "2013-07-26" [[advisories]] name = "FreeBSD-SA-13:07.bind" date = "2013-07-26" [[advisories]] name = "FreeBSD-SA-13:06.mmap" date = "2013-06-18" [[advisories]] name = "FreeBSD-SA-13:05.nfsserver" date = "2013-04-29" [[advisories]] name = "FreeBSD-SA-13:04.bind" date = "2013-04-02" [[advisories]] name = "FreeBSD-SA-13:03.openssl" date = "2013-04-02" [[advisories]] name = "FreeBSD-SA-13:02.libc" date = "2013-02-19" [[advisories]] name = "FreeBSD-SA-13:01.bind" date = "2013-02-19" [[advisories]] name = "FreeBSD-SA-12:08.linux" date = "2012-11-22" [[advisories]] name = "FreeBSD-SA-12:07.hostapd" date = "2012-11-22" [[advisories]] name = "FreeBSD-SA-12:06.bind" date = "2012-11-22" [[advisories]] name = "FreeBSD-SA-12:05.bind" date = "2012-08-06" [[advisories]] name = "FreeBSD-SA-12:04.sysret" date = "2012-06-12" [[advisories]] name = "FreeBSD-SA-12:03.bind" date = "2012-06-12" [[advisories]] name = "FreeBSD-SA-12:02.crypt" date = "2012-05-30" [[advisories]] name = "FreeBSD-SA-12:01.openssl" date = "2012-05-30" [[advisories]] name = "FreeBSD-SA-11:10.pam" date = "2011-12-23" [[advisories]] name = "FreeBSD-SA-11:09.pam_ssh" date = "2011-12-23" [[advisories]] name = "FreeBSD-SA-11:08.telnetd" date = "2011-12-23" [[advisories]] name = "FreeBSD-SA-11:07.chroot" date = "2011-12-23" [[advisories]] name = "FreeBSD-SA-11:06.bind" date = "2011-12-23" [[advisories]] name = "FreeBSD-SA-11:05.unix" date = "2011-09-28" [[advisories]] name = "FreeBSD-SA-11:04.compress" date = "2011-09-28" [[advisories]] name = "FreeBSD-SA-11:03.bind" date = "2011-09-28" [[advisories]] name = "FreeBSD-SA-11:02.bind" date = "2011-05-28" [[advisories]] name = "FreeBSD-SA-11:01.mountd" date = "2011-04-20" [[advisories]] name = "FreeBSD-SA-10:10.openssl" date = "2010-11-29" [[advisories]] name = "FreeBSD-SA-10:09.pseudofs" date = "2010-11-10" [[advisories]] name = "FreeBSD-SA-10:08.bzip2" date = "2010-09-20" [[advisories]] name = "FreeBSD-SA-10:07.mbuf" date = "2010-07-13" [[advisories]] name = "FreeBSD-SA-10:06.nfsclient" date = "2010-05-27" [[advisories]] name = "FreeBSD-SA-10:05.opie" date = "2010-05-27" [[advisories]] name = "FreeBSD-SA-10:04.jail" date = "2010-05-27" [[advisories]] name = "FreeBSD-SA-10:03.zfs" date = "2010-01-06" [[advisories]] name = "FreeBSD-SA-10:02.ntpd" date = "2010-01-06" [[advisories]] name = "FreeBSD-SA-10:01.bind" date = "2010-01-06" [[advisories]] name = "FreeBSD-SA-09:17.freebsd-update" date = "2009-12-03" [[advisories]] name = "FreeBSD-SA-09:16.rtld" date = "2009-12-03" [[advisories]] name = "FreeBSD-SA-09:15.ssl" date = "2009-12-03" [[advisories]] name = "FreeBSD-SA-09:14.devfs" date = "2009-10-02" [[advisories]] name = "FreeBSD-SA-09:13.pipe" date = "2009-10-02" [[advisories]] name = "FreeBSD-SA-09:12.bind" date = "2009-07-29" [[advisories]] name = "FreeBSD-SA-09:11.ntpd" date = "2009-06-10" [[advisories]] name = "FreeBSD-SA-09:10.ipv6" date = "2009-06-10" [[advisories]] name = "FreeBSD-SA-09:09.pipe" date = "2009-06-10" [[advisories]] name = "FreeBSD-SA-09:08.openssl" date = "2009-04-22" [[advisories]] name = "FreeBSD-SA-09:07.libc" date = "2009-04-22" [[advisories]] name = "FreeBSD-SA-09:06.ktimer" date = "2009-03-23" [[advisories]] name = "FreeBSD-SA-09:05.telnetd" date = "2009-02-16" [[advisories]] name = "FreeBSD-SA-09:04.bind" date = "2009-01-13" [[advisories]] name = "FreeBSD-SA-09:03.ntpd" date = "2009-01-13" [[advisories]] name = "FreeBSD-SA-09:02.openssl" date = "2009-01-07" [[advisories]] name = "FreeBSD-SA-09:01.lukemftpd" date = "2009-01-07" [[advisories]] name = "FreeBSD-SA-08:13.protosw" date = "2008-12-23" [[advisories]] name = "FreeBSD-SA-08:12.ftpd" date = "2008-12-23" [[advisories]] name = "FreeBSD-SA-08:11.arc4random" date = "2008-11-24" [[advisories]] name = "FreeBSD-SA-08:10.nd6" date = "2008-10-02" [[advisories]] name = "FreeBSD-SA-08:09.icmp6" date = "2008-09-03" [[advisories]] name = "FreeBSD-SA-08:08.nmount" date = "2008-09-03" [[advisories]] name = "FreeBSD-SA-08:07.amd64" date = "2008-09-03" [[advisories]] name = "FreeBSD-SA-08:06.bind" date = "2008-07-13" [[advisories]] name = "FreeBSD-SA-08:05.openssh" date = "2008-04-17" [[advisories]] name = "FreeBSD-SA-08:04.ipsec" date = "2008-02-14" [[advisories]] name = "FreeBSD-SA-08:03.sendfile" date = "2008-02-14" [[advisories]] name = "FreeBSD-SA-08:02.libc" date = "2008-01-14" [[advisories]] name = "FreeBSD-SA-08:01.pty" date = "2008-01-14" [[advisories]] name = "FreeBSD-SA-07:10.gtar" date = "2007-11-29" [[advisories]] name = "FreeBSD-SA-07:09.random" date = "2007-11-29" [[advisories]] name = "FreeBSD-SA-07:08.openssl" date = "2007-10-03" [[advisories]] name = "FreeBSD-SA-07:07.bind" date = "2007-08-01" [[advisories]] name = "FreeBSD-SA-07:06.tcpdump" date = "2007-08-01" [[advisories]] name = "FreeBSD-SA-07:05.libarchive" date = "2007-07-12" [[advisories]] name = "FreeBSD-SA-07:04.file" date = "2007-05-23" [[advisories]] name = "FreeBSD-SA-07:03.ipv6" date = "2007-04-26" [[advisories]] name = "FreeBSD-SA-07:02.bind" date = "2007-02-09" [[advisories]] name = "FreeBSD-SA-07:01.jail" date = "2007-01-11" [[advisories]] name = "FreeBSD-SA-06:26.gtar" date = "2006-12-06" [[advisories]] name = "FreeBSD-SA-06:25.kmem" date = "2006-12-06" [[advisories]] name = "FreeBSD-SA-06:24.libarchive" date = "2006-11-08" [[advisories]] name = "FreeBSD-SA-06:22.openssh" date = "2006-09-30" [[advisories]] name = "FreeBSD-SA-06:23.openssl" date = "2006-09-28" [[advisories]] name = "FreeBSD-SA-06:21.gzip" date = "2006-09-19" [[advisories]] name = "FreeBSD-SA-06:20.bind" date = "2006-09-06" [[advisories]] name = "FreeBSD-SA-06:19.openssl" date = "2006-09-06" [[advisories]] name = "FreeBSD-SA-06:18.ppp" date = "2006-08-23" [[advisories]] name = "FreeBSD-SA-06:17.sendmail" date = "2006-06-14" [[advisories]] name = "FreeBSD-SA-06:16.smbfs" date = "2006-05-31" [[advisories]] name = "FreeBSD-SA-06:15.ypserv" date = "2006-05-31" [[advisories]] name = "FreeBSD-SA-06:14.fpu" date = "2006-04-19" [[advisories]] name = "FreeBSD-SA-06:13.sendmail" date = "2006-03-22" [[advisories]] name = "FreeBSD-SA-06:12.opie" date = "2006-03-22" [[advisories]] name = "FreeBSD-SA-06:11.ipsec" date = "2006-03-22" [[advisories]] name = "FreeBSD-SA-06:10.nfs" date = "2006-03-01" [[advisories]] name = "FreeBSD-SA-06:09.openssh" date = "2006-03-01" [[advisories]] name = "FreeBSD-SA-06:08.sack" date = "2006-02-01" [[advisories]] name = "FreeBSD-SA-06:07.pf" date = "2006-01-25" [[advisories]] name = "FreeBSD-SA-06:06.kmem" date = "2006-01-25" [[advisories]] name = "FreeBSD-SA-06:05.80211" date = "2006-01-18" [[advisories]] name = "FreeBSD-SA-06:04.ipfw" date = "2006-01-11" [[advisories]] name = "FreeBSD-SA-06:03.cpio" date = "2006-01-11" [[advisories]] name = "FreeBSD-SA-06:02.ee" date = "2006-01-11" [[advisories]] name = "FreeBSD-SA-06:01.texindex" date = "2006-01-11" [[advisories]] name = "FreeBSD-SA-05:21.openssl" date = "2005-10-11" [[advisories]] name = "FreeBSD-SA-05:20.cvsbug" date = "2005-09-07" [[advisories]] name = "FreeBSD-SA-05:19.ipsec" date = "2005-07-27" [[advisories]] name = "FreeBSD-SA-05:18.zlib" date = "2005-07-27" [[advisories]] name = "FreeBSD-SA-05:17.devfs" date = "2005-07-20" [[advisories]] name = "FreeBSD-SA-05:16.zlib" date = "2005-07-06" [[advisories]] name = "FreeBSD-SA-05:15.tcp" date = "2005-06-29" [[advisories]] name = "FreeBSD-SA-05:14.bzip2" date = "2005-06-29" [[advisories]] name = "FreeBSD-SA-05:13.ipfw" date = "2005-06-29" [[advisories]] name = "FreeBSD-SA-05:12.bind9" date = "2005-06-09" [[advisories]] name = "FreeBSD-SA-05:11.gzip" date = "2005-06-09" [[advisories]] name = "FreeBSD-SA-05:10.tcpdump" date = "2005-06-09" [[advisories]] name = "FreeBSD-SA-05:09.htt" date = "2005-05-13" [[advisories]] name = "FreeBSD-SA-05:08.kmem" date = "2005-05-06" [[advisories]] name = "FreeBSD-SA-05:07.ldt" date = "2005-05-06" [[advisories]] name = "FreeBSD-SA-05:06.iir" date = "2005-05-06" [[advisories]] name = "FreeBSD-SA-05:05.cvs" date = "2005-04-22" [[advisories]] name = "FreeBSD-SA-05:04.ifconf" date = "2005-04-15" [[advisories]] name = "FreeBSD-SA-05:03.amd64" date = "2005-04-06" [[advisories]] name = "FreeBSD-SA-05:02.sendfile" date = "2005-04-04" [[advisories]] name = "FreeBSD-SA-05:01.telnet" date = "2005-03-28" [[advisories]] name = "FreeBSD-SA-04:17.procfs" date = "2004-12-01" [[advisories]] name = "FreeBSD-SA-04:16.fetch" date = "2004-11-18" [[advisories]] name = "FreeBSD-SA-04:15.syscons" date = "2004-10-04" [[advisories]] name = "FreeBSD-SA-04:14.cvs" date = "2004-09-19" [[advisories]] name = "FreeBSD-SA-04:13.linux" date = "2004-06-30" [[advisories]] name = "FreeBSD-SA-04:12.jailroute" date = "2004-06-07" [[advisories]] name = "FreeBSD-SA-04:11.msync" date = "2004-05-19" [[advisories]] name = "FreeBSD-SA-04:10.cvs" date = "2004-05-19" [[advisories]] name = "FreeBSD-SA-04:09.kadmind" date = "2004-05-05" [[advisories]] name = "FreeBSD-SA-04:08.heimdal" date = "2004-05-05" [[advisories]] name = "FreeBSD-SA-04:07.cvs" date = "2004-04-15" [[advisories]] name = "FreeBSD-SA-04:06.ipv6" date = "2004-03-29" [[advisories]] name = "FreeBSD-SA-04:05.openssl" date = "2004-03-17" [[advisories]] name = "FreeBSD-SA-04:04.tcp" date = "2004-03-02" [[advisories]] name = "FreeBSD-SA-04:03.jail" date = "2004-02-25" [[advisories]] name = "FreeBSD-SA-04:02.shmat" date = "2004-02-05" [[advisories]] name = "FreeBSD-SA-04:01.mksnap_ffs" date = "2004-01-30" [[advisories]] name = "FreeBSD-SA-03:19.bind" date = "2003-11-28" [[advisories]] name = "FreeBSD-SA-03:15.openssh" date = "2003-10-05" [[advisories]] name = "FreeBSD-SA-03:18.openssl" date = "2003-10-03" [[advisories]] name = "FreeBSD-SA-03:17.procfs" date = "2003-10-03" [[advisories]] name = "FreeBSD-SA-03:16.filedesc" date = "2003-10-02" [[advisories]] name = "FreeBSD-SA-03:14.arp" date = "2003-09-23" [[advisories]] name = "FreeBSD-SA-03:13.sendmail" date = "2003-09-17" [[advisories]] name = "FreeBSD-SA-03:12.openssh" date = "2003-09-16" [[advisories]] name = "FreeBSD-SA-03:11.sendmail" date = "2003-08-26" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1170" [[advisories]] name = "FreeBSD-SA-03:10.ibcs2" date = "2003-08-10" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1164" [[advisories]] name = "FreeBSD-SA-03:09.signal" date = "2003-08-10" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1163" [[advisories]] name = "FreeBSD-SA-03:08.realpath" date = "2003-08-03" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1158" [[advisories]] name = "FreeBSD-SN-03:02" date = "2003-04-08" [[advisories]] name = "FreeBSD-SN-03:01" date = "2003-04-07" [[advisories]] name = "FreeBSD-SA-03:07.sendmail" date = "2003-03-30" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1122" [[advisories]] name = "FreeBSD-SA-03:06.openssl" date = "2003-03-21" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1118" [[advisories]] name = "FreeBSD-SA-03:05.xdr" date = "2003-03-20" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1117" [[advisories]] name = "FreeBSD-SA-03:04.sendmail" date = "2003-03-03" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1112" [[advisories]] name = "FreeBSD-SA-03:03.syncookies" date = "2003-02-24" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1106" [[advisories]] name = "FreeBSD-SA-03:02.openssl" date = "2003-02-24" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1105" [[advisories]] name = "FreeBSD-SA-03:01.cvs" date = "2003-02-04" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1100" [[advisories]] name = "FreeBSD-SA-02:44.filedesc" date = "2003-01-07" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1090" [[advisories]] name = "FreeBSD-SA-02:43.bind" date = "2002-11-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1084" [[advisories]] name = "FreeBSD-SA-02:41.smrsh" date = "2002-11-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1082" [[advisories]] name = "FreeBSD-SA-02:42.resolv" date = "2002-11-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1083" [[advisories]] name = "FreeBSD-SA-02:40.kadmind" date = "2002-11-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1081" [[advisories]] name = "FreeBSD-SN-02:06" date = "2002-10-10" [[advisories]] name = "FreeBSD-SA-02:39.libkvm" date = "2002-09-16" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1051" [[advisories]] name = "FreeBSD-SN-02:05" date = "2002-08-28" [[advisories]] name = "FreeBSD-SA-02:38.signed-error" date = "2002-08-19" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1041" [[advisories]] name = "FreeBSD-SA-02:37.kqueue" date = "2002-08-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1033" [[advisories]] name = "FreeBSD-SA-02:36.nfs" date = "2002-08-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1032" [[advisories]] name = "FreeBSD-SA-02:35.ffs" date = "2002-08-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1031" [[advisories]] name = "FreeBSD-SA-02:33.openssl" date = "2002-08-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1023" [[advisories]] name = "FreeBSD-SA-02:34.rpc" date = "2002-08-01" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1024" [[advisories]] name = "FreeBSD-SA-02:32.pppd" date = "2002-07-31" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1022" [[advisories]] name = "FreeBSD-SA-02:31.openssh" date = "2002-07-15" [[advisories]] name = "FreeBSD-SA-02:30.ktrace" date = "2002-07-12" [[advisories]] name = "FreeBSD-SA-02:29.tcpdump" date = "2002-07-12" [[advisories]] name = "FreeBSD-SA-02:28.resolv" date = "2002-06-26" [[advisories]] name = "FreeBSD-SN-02:04" date = "2002-06-19" [[advisories]] name = "FreeBSD-SA-02:27.rc" date = "2002-05-29" [[advisories]] name = "FreeBSD-SA-02:26.accept" date = "2002-05-29" [[advisories]] name = "FreeBSD-SN-02:03" date = "2002-05-28" [[advisories]] name = "FreeBSD-SA-02:25.bzip2" date = "2002-05-20" [[advisories]] name = "FreeBSD-SA-02:24.k5su" date = "2002-05-20" [[advisories]] name = "FreeBSD-SN-02:02" date = "2002-05-13" [[advisories]] name = "FreeBSD-SA-02:23.stdio" date = "2002-04-22" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1021" [[advisories]] name = "FreeBSD-SA-02:22.mmap" date = "2002-04-18" [[advisories]] name = "FreeBSD-SA-02:21.tcpip" date = "2002-04-17" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/980" [[advisories]] name = "FreeBSD-SA-02:20.syncache" date = "2002-04-16" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/979" [[advisories]] name = "FreeBSD-SN-02:01" date = "2002-03-30" [[advisories]] name = "FreeBSD-SA-02:19.squid" date = "2002-03-26" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/960" [[advisories]] name = "FreeBSD-SA-02:18.zlib" date = "2002-03-18" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/978" [[advisories]] name = "FreeBSD-SA-02:17.mod_frontpage" date = "2002-03-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/954" [[advisories]] name = "FreeBSD-SA-02:16.netscape" date = "2002-03-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/953" [[advisories]] name = "FreeBSD-SA-02:15.cyrus-sasl" date = "2002-03-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/952" [[advisories]] name = "FreeBSD-SA-02:14.pam-pgsql" date = "2002-03-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/951" [[advisories]] name = "FreeBSD-SA-02:13.openssh" date = "2002-03-07" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/945" [[advisories]] name = "FreeBSD-SA-02:12.squid" date = "2002-02-21" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/938" [[advisories]] name = "FreeBSD-SA-02:11.snmp" date = "2002-02-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/936" [[advisories]] name = "FreeBSD-SA-02:10.rsync" date = "2002-02-06" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/928" [[advisories]] name = "FreeBSD-SA-02:09.fstatfs" date = "2002-02-06" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/927" [[advisories]] name = "FreeBSD-SA-02:08.exec" date = "2002-01-24" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/923" [[advisories]] name = "FreeBSD-SA-02:07.k5su" date = "2002-01-18" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/912" [[advisories]] name = "FreeBSD-SA-02:06.sudo" date = "2002-01-16" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/909" [[advisories]] name = "FreeBSD-SA-02:05.pine" date = "2002-01-04" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/894" [[advisories]] name = "FreeBSD-SA-02:04.mutt" date = "2002-01-04" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/893" [[advisories]] name = "FreeBSD-SA-02:03.mod_auth_pgsql" date = "2002-01-04" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/892" [[advisories]] name = "FreeBSD-SA-02:02.pw" date = "2002-01-04" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/891" [[advisories]] name = "FreeBSD-SA-02:01.pkg_add" date = "2002-01-04" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/898" [[advisories]] name = "FreeBSD-SA-01:64.wu-ftpd" date = "2001-12-04" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/870" [[advisories]] name = "FreeBSD-SA-01:63.openssh" date = "2001-12-02" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/871" [[advisories]] name = "FreeBSD-SA-01:62.uucp" date = "2001-10-08" [[advisories]] name = "FreeBSD-SA-01:61.squid" date = "2001-10-08" [[advisories]] name = "FreeBSD-SA-01:60.procmail" date = "2001-09-24" [[advisories]] name = "FreeBSD-SA-01:59.rmuser" date = "2001-09-04" [[advisories]] name = "FreeBSD-SA-01:58.lpd" date = "2001-08-30" [[advisories]] name = "FreeBSD-SA-01:57.sendmail" date = "2001-08-27" [[advisories]] name = "FreeBSD-SA-01:56.tcp_wrappers" date = "2001-08-23" [[advisories]] name = "FreeBSD-SA-01:55.procfs" date = "2001-08-21" [[advisories]] name = "FreeBSD-SA-01:54.ports-telnetd" date = "2001-08-20" [[advisories]] name = "FreeBSD-SA-01:53.ipfw" date = "2001-08-17" [[advisories]] name = "FreeBSD-SA-01:52.fragment" date = "2001-08-06" [[advisories]] name = "FreeBSD-SA-01:51.openssl" date = "2001-07-30" [[advisories]] name = "FreeBSD-SA-01:50.windowmaker" date = "2001-07-27" [[advisories]] name = "FreeBSD-SA-01:49.telnetd" date = "2001-07-23" [[advisories]] name = "FreeBSD-SA-01:48.tcpdump" date = "2001-07-17" [[advisories]] name = "FreeBSD-SA-01:47.xinetd" date = "2001-07-10" [[advisories]] name = "FreeBSD-SA-01:46.w3m" date = "2001-07-10" [[advisories]] name = "FreeBSD-SA-01:45.samba" date = "2001-07-10" [[advisories]] name = "FreeBSD-SA-01:44.gnupg" date = "2001-07-10" [[advisories]] name = "FreeBSD-SA-01:43.fetchmail" date = "2001-07-10" [[advisories]] name = "FreeBSD-SA-01:42.signal" date = "2001-07-10" [[advisories]] name = "FreeBSD-SA-01:41.hanterm" date = "2001-07-09" [[advisories]] name = "FreeBSD-SA-01:40.fts" date = "2001-06-04" [[advisories]] name = "FreeBSD-SA-01:39.tcp-isn" date = "2001-05-02" [[advisories]] name = "FreeBSD-SA-01:38.sudo" date = "2001-04-23" [[advisories]] name = "FreeBSD-SA-01:37.slrn" date = "2001-04-23" [[advisories]] name = "FreeBSD-SA-01:36.samba" date = "2001-04-23" [[advisories]] name = "FreeBSD-SA-01:35.licq" date = "2001-04-23" [[advisories]] name = "FreeBSD-SA-01:34.hylafax" date = "2001-04-23" [[advisories]] name = "FreeBSD-SA-01:33.ftpd-glob" date = "2001-04-17" [[advisories]] name = "FreeBSD-SA-01:32.ipfilter" date = "2001-04-16" [[advisories]] name = "FreeBSD-SA-01:31.ntpd" date = "2001-04-06" [[advisories]] name = "FreeBSD-SA-01:30.ufs-ext2fs" date = "2001-03-22" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/738" [[advisories]] name = "FreeBSD-SA-01:29.rwhod" date = "2001-03-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/732" [[advisories]] name = "FreeBSD-SA-01:28.timed" date = "2001-03-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/731" [[advisories]] name = "FreeBSD-SA-01:27.cfengine" date = "2001-03-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/730" [[advisories]] name = "FreeBSD-SA-01:26.interbase" date = "2001-03-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/729" [[advisories]] name = "FreeBSD-SA-01:23.icecast" date = "2001-03-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/728" [[advisories]] name = "FreeBSD-SA-01:25.kerberosIV" date = "2001-02-14" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/716" [[advisories]] name = "FreeBSD-SA-01:24.ssh" date = "2001-02-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/715" [[advisories]] name = "FreeBSD-SA-01:22.dc20ctrl" date = "2001-02-07" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/714" [[advisories]] name = "FreeBSD-SA-01:21.ja-elvis" date = "2001-02-07" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/713" [[advisories]] name = "FreeBSD-SA-01:20.mars_nwe" date = "2001-02-07" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/712" [[advisories]] name = "FreeBSD-SA-01:19.ja-klock" date = "2001-02-07" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/707" [[advisories]] name = "FreeBSD-SA-01:18.bind" date = "2001-01-31" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/706" [[advisories]] name = "FreeBSD-SA-01:17.exmh" date = "2001-01-29" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/705" [[advisories]] name = "FreeBSD-SA-01:16.mysql" date = "2001-01-29" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/704" [[advisories]] name = "FreeBSD-SA-01:15.tinyproxy" date = "2001-01-29" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/703" [[advisories]] name = "FreeBSD-SA-01:14.micq" date = "2001-01-29" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/702" [[advisories]] name = "FreeBSD-SA-01:13.sort" date = "2001-01-29" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/701" [[advisories]] name = "FreeBSD-SA-01:12.periodic" date = "2001-01-29" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/700" [[advisories]] name = "FreeBSD-SA-01:11.inetd" date = "2001-01-29" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/699" [[advisories]] name = "FreeBSD-SA-01:10.bind" date = "2001-01-23" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/698" [[advisories]] name = "FreeBSD-SA-01:09.crontab" date = "2001-01-23" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/697" [[advisories]] name = "FreeBSD-SA-01:08.ipfw" date = "2001-01-23" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/696" [[advisories]] name = "FreeBSD-SA-01:07.xfree86" date = "2001-01-23" [[advisories]] name = "FreeBSD-SA-01:06.zope" date = "2001-01-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/669" [[advisories]] name = "FreeBSD-SA-01:05.stunnel" date = "2001-01-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/668" [[advisories]] name = "FreeBSD-SA-01:04.joe" date = "2001-01-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/667" [[advisories]] name = "FreeBSD-SA-01:03.bash1" date = "2001-01-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/666" [[advisories]] name = "FreeBSD-SA-01:02.syslog-ng" date = "2001-01-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/665" [[advisories]] name = "FreeBSD-SA-01:01.openssh" date = "2001-01-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/664" [[advisories]] name = "FreeBSD-SA-00:81.ethereal" date = "2000-12-20" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/651" [[advisories]] name = "FreeBSD-SA-00:80.halflifeserver" date = "2000-12-20" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/650" [[advisories]] name = "FreeBSD-SA-00:79.oops" date = "2000-12-20" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/649" [[advisories]] name = "FreeBSD-SA-00:78.bitchx" date = "2000-12-20" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/648" [[advisories]] name = "FreeBSD-SA-00:77.procfs" date = "2000-12-18" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/647" [[advisories]] name = "FreeBSD-SA-00:76.tcsh-csh" date = "2000-11-20" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/628" [[advisories]] name = "FreeBSD-SA-00:75.php" date = "2000-11-20" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/627" [[advisories]] name = "FreeBSD-SA-00:74.gaim" date = "2000-11-20" [[advisories]] name = "FreeBSD-SA-00:73.thttpd" date = "2000-11-20" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/626" [[advisories]] name = "FreeBSD-SA-00:72.curl" date = "2000-11-20" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/625" [[advisories]] name = "FreeBSD-SA-00:71.mgetty" date = "2000-11-20" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/624" [[advisories]] name = "FreeBSD-SA-00:70.ppp-nat" date = "2000-11-14" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/623" [[advisories]] name = "FreeBSD-SA-00:69.telnetd" date = "2000-11-14" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/622" [[advisories]] name = "FreeBSD-SA-00:68.ncurses" date = "2000-11-13" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/621" [[advisories]] name = "FreeBSD-SA-00:67.gnupg" date = "2000-11-10" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/620" [[advisories]] name = "FreeBSD-SA-00:66.netscape" date = "2000-11-06" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/619" [[advisories]] name = "FreeBSD-SA-00:65.xfce" date = "2000-11-06" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/618" [[advisories]] name = "FreeBSD-SA-00:64.global" date = "2000-11-06" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/617" [[advisories]] name = "FreeBSD-SA-00:63.getnameinfo" date = "2000-11-01" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/589" [[advisories]] name = "FreeBSD-SA-00:62.top" date = "2000-11-01" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/616" [[advisories]] name = "FreeBSD-SA-00:61.tcpdump" date = "2000-10-31" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/615" [[advisories]] name = "FreeBSD-SA-00:60.boa" date = "2000-10-30" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/586" [[advisories]] name = "FreeBSD-SA-00:59.pine" date = "2000-10-30" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/585" [[advisories]] name = "FreeBSD-SA-00:58.chpass" date = "2000-10-30" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/584" [[advisories]] name = "FreeBSD-SA-00:57.muh" date = "2000-10-13" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/570" [[advisories]] name = "FreeBSD-SA-00:56.lprng" date = "2000-10-13" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/569" [[advisories]] name = "FreeBSD-SA-00:55.xpdf" date = "2000-10-13" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/568" [[advisories]] name = "FreeBSD-SA-00:54.fingerd" date = "2000-10-13" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/567" [[advisories]] name = "FreeBSD-SA-00:52.tcp-iss" date = "2000-10-06" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/561" [[advisories]] name = "FreeBSD-SA-00:53.catopen" date = "2000-09-27" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/562" [[advisories]] name = "FreeBSD-SA-00:51.mailman" date = "2000-09-13" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/550" [[advisories]] name = "FreeBSD-SA-00:50.listmanager" date = "2000-09-13" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/549" [[advisories]] name = "FreeBSD-SA-00:49.eject" date = "2000-09-13" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/548" [[advisories]] name = "FreeBSD-SA-00:48.xchat" date = "2000-09-13" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/547" [[advisories]] name = "FreeBSD-SA-00:47.pine" date = "2000-09-13" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/546" [[advisories]] name = "FreeBSD-SA-00:46.screen" date = "2000-09-13" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/545" [[advisories]] name = "FreeBSD-SA-00:45.esound" date = "2000-08-31" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/526" [[advisories]] name = "FreeBSD-SA-00:44.xlock" date = "2000-08-28" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/523" [[advisories]] name = "FreeBSD-SA-00:43.brouted" date = "2000-08-28" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/520" [[advisories]] name = "FreeBSD-SA-00:42.linux" date = "2000-08-28" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/530" [[advisories]] name = "FreeBSD-SA-00:41.elf" date = "2000-08-28" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/527" [[advisories]] name = "FreeBSD-SA-00:40.mopd" date = "2000-08-28" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/521" [[advisories]] name = "FreeBSD-SA-00:39.netscape" date = "2000-08-28" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/528" [[advisories]] name = "FreeBSD-SA-00:38.zope" date = "2000-08-14" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/525" [[advisories]] name = "FreeBSD-SA-00:37.cvsweb" date = "2000-08-14" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/524" [[advisories]] name = "FreeBSD-SA-00:36.ntop" date = "2000-08-14" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/531" [[advisories]] name = "FreeBSD-SA-00:35.proftpd" date = "2000-08-14" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/522" [[advisories]] name = "FreeBSD-SA-00:34.dhclient" date = "2000-08-14" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/529" [[advisories]] name = "FreeBSD-SA-00:33.kerberosIV" date = "2000-07-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/488" [[advisories]] name = "FreeBSD-SA-00:32.bitchx" date = "2000-07-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/487" [[advisories]] name = "FreeBSD-SA-00:31.canna" date = "2000-07-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/486" [[advisories]] name = "FreeBSD-SA-00:30.openssh" date = "2000-07-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/485" [[advisories]] name = "FreeBSD-SA-00:29.wu-ftpd" date = "2000-07-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/489" [[advisories]] name = "FreeBSD-SA-00:28.majordomo" date = "2000-07-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/484" [[advisories]] name = "FreeBSD-SA-00:27.XFree86-4" date = "2000-07-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/483" [[advisories]] name = "FreeBSD-SA-00:26.popper" date = "2000-07-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/482" [[advisories]] name = "FreeBSD-SA-00:24.libedit" date = "2000-07-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/481" [[advisories]] name = "FreeBSD-SA-00:23.ip-options" date = "2000-06-19" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/480" [[advisories]] name = "FreeBSD-SA-00:25.alpha-random" date = "2000-06-12" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/473" [[advisories]] name = "FreeBSD-SA-00:22.apsfilter" date = "2000-06-07" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/461" [[advisories]] name = "FreeBSD-SA-00:21.ssh" date = "2000-06-07" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/459" [[advisories]] name = "FreeBSD-SA-00:20.krb5" date = "2000-05-26" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/452" [[advisories]] name = "FreeBSD-SA-00:19.semconfig" date = "2000-05-23" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/451" [[advisories]] name = "FreeBSD-SA-00:18.gnapster.knapster" date = "2000-05-09" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/429" [[advisories]] name = "FreeBSD-SA-00:17.libmytinfo" date = "2000-05-09" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/442" [[advisories]] name = "FreeBSD-SA-00:16.golddig" date = "2000-05-09" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/439" [[advisories]] name = "FreeBSD-SA-00:15.imap-uw" date = "2000-04-24" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/438" [[advisories]] name = "FreeBSD-SA-00:14.imap-uw" date = "2000-04-24" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/441" [[advisories]] name = "FreeBSD-SA-00:13.generic-nqs" date = "2000-04-19" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/437" [[advisories]] name = "FreeBSD-SA-00:12.healthd" date = "2000-04-10" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/436" [[advisories]] name = "FreeBSD-SA-00:11.ircii" date = "2000-04-10" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/440" [[advisories]] name = "FreeBSD-SA-00:10.orville-write" date = "2000-03-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/408" [[advisories]] name = "FreeBSD-SA-00:09.mtr" date = "2000-03-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/408" [[advisories]] name = "FreeBSD-SA-00:08.lynx" date = "2000-03-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/407" [[advisories]] name = "FreeBSD-SA-00:07.mh" date = "2000-03-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/411" [[advisories]] name = "FreeBSD-SA-00:06.htdig" date = "2000-03-01" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/403" [[advisories]] name = "FreeBSD-SA-00:05.mysql" date = "2000-02-28" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/402" [[advisories]] name = "FreeBSD-SA-00:04.delegate" date = "2000-02-19" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/392" [[advisories]] name = "FreeBSD-SA-00:03.asmon" date = "2000-02-19" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/391" [[advisories]] name = "FreeBSD-SA-00:02.procfs" date = "2000-01-24" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/380" [[advisories]] name = "FreeBSD-SA-00:01.make" date = "2000-01-19" [[advisories]] name = "FreeBSD-SA-99:06.amd" date = "1999-09-16" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/318" [[advisories]] name = "FreeBSD-SA-99:05.fts" date = "1999-09-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/313" [[advisories]] name = "FreeBSD-SA-99:04.core" date = "1999-09-15" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/312" [[advisories]] name = "FreeBSD-SA-99:03.ftpd" date = "1999-09-05" link = "http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/311" [[advisories]] name = "FreeBSD-SA-99:02.profil" date = "1999-09-04" [[advisories]] name = "FreeBSD-SA-99:01.chflags" date = "1999-09-04" [[advisories]] name = "FreeBSD-SA-98:08.fragment" date = "1998-11-04" [[advisories]] name = "FreeBSD-SA-98:07.rst" date = "1998-10-13" [[advisories]] name = "FreeBSD-SA-98:06.icmp" date = "1998-06-10" [[advisories]] name = "FreeBSD-SA-98:05.nfs" date = "1998-06-04" [[advisories]] name = "FreeBSD-SA-98:04.mmap" date = "1998-06-02" [[advisories]] name = "FreeBSD-SA-98:03.ttcp" date = "1998-05-14" [[advisories]] name = "FreeBSD-SA-98:02.mmap" date = "1998-03-12" [[advisories]] name = "FreeBSD-SA-97:06.f00f" date = "1997-12-09" [[advisories]] name = "FreeBSD-SA-98:01.land" date = "1997-12-01" [[advisories]] name = "FreeBSD-SA-97:05.open" date = "1997-10-29" [[advisories]] name = "FreeBSD-SA-97:04.procfs" date = "1997-08-19" [[advisories]] name = "FreeBSD-SA-97:03.sysinstall" date = "1997-04-07" [[advisories]] name = "FreeBSD-SA-97:02.lpd" date = "1997-03-26" [[advisories]] name = "FreeBSD-SA-97:01.setlocale" date = "1997-02-05" [[advisories]] name = "FreeBSD-SA-96:21.talkd" date = "1997-01-18" [[advisories]] name = "FreeBSD-SA-96:20.stack-overflow" date = "1996-12-16" [[advisories]] name = "FreeBSD-SA-96:19.modstat" date = "1996-12-10" [[advisories]] name = "FreeBSD-SA-96:18.lpr" date = "1996-11-25" [[advisories]] name = "FreeBSD-SA-96:17.rzsz" date = "1996-07-16" [[advisories]] name = "FreeBSD-SA-96:16.rdist" date = "1996-07-12" [[advisories]] name = "FreeBSD-SA-96:15.ppp" date = "1996-07-04" [[advisories]] name = "FreeBSD-SA-96:12.perl" date = "1996-06-28" [[advisories]] name = "FreeBSD-SA-96:14.ipfw" date = "1996-06-24" [[advisories]] name = "FreeBSD-SA-96:13.comsat" date = "1996-06-05" [[advisories]] name = "FreeBSD-SA-96:11.man" date = "1996-05-21" [[advisories]] name = "FreeBSD-SA-96:10.mount_union" date = "1996-05-17" [[advisories]] name = "FreeBSD-SA-96:09.vfsload" date = "1996-05-17" [[advisories]] name = "FreeBSD-SA-96:02.apache" date = "1996-04-22" [[advisories]] name = "FreeBSD-SA-96:08.syslog" date = "1996-04-21" [[advisories]] name = "FreeBSD-SA-96:01.sliplogin" date = "1996-04-21" [[advisories]] name = "FreeBSD-SA-96:03.sendmail-suggestion" date = "1996-04-20" diff --git a/website/data/security/errata.toml b/website/data/security/errata.toml index b4a4a7c26d..b1b74bf67c 100644 --- a/website/data/security/errata.toml +++ b/website/data/security/errata.toml @@ -1,831 +1,847 @@ # Sort errata notices by year, month and day # $FreeBSD$ +[[notices]] +name = "FreeBSD-EN-23:04.ixgbe" +date = "2023-02-08" + +[[notices]] +name = "FreeBSD-EN-23:03.ena" +date = "2023-02-08" + +[[notices]] +name = "FreeBSD-EN-23:02.sdhci" +date = "2023-02-08" + +[[notices]] +name = "FreeBSD-EN-23:01.tzdata" +date = "2023-02-08" + [[notices]] name = "FreeBSD-EN-22:28.heimdal" date = "2022-11-29" [[notices]] name = "FreeBSD-EN-22:27.loader" date = "2022-11-01" [[notices]] name = "FreeBSD-EN-22:26.cam" date = "2022-11-01" [[notices]] name = "FreeBSD-EN-22:25.tcp" date = "2022-11-01" [[notices]] name = "FreeBSD-EN-22:24.zfs" date = "2022-11-01" [[notices]] name = "FreeBSD-EN-22:23.vm" date = "2022-11-01" [[notices]] name = "FreeBSD-EN-22:22.tzdata" date = "2022-11-01" [[notices]] name = "FreeBSD-EN-22:21.zfs" date = "2022-11-01" [[notices]] name = "FreeBSD-EN-22:20.tzdata" date = "2022-08-30" [[notices]] name = "FreeBSD-EN-22:19.pam_exec" date = "2022-08-09" [[notices]] name = "FreeBSD-EN-22:18.wifi" date = "2022-08-09" [[notices]] name = "FreeBSD-EN-22:17.cam" date = "2022-08-09" [[notices]] name = "FreeBSD-EN-22:16.kqueue" date = "2022-08-09" [[notices]] name = "FreeBSD-EN-22:15.pf" date = "2022-04-06" [[notices]] name = "FreeBSD-EN-22:14.tzdata" date = "2022-03-22" [[notices]] name = "FreeBSD-EN-22:13.zfs" date = "2022-03-21" [[notices]] name = "FreeBSD-EN-22:12.zfs" date = "2022-03-15" [[notices]] name = "FreeBSD-EN-22:11.zfs" date = "2022-03-15" [[notices]] name = "FreeBSD-EN-22:10.zfs" date = "2022-03-15" [[notices]] name = "FreeBSD-EN-22:09.freebsd-update" date = "2022-03-15" [[notices]] name = "FreeBSD-EN-22:08.i386" date = "2022-02-01" [[notices]] name = "FreeBSD-EN-22:07.la57" date = "2022-02-01" [[notices]] name = "FreeBSD-EN-22:06.libalias" date = "2022-01-11" [[notices]] name = "FreeBSD-EN-22:05.tail" date = "2022-01-11" [[notices]] name = "FreeBSD-EN-22:04.pcid" date = "2022-01-11" [[notices]] name = "FreeBSD-EN-22:03.hyperv" date = "2022-01-11" [[notices]] name = "FreeBSD-EN-22:02.xsave" date = "2022-01-11" [[notices]] name = "FreeBSD-EN-22:01.fsck_ffs" date = "2022-01-11" [[notices]] name = "FreeBSD-EN-21:29.tzdata" date = "2021-11-03" [[notices]] name = "FreeBSD-EN-21:28.vmci" date = "2021-11-03" [[notices]] name = "FreeBSD-EN-21:27.caroot" date = "2021-11-03" [[notices]] name = "FreeBSD-EN-21:26.libevent" date = "2021-11-03" [[notices]] name = "FreeBSD-EN-21:25.bhyve" date = "2021-08-24" [[notices]] name = "FreeBSD-EN-21:24.libcrypto" date = "2021-08-24" [[notices]] name = "FreeBSD-EN-21:23.virtio_blk" date = "2021-08-24" [[notices]] name = "FreeBSD-EN-21:22.linux_futex" date = "2021-06-29" [[notices]] name = "FreeBSD-EN-21:21.ipfw" date = "2021-06-29" [[notices]] name = "FreeBSD-EN-21:20.vlan" date = "2021-06-29" [[notices]] name = "FreeBSD-EN-21:19.libcasper" date = "2021-06-29" [[notices]] name = "FreeBSD-EN-21:18.libc++" date = "2021-06-29" [[notices]] name = "FreeBSD-EN-21:17.libradius" date = "2021-06-01" [[notices]] name = "FreeBSD-EN-21:16.bc" date = "2021-05-26" [[notices]] name = "FreeBSD-EN-21:15.virtio" date = "2021-05-26" [[notices]] name = "FreeBSD-EN-21:14.pms" date = "2021-05-26" [[notices]] name = "FreeBSD-EN-21:13.mpt" date = "2021-05-26" [[notices]] name = "FreeBSD-EN-21:12.divert" date = "2021-05-26" [[notices]] name = "FreeBSD-EN-21:11.aesni" date = "2021-05-26" [[notices]] name = "FreeBSD-EN-21:10.lldb" date = "2021-04-06" [[notices]] name = "FreeBSD-EN-21:09.pf" date = "2021-04-06" [[notices]] name = "FreeBSD-EN-21:08.freebsd-update" date = "2021-02-24" [[notices]] name = "FreeBSD-EN-21:07.caroot" date = "2021-02-24" [[notices]] name = "FreeBSD-EN-21:06.microcode" date = "2021-02-24" [[notices]] name = "FreeBSD-EN-21:05.libatomic" date = "2021-01-29" [[notices]] name = "FreeBSD-EN-21:04.zfs" date = "2021-01-29" [[notices]] name = "FreeBSD-EN-21:03.vnet" date = "2021-01-29" [[notices]] name = "FreeBSD-EN-21:02.extattr" date = "2021-01-29" [[notices]] name = "FreeBSD-EN-21:01.tzdata" date = "2021-01-29" [[notices]] name = "FreeBSD-EN-20:22.callout" date = "2020-12-01" [[notices]] name = "FreeBSD-EN-20:21.ipfw" date = "2020-12-01" [[notices]] name = "FreeBSD-EN-20:20.tzdata" date = "2020-12-01" [[notices]] name = "FreeBSD-EN-20:19.audit" date = "2020-12-01" [[notices]] name = "FreeBSD-EN-20:18.getfsstat" date = "2020-09-02" [[notices]] name = "FreeBSD-EN-20:17.linuxthread" date = "2020-09-02" [[notices]] name = "FreeBSD-EN-20:16.vmx" date = "2020-08-05" [[notices]] name = "FreeBSD-EN-20:15.mps" date = "2020-07-08" [[notices]] name = "FreeBSD-EN-20:14.linuxkpi" date = "2020-07-08" [[notices]] name = "FreeBSD-EN-20:13.bhyve" date = "2020-07-08" [[notices]] name = "FreeBSD-EN-20:12.iflib" date = "2020-06-09" [[notices]] name = "FreeBSD-EN-20:11.ena" date = "2020-06-09" [[notices]] name = "FreeBSD-EN-20:10.build" date = "2020-05-12" [[notices]] name = "FreeBSD-EN-20:09.igb" date = "2020-05-12" [[notices]] name = "FreeBSD-EN-20:08.tzdata" date = "2020-05-12" [[notices]] name = "FreeBSD-EN-20:07.quotad" date = "2020-04-21" [[notices]] name = "FreeBSD-EN-20:06.ipv6" date = "2020-03-19" [[notices]] name = "FreeBSD-EN-20:05.mlx5en" date = "2020-03-19" [[notices]] name = "FreeBSD-EN-20:04.pfctl" date = "2020-03-19" [[notices]] name = "FreeBSD-EN-20:03.sshd" date = "2020-03-19" [[notices]] name = "FreeBSD-EN-20:02.nmount" date = "2020-01-28" [[notices]] name = "FreeBSD-EN-20:01.ssp" date = "2020-01-28" [[notices]] name = "FreeBSD-EN-19:19.loader" date = "2019-11-12" [[notices]] name = "FreeBSD-EN-19:18.tzdata" date = "2019-10-23" [[notices]] name = "FreeBSD-EN-19:17.ipfw" date = "2019-08-20" [[notices]] name = "FreeBSD-EN-19:16.bhyve" date = "2019-08-20" [[notices]] name = "FreeBSD-EN-19:15.libunwind" date = "2019-08-06" [[notices]] name = "FreeBSD-EN-19:14.epoch" date = "2019-08-06" [[notices]] name = "FreeBSD-EN-19:13.mds" date = "2019-07-24" [[notices]] name = "FreeBSD-EN-19:12.tzdata" date = "2019-07-02" [[notices]] name = "FreeBSD-EN-19:11.net" date = "2019-06-19" [[notices]] name = "FreeBSD-EN-19:10.scp" date = "2019-05-14" [[notices]] name = "FreeBSD-EN-19:09.xinstall" date = "2019-05-14" [[notices]] name = "FreeBSD-EN-19:08.tzdata" date = "2019-05-14" [[notices]] name = "FreeBSD-EN-19:07.lle" date = "2019-02-05" [[notices]] name = "FreeBSD-EN-19:06.dtrace" date = "2019-02-05" [[notices]] name = "FreeBSD-EN-19:05.kqueue" date = "2019-01-09" [[notices]] name = "FreeBSD-EN-19:04.tzdata" date = "2019-01-09" [[notices]] name = "FreeBSD-EN-19:03.sqlite" date = "2019-01-09" [[notices]] name = "FreeBSD-EN-19:02.tcp" date = "2019-01-09" [[notices]] name = "FreeBSD-EN-19:01.cc_cubic" date = "2019-01-09" [[notices]] name = "FreeBSD-EN-18:18.zfs" date = "2018-12-19" [[notices]] name = "FreeBSD-EN-18:17.vm" date = "2018-12-19" [[notices]] name = "FreeBSD-EN-18:16.ptrace" date = "2018-12-19" [[notices]] name = "FreeBSD-EN-18:15.loader" date = "2018-11-27" [[notices]] name = "FreeBSD-EN-18:14.tzdata" date = "2018-11-27" [[notices]] name = "FreeBSD-EN-18:13.icmp" date = "2018-11-27" [[notices]] name = "FreeBSD-EN-18:12.mem" date = "2018-09-27" [[notices]] name = "FreeBSD-EN-18:11.listen" date = "2018-09-27" [[notices]] name = "FreeBSD-EN-18:10.syscall" date = "2018-09-27" [[notices]] name = "FreeBSD-EN-18:09.ip" date = "2018-09-27" [[notices]] name = "FreeBSD-EN-18:08.lazyfpu" date = "2018-09-12" [[notices]] name = "FreeBSD-EN-18:07.pmap" date = "2018-06-21" [[notices]] name = "FreeBSD-EN-18:06.tzdata" date = "2018-05-08" [[notices]] name = "FreeBSD-EN-18:05.mem" date = "2018-05-08" [[notices]] name = "FreeBSD-EN-18:04.mem" date = "2018-04-04" [[notices]] name = "FreeBSD-EN-18:03.tzdata" date = "2018-04-04" [[notices]] name = "FreeBSD-EN-18:02.file" date = "2018-03-07" [[notices]] name = "FreeBSD-EN-18:01.tzdata" date = "2018-03-07" [[notices]] name = "FreeBSD-EN-17:09.tzdata" date = "2017-11-02" [[notices]] name = "FreeBSD-EN-17:08.pf" date = "2017-08-10" [[notices]] name = "FreeBSD-EN-17:07.vnet" date = "2017-08-10" [[notices]] name = "FreeBSD-EN-17:06.hyperv" date = "2017-07-12" [[notices]] name = "FreeBSD-EN-17:05.xen" date = "2017-04-12" [[notices]] name = "FreeBSD-EN-17:04.mandoc" date = "2017-02-23" [[notices]] name = "FreeBSD-EN-17:03.hyperv" date = "2017-02-23" [[notices]] name = "FreeBSD-EN-17:02.yp" date = "2017-02-23" [[notices]] name = "FreeBSD-EN-17:01.pcie" date = "2017-02-23" [[notices]] name = "FreeBSD-EN-16:21.localedef" date = "2016-12-06" [[notices]] name = "FreeBSD-EN-16:20.tzdata" date = "2016-12-06" [[notices]] name = "FreeBSD-EN-16:19.tzcode" date = "2016-12-06" [[notices]] name = "FreeBSD-EN-16:18.loader" date = "2016-10-25" [[notices]] name = "FreeBSD-EN-16:17.vm" date = "2016-10-25" [[notices]] name = "FreeBSD-EN-16:16.hv_storvsc" date = "2016-08-12" [[notices]] name = "FreeBSD-EN-16:15.vmbus" date = "2016-08-12" [[notices]] name = "FreeBSD-EN-16:14.hv_storvsc" date = "2016-08-12" [[notices]] name = "FreeBSD-EN-16:13.vmbus" date = "2016-08-12" [[notices]] name = "FreeBSD-EN-16:12.hv_storvsc" date = "2016-08-12" [[notices]] name = "FreeBSD-EN-16:11.vmbus" date = "2016-08-12" [[notices]] name = "FreeBSD-EN-16:10.dhclient" date = "2016-08-12" [[notices]] name = "FreeBSD-EN-16:09.freebsd-update" date = "2016-07-25" [[notices]] name = "FreeBSD-EN-16:08.zfs" date = "2016-05-04" [[notices]] name = "FreeBSD-EN-16:07.ipi" date = "2016-05-04" [[notices]] name = "FreeBSD-EN-16:06.libc" date = "2016-05-04" [[notices]] name = "FreeBSD-EN-16:05.hv_netvsc" date = "2016-03-16" [[notices]] name = "FreeBSD-EN-16:04.hyperv" date = "2016-03-16" [[notices]] name = "FreeBSD-EN-16:03.yplib" date = "2016-01-14" [[notices]] name = "FreeBSD-EN-16:02.pf" date = "2016-01-14" [[notices]] name = "FreeBSD-EN-16:01.filemon" date = "2016-01-14" [[notices]] name = "FreeBSD-EN-15:20.vm" date = "2015-11-04" [[notices]] name = "FreeBSD-EN-15:19.kqueue" date = "2015-11-04" [[notices]] name = "FreeBSD-EN-15:18.pkg" date = "2015-09-16" [[notices]] name = "FreeBSD-EN-15:17.libc" date = "2015-09-16" [[notices]] name = "FreeBSD-EN-15:16.pw" date = "2015-09-16" [[notices]] name = "FreeBSD-EN-15:15.pkg" date = "2015-08-25" [[notices]] name = "FreeBSD-EN-15:14.ixgbe" date = "2015-08-25" [[notices]] name = "FreeBSD-EN-15:13.vidcontrol" date = "2015-08-18" [[notices]] name = "FreeBSD-EN-15:12.netstat" date = "2015-08-18" [[notices]] name = "FreeBSD-EN-15:11.toolchain" date = "2015-08-18" [[notices]] name = "FreeBSD-EN-15:10.iconv" date = "2015-06-30" [[notices]] name = "FreeBSD-EN-15:09.xlocale" date = "2015-06-30" [[notices]] name = "FreeBSD-EN-15:08.sendmail" date = "2015-06-18" [[notices]] name = "FreeBSD-EN-15:07.zfs" date = "2015-06-09" [[notices]] name = "FreeBSD-EN-15:06.file" date = "2015-06-09" [[notices]] name = "FreeBSD-EN-15:05.ufs" date = "2015-05-13" [[notices]] name = "FreeBSD-EN-15:04.freebsd-update" date = "2015-05-13" [[notices]] name = "FreeBSD-EN-15:03.freebsd-update" date = "2015-02-25" [[notices]] name = "FreeBSD-EN-15:02.openssl" date = "2015-02-25" [[notices]] name = "FreeBSD-EN-15:01.vt" date = "2015-02-25" [[notices]] name = "FreeBSD-EN-14:13.freebsd-update" date = "2014-12-23" [[notices]] name = "FreeBSD-EN-14:12.zfs" date = "2014-11-04" [[notices]] name = "FreeBSD-EN-14:11.crypt" date = "2014-10-22" [[notices]] name = "FreeBSD-EN-14:10.tzdata" date = "2014-10-22" [[notices]] name = "FreeBSD-EN-14:09.jail" date = "2014-07-08" [[notices]] name = "FreeBSD-EN-14:08.heimdal" date = "2014-06-24" [[notices]] name = "FreeBSD-EN-14:07.pmap" date = "2014-06-24" [[notices]] name = "FreeBSD-EN-14:06.exec" date = "2014-06-03" [[notices]] name = "FreeBSD-EN-14:05.ciss" date = "2014-05-13" [[notices]] name = "FreeBSD-EN-14:04.kldxref" date = "2014-05-13" [[notices]] name = "FreeBSD-EN-14:03.pkg" date = "2014-05-13" [[notices]] name = "FreeBSD-EN-14:02.mmap" date = "2014-01-14" [[notices]] name = "FreeBSD-EN-14:01.random" date = "2014-01-14" [[notices]] name = "FreeBSD-EN-13:05.freebsd-update" date = "2013-11-28" [[notices]] name = "FreeBSD-EN-13:04.freebsd-update" date = "2013-10-26" [[notices]] name = "FreeBSD-EN-13:03.mfi" date = "2013-08-22" [[notices]] name = "FreeBSD-EN-13:01.fxp" date = "2013-06-28" [[notices]] name = "FreeBSD-EN-13:02.vtnet" date = "2013-06-28" [[notices]] name = "FreeBSD-EN-12:02.ipv6refcount" date = "2012-06-12" [[notices]] name = "FreeBSD-EN-12:01.freebsd-update" date = "2012-01-04" [[notices]] name = "FreeBSD-EN-10:02.sched_ule" date = "2010-02-27" [[notices]] name = "FreeBSD-EN-10:01.freebsd" date = "2010-01-06" [[notices]] name = "FreeBSD-EN-09:05.null" date = "2009-10-02" [[notices]] name = "FreeBSD-EN-09:04.fork" date = "2009-06-24" [[notices]] name = "FreeBSD-EN-09:03.fxp" date = "2009-06-24" [[notices]] name = "FreeBSD-EN-09:02.bce" date = "2009-06-24" [[notices]] name = "FreeBSD-EN-09:01.kenv" date = "2009-03-23" [[notices]] name = "FreeBSD-EN-08:02.tcp" date = "2008-06-19" [[notices]] name = "FreeBSD-EN-08:01.libpthread" date = "2008-04-17" [[notices]] name = "FreeBSD-EN-07:05.freebsd-update" date = "2007-03-15" [[notices]] name = "FreeBSD-EN-07:04.zoneinfo" date = "2007-02-28" [[notices]] name = "FreeBSD-EN-07:03.rc.d_jail" date = "2007-02-28" [[notices]] name = "FreeBSD-EN-07:02.net" date = "2007-02-28" [[notices]] name = "FreeBSD-EN-07:01.nfs" date = "2007-02-14" [[notices]] name = "FreeBSD-EN-06:02.net" date = "2006-08-28" [[notices]] name = "FreeBSD-EN-06:01.jail" date = "2006-07-07" [[notices]] name = "FreeBSD-EN-05:04.nfs" date = "2005-12-19" [[notices]] name = "FreeBSD-EN-05:03.ipi" date = "2005-01-16" [[notices]] name = "FreeBSD-EN-05:02.sk" date = "2005-01-06" [[notices]] name = "FreeBSD-EN-05:01.nfs" date = "2005-01-05" [[notices]] name = "FreeBSD-EN-04:01.twe" date = "2004-06-28" diff --git a/website/static/security/advisories/FreeBSD-EN-23:01.tzdata.asc b/website/static/security/advisories/FreeBSD-EN-23:01.tzdata.asc new file mode 100644 index 0000000000..584cb095f6 --- /dev/null +++ b/website/static/security/advisories/FreeBSD-EN-23:01.tzdata.asc @@ -0,0 +1,174 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-23:01.tzdata Errata Notice + The FreeBSD Project + +Topic: Timezone database information update + +Category: contrib +Module: zoneinfo +Announced: 2022-02-08 +Affects: All supported versions of FreeBSD. +Corrected: 2022-12-01 01:36:29 UTC (stable/13, 13.1-STABLE) + 2023-02-08 16:08:28 UTC (releng/13.1, 13.1-RELEASE-p6) + 2022-12-01 01:40:23 UTC (stable/12, 12.4-STABLE) + 2023-02-08 18:30:20 UTC (releng/12.4, 12.4-RELEASE-p1) + 2023-02-08 18:28:25 UTC (releng/12.3, 12.3-RELEASE-p11) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +The IANA Time Zone Database (often called tz or zoneinfo) contains code and +data that represent the history of local time for many representative +locations around the globe. It is updated periodically to reflect changes +made by political bodies to time zone boundaries, UTC offsets, and +daylight-saving rules. + +FreeBSD releases install the IANA Time Zone Database in /usr/share/zoneinfo. +The tzsetup(8) utility allows the user to specify the default local time +zone. Based on the selected time zone, tzsetup(8) copies one of the files +from /usr/share/zoneinfo to /etc/localtime. A time zone may also be selected +for an individual process by setting its TZ environment variable to a desired +time zone name. + +II. Problem Description + +Several changes to future and past timestamps have been recorded in the IANA +Time Zone Database after previous FreeBSD releases were released. This +affects many users in different parts of the world. Because of these +changes, the data in the zoneinfo files need to be updated. If the local +timezone on the running system is affected, tzsetup(8) needs to be run to +update /etc/localtime. + +III. Impact + +An incorrect time will be displayed on a system configured to use one of the +affected time zones if the /usr/share/zoneinfo and /etc/localtime files are +not updated, and all applications on the system that rely on the system time, +such as cron(8) and syslog(8), will be affected. + +IV. Workaround + +The system administrator can install an updated version of the IANA Time Zone +Database from the misc/zoneinfo port and run tzsetup(8). + +Applications that store and display times in Coordinated Universal Time (UTC) +are not affected. + +V. Solution + +Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date. + +Please note that some third party software, for instance PHP, Ruby, Java, +Perl and Python, may be using different zoneinfo data sources, in such cases +this software must be updated separately. Software packages that are +installed via binary packages can be upgraded by executing 'pkg upgrade'. + +Following the instructions in this Errata Notice will only update the IANA +Time Zone Database installed in /usr/share/zoneinfo. + +Perform one of the following: + +1) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the amd64, i386, or +(on FreeBSD 13 and later) arm64 platforms can be updated via the +freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install + +Restart all the affected applications and daemons, or reboot the system. + +2) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/EN-23:01/tzdata-2022g.patch +# fetch https://security.FreeBSD.org/patches/EN-23:01/tzdata-2022g.patch.asc +# gpg --verify tzdata-2022g.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch -E < /path/to/patch + +c) Recompile the operating system using buildworld and installworld as +described in . + +Restart all the affected applications and daemons, or reboot the system. + +VI. Correction details + +This issue is corrected by the corresponding Git commit hash or Subversion +revision number in the following stable and release branches: + +Branch/path Hash Revision +- ------------------------------------------------------------------------- +stable/13/ e851e0aabdff stable/13-n253192 +releng/13.1/ 9e3b86743c4b releng/13.1-n250175 +stable/12/ r372783 +releng/12.4/ r372915 +releng/12.3/ r372911 +- ------------------------------------------------------------------------- + +For FreeBSD 13 and later: + +Run the following command to see which files were modified by a +particular commit: + +# git show --stat + +Or visit the following URL, replacing NNNNNN with the hash: + + + +To determine the commit count in a working tree (for comparison against +nNNNNNN in the table above), run: + +# git rev-list --count --first-parent HEAD + +For FreeBSD 12 and earlier: + +Run the following command to see which files were modified by a particular +revision, replacing NNNNNN with the revision number: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQIzBAEBCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmPj7/8ACgkQbljekB8A +Gu/xNg/9EgSCULshR9xN3vYa4sTdsMVLpz24zuRMxPqYAAFckJ2GDOwDuvIA78r+ +U8u/efb0pE3xJvbAH0vFMUqt7mxsJeO4TVurEpAMrsuQRfjru0FLzNlXhJUnTDF9 +mSveNDs1QeihpaOfG8b8v8onk1Nr6SMuVO37s5FdFNrGxc+WHpmXJiQqHy71r0AG +4CtdgZ+TxjRmvKeU2ue/+xjDVhhTUEFoOjwaeq54dgVP9u3aFENFejcOjPZYVWJt +aNaMAiWvarER1HIhqKppVbui/U7J73lWC0ocBwCAA/NDhC5C0IEw3tPx5KLOmw5c +M4TX4bliFNLWnokPEdTd9OLU0OJzDhPn00awm9NH0c6F3y/dznHoYtKXVirj7GpW +FbKxsrsJf8xFxAHyFApLan7i7I1Y3R+mnRimYMUonfv08tVcCMlSu9QMXNmC+0+r +phCU6mwtrv/RwoRk0QGYyg9z4sfX+eKX2zhHiEigvbD6IHnIpcIRgu6yuZL/eETg +AwG2WUX3WSvi6C6hcQKPYw0mhxp4WnIFz6FmFYWBESDTSDjWRhmHCLU2VV7JvuPn +zRpY1dYJSbulAvWEXbKTh5oALuYfVSeL9qnbL2cmcxFCHJcyMm/yB9VOG9nMBFQD +drCXwK/KGV1jvD0OxHaemLs7hxTJwOaI4RKl9OWIS6J195YdPIc= +=z60r +-----END PGP SIGNATURE----- diff --git a/website/static/security/advisories/FreeBSD-EN-23:02.sdhci.asc b/website/static/security/advisories/FreeBSD-EN-23:02.sdhci.asc new file mode 100644 index 0000000000..ecbdd003ef --- /dev/null +++ b/website/static/security/advisories/FreeBSD-EN-23:02.sdhci.asc @@ -0,0 +1,126 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-23:02.sdhci Errata Notice + The FreeBSD Project + +Topic: sdhci(4) broken write-protect settings + +Category: core +Module: sdhci +Announced: 2023-02-08 +Affects: FreeBSD 13.1 +Corrected: 2022-03-29 22:24:27 UTC (stable/13, 13.1-STABLE) + 2023-02-08 16:16:32023-02-08 16:16:31.1-RELEASE-p6) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +The sdhci(4) driver supports PCI devices with class 8 and subclass 5 +according to the SD Host Controller Specification. One of the devices +supported is the Marvell Xenon SDHCI controller. + +II. Problem Description + +The write-protect flag on Marvell Xenon SDHCI controllers was incorrectly +handled, resulting in devices being erroneously marked as read-only. + +III. Impact + +On affected systems, SD cards cannot be written to; where an SD card is used +as the root device, this may result in the system failing to boot. + +IV. Workaround + +No workaround is available. + +V. Solution + +Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date. + +Perform one of the following: + +1) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the amd64, i386, or +(on FreeBSD 13 and later) arm64 platforms can be updated via the +freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install +# shutdown -r +5min "Installing errata update" + +2) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/EN-23:02/sdhci.patch +# fetch https://security.FreeBSD.org/patches/EN-23:02/sdhci.patch.asc +# gpg --verify sdhci.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +This issue is corrected by the corresponding Git commit hash or Subversion +revision number in the following stable and release branches: + +Branch/path Hash Revision +- ------------------------------------------------------------------------- +stable/13/ 693af80b7435 stable/13-n250156 +releng/13.1/ 4b31a7861af0 releng/13.1-n250176 +- ------------------------------------------------------------------------- + +Run the following command to see which files were modified by a +particular commit: + +# git show --stat + +Or visit the following URL, replacing NNNNNN with the hash: + + + +To determine the commit count in a working tree (for comparison against +nNNNNNN in the table above), run: + +# git rev-list --count --first-parent HEAD + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQIzBAEBCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmPj8BMACgkQbljekB8A +Gu9itxAAupVjrBaZYIMnSf9NWwMzG3fUStINrAO8ys8VHOsFxl72C0BcPBKffQw4 +cKgvpcMSK/MO3i+a8Xk8gbGlUcdLdvcL3F+MZI4RM6V8lkp22iz558tzh3c3H7z3 +/uJNC9r9PvUUi9jDgPYfhXKub72Gr0Uae8K27tNoSaeTvZelXNJYHGKs/aB/LVdE +V6f+k7gyIdPjcScHVFG20+Wp5GrongMknZm26Mch+tGMtT2lqPT/5xj/KHHADj53 +pFkxrDWTagpae2Ibr2nsBJUKQ5X6adPQdUEK7TLucQvqsDe/y+WQnzf0YJDUc0ZA +VNg+FcIU1cEuAo4R5yLBrcan436cVGWE4VpjdruxnHOCvCyYaOARk9GK+ZyuIiWw +KtN21MthBljIURJMjaMpKRmb7Dv0IqXHojVps6x6dELIAIo98IEMM14feDHzC1l0 +E7gb2LYOOB+MV71GMWcC2URgcMXDhP3Ew46UGuYJT/G+K6Y/XpmproVR8Mw2SELB +0aTk5qmE+T3j05tThaOt4SkCs/cFkFKqbx8Ix9/ohOzA32293KsPfbKdOYcbOLE9 +aC8/mMmRSF5SJ8spOFApd8PFaHlR6G+KDVuQ3NVfX6ezHzECYVnO2B/SWbVSWBll +Bl0oGrbmhWhrTvBG5hsox/+0NzAqF1U8cSR+IYE33WygQ/o8E3s= +=7hux +-----END PGP SIGNATURE----- diff --git a/website/static/security/advisories/FreeBSD-EN-23:03.ena.asc b/website/static/security/advisories/FreeBSD-EN-23:03.ena.asc new file mode 100644 index 0000000000..0f7811c42b --- /dev/null +++ b/website/static/security/advisories/FreeBSD-EN-23:03.ena.asc @@ -0,0 +1,133 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-23:03.ena Errata Notice + The FreeBSD Project + +Topic: ena driver crash after reset in 7th gen AWS instance types + +Category: core +Module: ena +Announced: 2023-02-08 +Affects: FreeBSD 13.1 +Corrected: 2022-07-26 19:30:17 UTC (stable/13, 13.2-STABLE) + 2023-02-08 16:18:27 UTC (releng/13.1, 13.1-RELEASE-p6) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +The ena(4) driver is used to access the Elastic Network Adapter network +interface on recent Amazon Elastic Compute Cloud (EC2) instances. It is +designed to make full use of the EC2 cloud architecture for optimal network +performance. + +Since the 4th generation of AWS instances, there are 2 modes of operation for +the ENA device: Normal and Low Latency Queues (LLQ). In order to leverage +EC2's optimal network capabilities on 7th generation instance-types, LLQ is +the default mode of operation. Users who disable LLQ will experience +sub-optimal performance and hence this is not recommended. + +II. Problem Description + +The ENA driver does not properly initialize LLQ when recovering from a device +reset. The improperly initialized LLQ leads to a performance degradation on +6th gen instance types and to a kernel panic on 7th gen instance types. + +III. Impact + +Users with FreeBSD 13.1 using 6th generation AWS instances will suffer from +performance degredation, and with 7th generation AWS instances will +experience kernel panic after a device reset. + +IV. Workaround + +No workaround is available. + +V. Solution + +Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date and reboot. + +Perform one of the following: + +1) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the amd64, i386, or +arm64 (on FreeBSD 13 and later) platforms can be updated via the +freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install +# shutdown -r +10min "Rebooting for erratum update" + +2) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/EN-23:03/ena.patch +# fetch https://security.FreeBSD.org/patches/EN-23:03/ena.patch.asc +# gpg --verify ena.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +This issue is corrected by the corresponding Git commit hash or Subversion +revision number in the following stable and release branches: + +Branch/path Hash Revision +- ------------------------------------------------------------------------- +stable/13/ e8253e47e1dc stable/13-n251949 +releng/13.1/ b508850e150e releng/13.1-n250177 +- ------------------------------------------------------------------------- + +Run the following command to see which files were modified by a +particular commit: + +# git show --stat + +Or visit the following URL, replacing NNNNNN with the hash: + + + +To determine the commit count in a working tree (for comparison against +nNNNNNN in the table above), run: + +# git rev-list --count --first-parent HEAD + +VII. References + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQIzBAEBCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmPj8BUACgkQbljekB8A +Gu+zDxAAsM4Fn6a5F0ocswNvMT8RBVxJ2YrOK9WIZdlBH9rV0ZHTOQDpTlo1Mizk +7R+vfAps18dnnjSf2F+IGKR6u/+kR3YJAw4fzIJyRgLBC/qkjsLS+3d7yEPxbIrL +wCB1vfMlJlS333gV0hMTq8CELwYVbqi6Rqb1D2h+L+qDjqhbLStVOHTo1gztAk1U +bVaApXZglaNL8VdFanHYRZg+SmM+saGwOPOCO1O4oEttfwfFfDBqkkfHVtbcaVDA +9h9qSBpV2iLueDcRzfg7Q9/9DzPE7n88pz8aCzyoaXxhXGUcgzhAfJeSpeblRL12 +dq848iI/zn8jTxO+2pqGooBw5HQHwRgw0v1rjDkj9YCKSg9D5BH3Cj60RKV8D6BC +e7eQlOXfO6ubWcKHethxNj/zU3XpQN7CD2rfNtKkMYq6PVBWYIPTLlrIhRVPHmVs +/EKBD2RsHdQHID7rA67V9G0/NQjfFaq5pDzaNbP7NdkhMpgzvW2boixAnyqRtTVK +Jkxqq3MVdOIktOvRTnXHCkyxSXy67R8qmHCKwvW5omVDv7ro8oS+Vq0PvS4NN7LR +Q0r0E/iwM4hCRSWwuKF5brC7wIeeWPExKkWjpQ3i9gOcvyXAUqo9KDpwN622s3gP +Ar1mm82FHUNNcv2uo4WpsLT9p+30bROSU0XUvYcVQHEqazy2A3o= +=9D+P +-----END PGP SIGNATURE----- diff --git a/website/static/security/advisories/FreeBSD-EN-23:04.ixgbe.asc b/website/static/security/advisories/FreeBSD-EN-23:04.ixgbe.asc new file mode 100644 index 0000000000..0a93a5f603 --- /dev/null +++ b/website/static/security/advisories/FreeBSD-EN-23:04.ixgbe.asc @@ -0,0 +1,146 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-23:04.ixgbe Errata Notice + The FreeBSD Project + +Topic: ixgbe incorrectly reports input errors for 82599ES + +Category: core +Module: ixgbe +Announced: 2023-02-08 +Affects: All supported versions of FreeBSD. +Corrected: 2022-11-17 20:13:43 UTC (stable/13, 13.1-STABLE) + 2023-02-08 16:30:38 UTC (releng/13.1, 13.1-RELEASE-p6) + 2022-11-17 20:17:22 UTC (stable/12, 12.4-STABLE) + 2023-02-08 18:30:24 UTC (releng/12.4, 12.4-RELEASE-p1) + 2023-02-08 18:28:28 UTC (releng/12.3, 12.3-RELEASE-p11) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +ixgbe(4) is driver that supports multiple Intel 10Gb Ethernet cards including +the Intel 82599. + +II. Problem Description + +Intel 82599 hardware has errata related to IPv4 UDP frames with a zero +checksum. The L4 integrity error counter is incremented for such frames, +which results in reported interface errors through utilities such as +ifconfig(8). This confuses users, since all frames are in fact handled +correctly by the system. + +III. Impact + +Incorrect interface statistics are reported for affected hardware. + +IV. Workaround + +Ignore reported interface errors. + +V. Solution + +Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date and reboot. + +Perform one of the following: + +1) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the amd64, i386, or +(on FreeBSD 13 and later) arm64 platforms can be updated via the +freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install +# shutdown -r +10min "Rebooting for an erratum update" + +2) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/EN-23:04/ixgbe.patch +# fetch https://security.FreeBSD.org/patches/EN-23:04/ixgbe.patch.asc +# gpg --verify ixgbe.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +This issue is corrected by the corresponding Git commit hash or Subversion +revision number in the following stable and release branches: + +Branch/path Hash Revision +- ------------------------------------------------------------------------- +stable/13/ daf3d88ac184 stable/13-n253100 +releng/13.1/ f3e20eb8d8f0 releng/13.1-n250178 +stable/12/ r372757 +releng/12.4/ r372916 +releng/12.3/ r372912 +- ------------------------------------------------------------------------- + +For FreeBSD 13 and later: + +Run the following command to see which files were modified by a +particular commit: + +# git show --stat + +Or visit the following URL, replacing NNNNNN with the hash: + + + +To determine the commit count in a working tree (for comparison against +nNNNNNN in the table above), run: + +# git rev-list --count --first-parent HEAD + +For FreeBSD 12 and earlier: + +Run the following command to see which files were modified by a particular +revision, replacing NNNNNN with the revision number: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQIzBAEBCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmPj8BcACgkQbljekB8A +Gu+H7g//dEdyDgXVQeyezAZuL1wqUaKVE0ZzPfpouG9X3+FaXMalo0FzkJy75olx +vv0eOznDoS+IWlwkdvzKCaAGZK8ZFPNT0SkNTGlABh+xvX0FoORdPLh9AmZbDlsx +1FA1Az+Sew0EJ/t0D0v/ZMTpj267664yVXI1G5IFUxTLnFq/bC9w8ssOQCWF4/+z +KgwTt7XfaxE03EE6JasyeIRKF4nobbErNo7Z+yjEkqT43geSS8N3T6uE8JwV8y2w +0wAZT3nj7TBsHnRErHgDQabPXOEdZDODV+iDGTOmu7bwmoG9FKbuuE4tZtDzKNZ1 +wjjG0Gka091Wx7ss5KLO0kD99iqHrtno/I2qJuk/R5HZuNTzOsp56RgQUQu9uxjm +1Lfsd6HdzV2dd4/PZ9dGgU7bTiSIJXCh5pu3NGF3nKshgDPDq05kz3Ho3ktWEccQ +SpWOc6IyMibuxq9T50CFyW+qPMoPa4pN2BsVilwQJ/LeWYp8lcN9T5bY2ssVk33q +s6elPBZsmGOvIMe14mDUL2ANfcZSUDkbZuvCPoOo1LMGnh8TSikbj1uaWH4qntlC +gPJ502ggGaw1CuMuUzddyv14bNCL9PMY1zZOnEi6MWwZWZnVvzdqLvhz4U6BORVJ +OOqJTlxquMYGyILtHqKvqodZ471SaHMC9Sk5MPvO/mk0u3W5Zeg= +=sTJD +-----END PGP SIGNATURE----- diff --git a/website/static/security/advisories/FreeBSD-SA-23:01.geli.asc b/website/static/security/advisories/FreeBSD-SA-23:01.geli.asc new file mode 100644 index 0000000000..01448c87c6 --- /dev/null +++ b/website/static/security/advisories/FreeBSD-SA-23:01.geli.asc @@ -0,0 +1,159 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-SA-23:01.geli Security Advisory + The FreeBSD Project + +Topic: GELI silently omits the keyfile if read from stdin + +Category: core +Module: geli +Announced: 2023-02-08 +Credits: Nathan Dorfman +Affects: All supported versions of FreeBSD. +Corrected: 2023-02-08 18:03:19 UTC (stable/13, 13.1-STABLE) + 2023-02-08 18:06:31 UTC (releng/13.1, 13.1-RELEASE-p6) + 2023-02-08 18:05:45 UTC (stable/12, 12.4-STABLE) + 2023-02-08 18:30:27 UTC (releng/12.4, 12.4-RELEASE-p1) + 2023-02-08 18:28:31 UTC (releng/12.3, 12.3-RELEASE-p11) +CVE Name: CVE-2023-0751 + +For general information regarding FreeBSD Security Advisories, +including descriptions of the fields above, security branches, and the +following sections, please visit . + +I. Background + +GELI is a block device-layer disk encryption utility. It uses a random +master key to perform symmetric cryptography on sectors. The master key is +encrypted using a user key, which might consist of up to two components: a +user passphrase and a key file. The key file might be read from a file or a +standard input. GELI also allows to initialization of multiple devices with +a single command. + +II. Problem Description + +When GELI reads a key file from a standard input, it doesn't store it +anywhere. If the user tries to initialize multiple providers at once, for +the second and subsequent devices the standard input stream will be already +empty. In this case, GELI silently uses a NULL key as the user key file. If +the user used only a key file without a user passphrase, the master key was +encrypted with an empty key file. This might not be noticed if the devices +were also decrypted in a batch operation. + +III. Impact + +Some GELI providers might be silently encrypted with a NULL key file. + +IV. Workaround + +On affected systems, instead of initializing GELI devices in a batch +operation, the recommended way is to do this operation on a single provider. + +V. Solution + +If the system already has the device initialized with a null key, the master +key has to be encrypted: +echo -n | geli setkey -k- -p -K /path/to/keyfile -P /dev/provider + +Upgrade your vulnerable system to a supported FreeBSD stable or +release / security branch (releng) dated after the correction date, +and reboot. + +Perform one of the following: + +1) To update your vulnerable system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the amd64, i386, or +(on FreeBSD 13 and later) arm64 platforms can be updated via the +freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install +# shutdown -r +10min "Rebooting for a security update" + +2) To update your vulnerable system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/SA-23:01/geli.patch +# fetch https://security.FreeBSD.org/patches/SA-23:01/geli.patch.asc +# gpg --verify geli.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +This issue is corrected by the corresponding Git commit hash or Subversion +revision number in the following stable and release branches: + +Branch/path Hash Revision +- ------------------------------------------------------------------------- +stable/13/ 88bb08452ee3 stable/13-n254412 +releng/13.1/ 98933c7013a5 releng/13.1-n250179 +stable/12/ r372910 +releng/12.4/ r372917 +releng/12.3/ r372913 +- ------------------------------------------------------------------------- + +For FreeBSD 13 and later: + +Run the following command to see which files were modified by a +particular commit: + +# git show --stat + +Or visit the following URL, replacing NNNNNN with the hash: + + + +To determine the commit count in a working tree (for comparison against +nNNNNNN in the table above), run: + +# git rev-list --count --first-parent HEAD + +For FreeBSD 12 and earlier: + +Run the following command to see which files were modified by a particular +revision, replacing NNNNNN with the revision number: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQIzBAEBCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmPj8B8ACgkQbljekB8A +Gu8Q2g//WfBcATFcQsXQC/fO8oGa90pZl3+mBIBabMO7bMsZ3jzmsZM0DjEuztDM +sOY6g9ExN5Fmh4O6Mvg12FjtsbJwp/4KxsrfjG3F8aTKjTKTdbBqhDodwQwCL9ZF +u+qkNMrtdqFvigGqmCpKq6vC7kYx12NVFvr4X81kgBmwCOPUKlD351lnkQKv0C5B +G3HeLdQb7stMRcnHWcqOw7m98aRSU0gE2/9BAMqfvtVWboa6LrdF6PQVav8Lq417 +qh8Md71IAAWyFm8jcOtsX949KdtI1kcwDbVyuO5mT6TNFTuEu/lIx78/YpvGVZUt +1a7FAkiekr6c19xC01o6muc6E1XiwxO/vQMMwEsW9lv+N2fm4d7EGUP3nvFZTzgt +OOKVORcqEsdZj92/UDdUXsIFV7fja0t7rGUXhI/YTAtnOvESTvDkUzfNQ3fxIMcG +COFQdxJ0+P2oItMSeY2dlN8A/z41N6BqAilmg/LxuzZkCblC8q0JxLoAsAEydT4j +RHA7dTwFNeM+6kVluERX302l6JGogg6mB+o/O+vqKWfDrvEzv7CLHEGnBT6lcAkX +x1RQwXFd84fHwWXAffsUNKxrQe0QI+dbPcGH0YtHZntno1Azds3oVBAFa5nUcYVD +3A8ShP18hwkVLRyG9680fSD5cQwYKZpLuasujikLqnme/PkYDy4= +=6d7v +-----END PGP SIGNATURE----- diff --git a/website/static/security/patches/EN-23:01/tzdata-2022g.patch b/website/static/security/patches/EN-23:01/tzdata-2022g.patch new file mode 100644 index 0000000000..ed664ab22d --- /dev/null +++ b/website/static/security/patches/EN-23:01/tzdata-2022g.patch @@ -0,0 +1,804 @@ +--- contrib/tzdata/Makefile.orig ++++ contrib/tzdata/Makefile +@@ -196,6 +196,7 @@ + UTF8_LOCALE= en_US.utf8 + + # Non-default libraries needed to link. ++# On some hosts, this should have -lintl unless CFLAGS has -DHAVE_GETTEXT=0. + LDLIBS= + + # Add the following to the end of the "CFLAGS=" line as needed to override +@@ -208,14 +209,18 @@ + # For example, N is 252460800 on AmigaOS. + # -DHAVE_DECL_ASCTIME_R=0 if does not declare asctime_r + # -DHAVE_DECL_ENVIRON if declares 'environ' ++# -DHAVE_DECL_TIMEGM=0 if does not declare timegm + # -DHAVE_DIRECT_H if mkdir needs (MS-Windows) +-# -DHAVE_GENERIC=0 if _Generic does not work +-# -DHAVE_GETRANDOM if getgrandom works (e.g., GNU/Linux)* +-# -DHAVE_GETTEXT if 'gettext' works (e.g., GNU/Linux, FreeBSD, Solaris)* ++# -DHAVE_GENERIC=0 if _Generic does not work* ++# -DHAVE_GETRANDOM if getrandom works (e.g., GNU/Linux), ++# -DHAVE_GETRANDOM=0 to avoid using getrandom ++# -DHAVE_GETTEXT if gettext works (e.g., GNU/Linux, FreeBSD, Solaris), ++# where LDLIBS also needs to contain -lintl on some hosts; ++# -DHAVE_GETTEXT=0 to avoid using gettext + # -DHAVE_INCOMPATIBLE_CTIME_R if your system's time.h declares + # ctime_r and asctime_r incompatibly with the POSIX standard + # (Solaris when _POSIX_PTHREAD_SEMANTICS is not defined). +-# -DHAVE_INTTYPES_H if you have a non-C99 compiler with ++# -DHAVE_INTTYPES_H=0 if does not work* + # -DHAVE_LINK=0 if your system lacks a link function + # -DHAVE_LOCALTIME_R=0 if your system lacks a localtime_r function + # -DHAVE_LOCALTIME_RZ=0 if you do not want zdump to use localtime_rz +@@ -225,15 +230,17 @@ + # functions like 'link' or variables like 'tzname' required by POSIX + # -DHAVE_SETENV=0 if your system lacks the setenv function + # -DHAVE_SNPRINTF=0 if your system lacks the snprintf function +-# -DHAVE_STDINT_H if you have a non-C99 compiler with * ++# -DHAVE_STDCKDINT_H=0 if neither nor substitutes like ++# __builtin_add_overflow work* ++# -DHAVE_STDINT_H=0 if does not work* + # -DHAVE_STRFTIME_L if declares locale_t and strftime_l + # -DHAVE_STRDUP=0 if your system lacks the strdup function + # -DHAVE_STRTOLL=0 if your system lacks the strtoll function + # -DHAVE_SYMLINK=0 if your system lacks the symlink function +-# -DHAVE_SYS_STAT_H=0 if your compiler lacks a * ++# -DHAVE_SYS_STAT_H=0 if does not work* + # -DHAVE_TZSET=0 if your system lacks a tzset function +-# -DHAVE_UNISTD_H=0 if your compiler lacks a * +-# -DHAVE_UTMPX_H=0 if your compiler lacks a * ++# -DHAVE_UNISTD_H=0 if does not work* ++# -DHAVE_UTMPX_H=0 if does not work* + # -Dlocale_t=XXX if your system uses XXX instead of locale_t + # -DRESERVE_STD_EXT_IDS if your platform reserves standard identifiers + # with external linkage, e.g., applications cannot define 'localtime'. +@@ -280,7 +287,7 @@ + -Wdeclaration-after-statement -Wdouble-promotion \ + -Wduplicated-branches -Wduplicated-cond \ + -Wformat=2 -Wformat-overflow=2 -Wformat-signedness -Wformat-truncation \ +- -Winit-self -Wlogical-op \ ++ -Wimplicit-fallthrough=5 -Winit-self -Wlogical-op \ + -Wmissing-declarations -Wmissing-prototypes -Wnested-externs \ + -Wnull-dereference \ + -Wold-style-definition -Woverlength-strings -Wpointer-arith \ +@@ -293,7 +300,7 @@ + -Wtrampolines -Wundef -Wuninitialized -Wunused-macros -Wuse-after-free=3 \ + -Wvariadic-macros -Wvla -Wwrite-strings \ + -Wno-address -Wno-format-nonliteral -Wno-sign-compare \ +- -Wno-type-limits -Wno-unused-parameter ++ -Wno-type-limits + # + # If your system has a "GMT offset" field in its "struct tm"s + # (or if you decide to add such a field in your system's "time.h" file), +@@ -340,14 +347,11 @@ + # If you want functions that were inspired by early versions of X3J11's work, + # add + # -DSTD_INSPIRED +-# to the end of the "CFLAGS=" line. This arranges for the functions +-# "offtime", "timelocal", "timegm", "timeoff", +-# "posix2time", and "time2posix" to be added to the time conversion library. ++# to the end of the "CFLAGS=" line. This arranges for the following ++# functions to be added to the time conversion library. + # "offtime" is like "gmtime" except that it accepts a second (long) argument + # that gives an offset to add to the time_t when converting it. + # "timelocal" is equivalent to "mktime". +-# "timegm" is like "timelocal" except that it turns a struct tm into +-# a time_t using UT (rather than local time as "timelocal" does). + # "timeoff" is like "timegm" except that it accepts a second (long) argument + # that gives an offset to use when converting to a time_t. + # "posix2time" and "time2posix" are described in an included manual page. +@@ -495,6 +499,11 @@ + # Flags to give 'gzip' when making a distribution. + GZIPFLAGS= -9n + ++# When comparing .tzs files, use GNU diff's -F'^TZ=' option if supported. ++# This makes it easier to see which Zone has been affected. ++DIFF_TZS= diff -u$$(! diff -u -F'^TZ=' - - <>/dev/null >&0 2>&1 \ ++ || echo ' -F^TZ=') ++ + ############################################################################### + + #MAKE= make +@@ -773,7 +782,8 @@ + chmod +x $@.out + mv $@.out $@ + +-check: check_character_set check_white_space check_links \ ++check: check_back check_mild ++check_mild: check_character_set check_white_space check_links \ + check_name_lengths check_slashed_abbrs check_sorted \ + check_tables check_web check_ziguard check_zishrink check_tzs + +@@ -824,16 +834,19 @@ + CHECK_CC_LIST = { n = split($$1,a,/,/); for (i=2; i<=n; i++) print a[1], a[i]; } + + check_sorted: backward backzone iso3166.tab zone.tab zone1970.tab +- $(AWK) '/^Link/ {printf "%.5d %s\n", g, $$3} /^$$/ {g++}' \ ++ $(AWK) '/^Link/ {printf "%.5d %s\n", g, $$3} !/./ {g++}' \ + backward | LC_ALL=C sort -cu + $(AWK) '/^Zone/ {print $$2}' backzone | LC_ALL=C sort -cu + touch $@ + +-check_links: checklinks.awk $(TDATA_TO_CHECK) tzdata.zi ++check_back: checklinks.awk $(TDATA_TO_CHECK) + $(AWK) \ + -v DATAFORM=$(DATAFORM) \ + -v backcheck=backward \ + -f checklinks.awk $(TDATA_TO_CHECK) ++ touch $@ ++ ++check_links: checklinks.awk tzdata.zi + $(AWK) \ + -v DATAFORM=$(DATAFORM) \ + -f checklinks.awk tzdata.zi +@@ -849,7 +862,7 @@ + + check_tzs: $(TZS) $(TZS_NEW) + if test -s $(TZS); then \ +- diff -u $(TZS) $(TZS_NEW); \ ++ $(DIFF_TZS) $(TZS) $(TZS_NEW); \ + else \ + cp $(TZS_NEW) $(TZS); \ + fi +@@ -1050,7 +1063,7 @@ + TZS_YEAR="$$range" TZS_CUTOFF_FLAG="-t $$range" \ + D=$$wd/$@.dir \ + to$$range.tzs) && \ +- diff -u $(TIME_T_ALTERNATIVES_HEAD).dir/to$$range.tzs \ ++ $(DIFF_TZS) $(TIME_T_ALTERNATIVES_HEAD).dir/to$$range.tzs \ + $@.dir/to$$range.tzs && \ + if diff -q Makefile Makefile 2>/dev/null; then \ + quiet_option='-q'; \ +@@ -1220,7 +1233,7 @@ + zic.o: private.h tzfile.h version.h + + .PHONY: ALL INSTALL all +-.PHONY: check check_time_t_alternatives ++.PHONY: check check_mild check_time_t_alternatives + .PHONY: check_web check_zishrink + .PHONY: clean clean_misc dummy.zd force_tzs + .PHONY: install install_data maintainer-clean names +--- contrib/tzdata/NEWS.orig ++++ contrib/tzdata/NEWS +@@ -1,5 +1,91 @@ + News for the tz database + ++Release 2022g - 2022-11-29 08:58:31 -0800 ++ ++ Briefly: ++ The northern edge of Chihuahua changes to US timekeeping. ++ Much of Greenland stops changing clocks after March 2023. ++ Fix some pre-1996 timestamps in northern Canada. ++ C89 is now deprecated; please use C99 or later. ++ Portability fixes for AIX, libintl, MS-Windows, musl, z/OS ++ In C code, use more C23 features if available. ++ C23 timegm now supported by default ++ Fixes for unlikely integer overflows ++ ++ Changes to future timestamps ++ ++ In the Mexican state of Chihuahua, the border strip near the US ++ will change to agree with nearby US locations on 2022-11-30. ++ The strip's western part, represented by Ciudad Juárez, switches ++ from -06 all year to -07/-06 with US DST rules, like El Paso, TX. ++ The eastern part, represented by Ojinaga, will observe US DST next ++ year, like Presidio, TX. (Thanks to Heitor David Pinto.) ++ A new Zone America/Ciudad_Juarez splits from America/Ojinaga. ++ ++ Much of Greenland, represented by America/Nuuk, stops observing ++ winter time after March 2023, so its daylight saving time becomes ++ standard time. (Thanks to Jonas Nyrup and Jürgen Appel.) ++ ++ Changes to past timestamps ++ ++ Changes for pre-1996 northern Canada (thanks to Chris Walton): ++ ++ Merge America/Iqaluit and America/Pangnirtung into the former, ++ with a backward compatibility link for the latter name. ++ There is no good evidence the two locations differ since 1970. ++ This change affects pre-1996 America/Pangnirtung timestamps. ++ ++ Cambridge Bay, Inuvik, Iqaluit, Rankin Inlet, Resolute and ++ Yellowknife did not observe DST in 1965, and did observe DST ++ from 1972 through 1979. ++ ++ Whitehorse moved from -09 to -08 on 1966-02-27, not 1967-05-28. ++ ++ Colombia's 1993 fallback was 02-06 24:00, not 04-04 00:00. ++ (Thanks to Alois Treindl.) ++ ++ Singapore's 1981-12-31 change was at 16:00 UTC (23:30 local time), ++ not 24:00 local time. (Thanks to Geoff Clare via Robert Elz.) ++ ++ Changes to code ++ ++ Although tzcode still works with C89, bugs found in recent routine ++ maintenance indicate that bitrot has set in and that in practice ++ C89 is no longer used to build tzcode. As it is a maintenance ++ burden, support for C89 is planned to be removed soon. Instead, ++ please use compilers compatible with C99, C11, C17, or C23. ++ ++ timegm, which tzcode implemented in 1989, will finally be ++ standardized 34 years later as part of C23, so timegm is now ++ supported even if STD_INSPIRED is not defined. ++ ++ Fix bug in zdump's tzalloc emulation on hosts that lack tm_zone. ++ (Problem reported by Đoàn Trần Công Danh.) ++ ++ Fix bug in zic on hosts where malloc(0) yields NULL on success. ++ (Problem reported by Tim McBrayer for AIX 6.1.) ++ ++ Fix zic configuration to avoid linkage failures on some platforms. ++ (Problems reported by Gilmore Davidson and Igor Ivanov.) ++ ++ Work around MS-Windows nmake incompatibility with POSIX. ++ (Problem reported by Manuela Friedrich.) ++ ++ Port mktime and strftime to debugging platforms where accessing ++ uninitialized data has undefined behavior (strftime problem ++ reported by Robert Elz). ++ ++ Check more carefully for unlikely integer overflows, preferring ++ C23 to overflow checking by hand, as the latter has ++ had obscure bugs. ++ ++ Changes to build procedure ++ ++ New Makefile rule check_mild that skips checking whether Link ++ lines are in the file 'backward'. (Inspired by a suggestion from ++ Stephen Colebourne.) ++ ++ + Release 2022f - 2022-10-28 18:04:57 -0700 + + Briefly: +@@ -16,7 +102,7 @@ + In C code, use some C23 features if available. + Remove no-longer-needed workaround for Qt bug 53071. + +- Changes to future timestamps. ++ Changes to future timestamps + + Mexico will no longer observe DST after 2022, except for areas + near the US border that continue to observe US DST rules. +@@ -24,6 +110,7 @@ + from -07 (-06 with DST) to year-round -06, thus not changing + its clocks that day. The new law states that Chihuahua + near the US border no longer observes US DST. ++ (Thanks to gera for the heads-up about Chihuahua.) + + Fiji will not observe DST in 2022/3. (Thanks to Shalvin Narayan.) + For now, assume DST is suspended indefinitely. +--- contrib/tzdata/africa.orig ++++ contrib/tzdata/africa +@@ -588,6 +588,10 @@ + # Agalega Is, Rodriguez + # no information; probably like Indian/Mauritius + ++ ++# Morocco ++# See Africa/Ceuta for Spanish Morocco. ++ + # From Alex Krivenyshev (2008-05-09): + # Here is an article that Morocco plan to introduce Daylight Saving Time between + # 1 June, 2008 and 27 September, 2008. +--- contrib/tzdata/asia.orig ++++ contrib/tzdata/asia +@@ -3585,7 +3585,7 @@ + 7:20 - +0720 1941 Sep 1 + 7:30 - +0730 1942 Feb 16 + 9:00 - +09 1945 Sep 12 +- 7:30 - +0730 1982 Jan 1 ++ 7:30 - +0730 1981 Dec 31 16:00u + 8:00 - +08 + + # Spratly Is +--- contrib/tzdata/backward.orig ++++ contrib/tzdata/backward +@@ -267,6 +267,7 @@ + Link America/Indiana/Indianapolis America/Fort_Wayne + Link America/Toronto America/Montreal + Link America/Toronto America/Nipigon ++Link America/Iqaluit America/Pangnirtung + Link America/Rio_Branco America/Porto_Acre + Link America/Winnipeg America/Rainy_River + Link America/Argentina/Cordoba America/Rosario +--- contrib/tzdata/backzone.orig ++++ contrib/tzdata/backzone +@@ -7,6 +7,10 @@ + # tz@iana.org for general use in the future). For more, please see + # the file CONTRIBUTING in the tz distribution. + ++# When proposing changes to this file, please use 'git format-patch' ++# format, either by attaching the resulting .patch file to your email, ++# or by using 'git send-email'. This will help maintainers save time. ++ + + # From Paul Eggert (2014-10-31): + +@@ -750,6 +754,55 @@ + -5:00 1:00 EDT 1942 Feb 9 2:00s + -5:00 Canada E%sT + ++# From Rives McDow (1999-11-08): ++# On October 31, when the rest of Nunavut went to Central time, ++# Pangnirtung wobbled. Here is the result of their wobble: ++# ++# The following businesses and organizations in Pangnirtung use Central Time: ++# ++# First Air, Power Corp, Nunavut Construction, Health Center, RCMP, ++# Eastern Arctic National Parks, A & D Specialist ++# ++# The following businesses and organizations in Pangnirtung use Eastern Time: ++# ++# Hamlet office, All other businesses, Both schools, Airport operator ++# ++# This has made for an interesting situation there, which warranted the news. ++# No one there that I spoke with seems concerned, or has plans to ++# change the local methods of keeping time, as it evidently does not ++# really interfere with any activities or make things difficult locally. ++# They plan to celebrate New Year's turn-over twice, one hour apart, ++# so it appears that the situation will last at least that long. ++# The Nunavut Intergovernmental Affairs hopes that they will "come to ++# their senses", but the locals evidently don't see any problem with ++# the current state of affairs. ++ ++# From Michaela Rodrigue, writing in the ++# Nunatsiaq News (1999-11-19): ++# http://www.nunatsiaqonline.ca/archives/nunavut991130/nvt91119_17.html ++# Clyde River, Pangnirtung and Sanikiluaq now operate with two time zones, ++# central - or Nunavut time - for government offices, and eastern time ++# for municipal offices and schools.... Igloolik [was similar but then] ++# made the switch to central time on Saturday, Nov. 6. ++ ++# From Chris Walton (2022-11-06): ++# The implication is that Pangnirtung and Qikiqtarjuaq have observed Eastern ++# Time as far back as 1984 (and likely even further back than that). ++# It is possible that these communities never actually observed Atlantic ++# Time, but that would be difficult to prove. ++# From Paul Eggert (2022-11-06): ++# This is in 'backzone' as we have no good evidence that Pangnirtung differs ++# from America/Iqaluit since 1970. A Google Books snippet view of ++# volume 2, page 186 of "Pilot of Arctic Canada", published 1959 by ++# the Canadian Hydrographic Service, suggests (though does not state) ++# that Pangnirtung observed EST then. ++# ++# aka Panniqtuuq ++Zone America/Pangnirtung 0 - -00 1921 # trading post est. ++ -5:00 NT_YK E%sT 1999 Oct 31 2:00 ++ -6:00 Canada C%sT 2000 Oct 29 2:00 ++ -5:00 Canada E%sT ++ + # United States + # + # From Paul Eggert (2018-03-18): +@@ -1043,7 +1096,7 @@ + 7:20 - +0720 1941 Sep 1 + 7:30 - +0730 1942 Feb 16 + 9:00 - +09 1945 Sep 12 +- 7:30 - +0730 1982 Jan 1 ++ 7:30 - +0730 1981 Dec 31 16:00u + 8:00 - +08 + + # Kuwait +--- contrib/tzdata/europe.orig ++++ contrib/tzdata/europe +@@ -1103,7 +1103,30 @@ + # "National Park" by Executive Order: + # http://naalakkersuisut.gl/~/media/Nanoq/Files/Attached%20Files/Engelske-tekster/Legislation/Executive%20Order%20National%20Park.rtf + # It is their only National Park. +-# ++ ++# From Jonas Nyrup (2022-11-24): ++# On last Saturday in October 2023 when DST ends America/Nuuk will switch ++# from -03/-02 to -02/-01 ++# https://sermitsiaq.ag/forslagtidsforskel-danmark-mindskes-sommertid-beholdes ++# ... ++# https://sermitsiaq.ag/groenland-skifte-tidszone-trods-bekymringer ++# ++# From Jürgen Appel (2022-11-25): ++# https://ina.gl/samlinger/oversigt-over-samlinger/samling/dagsordener/dagsorden.aspx?lang=da&day=24-11-2022 ++# If I understand this correctly, from the next planned switch to ++# summer time, Greenland will permanently stay at that time, i.e. no ++# switch back to winter time in 2023 will occur. ++# ++# From Paul Eggert (2022-11-28): ++# The official document in Danish ++# https://naalakkersuisut.gl/-/media/naalakkersuisut/filer/kundgoerelser/2022/11/2511/31_da_inatsisartutlov-om-tidens-bestemmelse.pdf?la=da&hash=A33597D8A38CC7038465241119EF34F3 ++# says standard time for Greenland is -02, that Naalakkersuisut can lay down ++# rules for DST and can require some areas to use a different time zone, ++# and that this all takes effect 2023-03-25 22:00. The abovementioned ++# "bekymringer" URL says the intent is no transition March 25, that ++# Greenland will not go back to winter time in fall 2023, and that ++# only America/Nuuk is affected (though further changes may occur). ++ + # Rule NAME FROM TO - IN ON AT SAVE LETTER/S + Rule Thule 1991 1992 - Mar lastSun 2:00 1:00 D + Rule Thule 1991 1992 - Sep lastSun 2:00 0 S +@@ -1126,7 +1149,8 @@ + -1:00 EU -01/+00 + Zone America/Nuuk -3:26:56 - LMT 1916 Jul 28 # Godthåb + -3:00 - -03 1980 Apr 6 2:00 +- -3:00 EU -03/-02 ++ -3:00 EU -03/-02 2023 Mar 25 22:00 ++ -2:00 - -02 + Zone America/Thule -4:35:08 - LMT 1916 Jul 28 # Pituffik + -4:00 Thule A%sT + +--- contrib/tzdata/northamerica.orig ++++ contrib/tzdata/northamerica +@@ -1969,6 +1969,37 @@ + + # Northwest Territories, Nunavut, Yukon + ++# From Chris Walton (2022-11-06): ++# Whitehorse Star - Thursday April 22, 1965 - page 1 ++# title: DST Starts Monday ... ++# https://www.newspapers.com/image/578587481/ ++# The title of this first article is wrong and/or misleading. ++# Also, the start time shown in the article is vague; it simply says "after ++# midnight" when it probably should have stated 2:00a.m.... ++# ++# Whitehorse Star - Monday October 25, 1965 - page 15 ... ++# https://www.newspapers.com/image/578589147/ ++# The 1965 Yukon Council minutes can be found here: ++# http://assets.yukonarchives.ca/PER_YG_06_1965_C20_S02_v1.pdf ++# ... I do not currently believe that NWT touched any of its clocks in 1965.... ++# ++# Whitehorse Star - Thursday Feb 24,1966 - page 2 ++# title: It's Time for YDT ... ++# https://www.newspapers.com/image/578575979/ ... ++# America/Whitehorse as a permanent change from UTC-9(YST) to ++# UTC-8(PST) at 00:00 on Sunday February 27, 1966.... ++# ++# Whitehorse Star - Friday April 28,1972 - page 6 ++# title: Daylight Saving Time for N.W.T.... ++# https://www.newspapers.com/image/578701610/ ... ++# Nunavut and NWT zones ... DST starting in 1972.... Start and End ... ++# should be the same as the rest of Canada ++# ++# ++# From Paul Eggert (2022-11-06): ++# For now, assume Yukon's 1965-04-22 spring forward was 00:00 -> 02:00, as this ++# seems likely than 02:00 -> 04:00 and matches "after midnight". ++ + # From Paul Eggert (2006-03-22): + # Dawson switched to PST in 1973. Inuvik switched to MST in 1979. + # Mathew Englander (1996-10-07) gives the following refs: +@@ -2083,6 +2114,13 @@ + # * Interpretation Act, RSY 2002, c 125 + # https://www.canlii.org/en/yk/laws/stat/rsy-2002-c-125/latest/rsy-2002-c-125.html + ++# From Chris Walton (2022-11-06): ++# The 5th edition of the Atlas of Canada contains a time zone map that ++# shows both legislated and observed time zone boundaries. ++# All communities on Baffin Island are shown to be observing Eastern time. ++# The date on the map is 1984. ++# https://ftp.maps.canada.ca/pub/nrcan_rncan/raster/atlas_5_ed/eng/other/referencemaps/mcr4056.pdf ++ + # From Rives McDow (1999-09-04): + # Nunavut ... moved ... to incorporate the whole territory into one time zone. + # Nunavut moves to single time zone Oct. 31 +@@ -2095,40 +2133,7 @@ + # From Paul Eggert (1999-09-20): + # Basic Facts: The New Territory + # http://www.nunavut.com/basicfacts/english/basicfacts_1territory.html +-# (1999) reports that Pangnirtung operates on eastern time, +-# and that Coral Harbour does not observe DST. We don't know when +-# Pangnirtung switched to eastern time; we'll guess 1995. +- +-# From Rives McDow (1999-11-08): +-# On October 31, when the rest of Nunavut went to Central time, +-# Pangnirtung wobbled. Here is the result of their wobble: +-# +-# The following businesses and organizations in Pangnirtung use Central Time: +-# +-# First Air, Power Corp, Nunavut Construction, Health Center, RCMP, +-# Eastern Arctic National Parks, A & D Specialist +-# +-# The following businesses and organizations in Pangnirtung use Eastern Time: +-# +-# Hamlet office, All other businesses, Both schools, Airport operator +-# +-# This has made for an interesting situation there, which warranted the news. +-# No one there that I spoke with seems concerned, or has plans to +-# change the local methods of keeping time, as it evidently does not +-# really interfere with any activities or make things difficult locally. +-# They plan to celebrate New Year's turn-over twice, one hour apart, +-# so it appears that the situation will last at least that long. +-# The Nunavut Intergovernmental Affairs hopes that they will "come to +-# their senses", but the locals evidently don't see any problem with +-# the current state of affairs. +- +-# From Michaela Rodrigue, writing in the +-# Nunatsiaq News (1999-11-19): +-# http://www.nunatsiaqonline.ca/archives/nunavut991130/nvt91119_17.html +-# Clyde River, Pangnirtung and Sanikiluaq now operate with two time zones, +-# central - or Nunavut time - for government offices, and eastern time +-# for municipal offices and schools.... Igloolik [was similar but then] +-# made the switch to central time on Saturday, Nov. 6. ++# (1999) reports that ... Coral Harbour does not observe DST. + + # From Paul Eggert (2000-10-02): + # Matthews and Vincent (1998) say the following, but we lack histories +@@ -2287,18 +2292,12 @@ + Rule NT_YK 1942 only - Feb 9 2:00 1:00 W # War + Rule NT_YK 1945 only - Aug 14 23:00u 1:00 P # Peace + Rule NT_YK 1945 only - Sep 30 2:00 0 S +-Rule NT_YK 1965 only - Apr lastSun 0:00 2:00 DD +-Rule NT_YK 1965 only - Oct lastSun 2:00 0 S +-Rule NT_YK 1980 1986 - Apr lastSun 2:00 1:00 D +-Rule NT_YK 1980 2006 - Oct lastSun 2:00 0 S ++Rule NT_YK 1972 1986 - Apr lastSun 2:00 1:00 D ++Rule NT_YK 1972 2006 - Oct lastSun 2:00 0 S + Rule NT_YK 1987 2006 - Apr Sun>=1 2:00 1:00 D ++Rule Yukon 1965 only - Apr lastSun 0:00 2:00 DD ++Rule Yukon 1965 only - Oct lastSun 2:00 0 S + # Zone NAME STDOFF RULES FORMAT [UNTIL] +-# aka Panniqtuuq +-Zone America/Pangnirtung 0 - -00 1921 # trading post est. +- -4:00 NT_YK A%sT 1995 Apr Sun>=1 2:00 +- -5:00 Canada E%sT 1999 Oct 31 2:00 +- -6:00 Canada C%sT 2000 Oct 29 2:00 +- -5:00 Canada E%sT + # formerly Frobisher Bay + Zone America/Iqaluit 0 - -00 1942 Aug # Frobisher Bay est. + -5:00 NT_YK E%sT 1999 Oct 31 2:00 +@@ -2331,13 +2330,15 @@ + -7:00 NT_YK M%sT 1980 + -7:00 Canada M%sT + Zone America/Whitehorse -9:00:12 - LMT 1900 Aug 20 +- -9:00 NT_YK Y%sT 1967 May 28 0:00 +- -8:00 NT_YK P%sT 1980 ++ -9:00 NT_YK Y%sT 1965 ++ -9:00 Yukon Y%sT 1966 Feb 27 0:00 ++ -8:00 - PST 1980 + -8:00 Canada P%sT 2020 Nov 1 + -7:00 - MST + Zone America/Dawson -9:17:40 - LMT 1900 Aug 20 +- -9:00 NT_YK Y%sT 1973 Oct 28 0:00 +- -8:00 NT_YK P%sT 1980 ++ -9:00 NT_YK Y%sT 1965 ++ -9:00 Yukon Y%sT 1973 Oct 28 0:00 ++ -8:00 - PST 1980 + -8:00 Canada P%sT 2020 Nov 1 + -7:00 - MST + +@@ -2559,6 +2560,14 @@ + # This abolishes DST except where US DST rules are observed, + # and in addition changes all of Chihuahua to -06 with no DST. + ++# From Heitor David Pinto (2022-11-28): ++# Now the northern municipalities want to have the same time zone as the ++# respective neighboring cities in the US, for example Juárez in UTC-7 with ++# DST, matching El Paso, and Ojinaga in UTC-6 with DST, matching Presidio.... ++# the president authorized the publication of the decree for November 29, ++# so the time change would occur on November 30 at 0:00. ++# http://puentelibre.mx/noticia/ciudad_juarez_cambio_horario_noviembre_2022/ ++ + # Rule NAME FROM TO - IN ON AT SAVE LETTER/S + Rule Mexico 1931 only - May 1 23:00 1:00 D + Rule Mexico 1931 only - Oct 1 0:00 0 S +@@ -2590,14 +2599,12 @@ + -6:00 Mexico C%sT + # Coahuila, Nuevo León, Tamaulipas (near US border) + # This includes the following municipalities: +-# in Coahuila: Ocampo, Acuña, Zaragoza, Jiménez, Piedras Negras, Nava, +-# Guerrero, Hidalgo. +-# in Nuevo León: Anáhuac, Los Aldama. ++# in Coahuila: Acuña, Allende, Guerrero, Hidalgo, Jiménez, Morelos, Nava, ++# Ocampo, Piedras Negras, Villa Unión, Zaragoza ++# in Nuevo León: Anáhuac + # in Tamaulipas: Nuevo Laredo, Guerrero, Mier, Miguel Alemán, Camargo, + # Gustavo Díaz Ordaz, Reynosa, Río Bravo, Valle Hermoso, Matamoros. +-# See: Inicia mañana Horario de Verano en zona fronteriza, El Universal, +-# 2016-03-12 +-# http://www.eluniversal.com.mx/articulo/estados/2016/03/12/inicia-manana-horario-de-verano-en-zona-fronteriza ++# https://www.dof.gob.mx/nota_detalle.php?codigo=5670045&fecha=28/10/2022 + Zone America/Matamoros -6:30:00 - LMT 1922 Jan 1 6:00u + -6:00 - CST 1988 + -6:00 US C%sT 1989 +@@ -2616,10 +2623,24 @@ + -6:00 Mexico C%sT 2001 Sep 30 2:00 + -6:00 - CST 2002 Feb 20 + -6:00 Mexico C%sT +-# Chihuahua (near US border) ++# Chihuahua (near US border - western side) + # This includes the municipalities of Janos, Ascensión, Juárez, Guadalupe, +-# Práxedis G Guerrero, Coyame del Sotol, Ojinaga, and Manuel Benavides. +-# (See the 2016-03-12 El Universal source mentioned above.) ++# and Práxedis G Guerrero. ++# http://gaceta.diputados.gob.mx/PDF/65/2a022/nov/20221124-VII.pdf ++Zone America/Ciudad_Juarez -7:05:56 - LMT 1922 Jan 1 7:00u ++ -7:00 - MST 1927 Jun 10 23:00 ++ -6:00 - CST 1930 Nov 15 ++ -7:00 Mexico M%sT 1932 Apr 1 ++ -6:00 - CST 1996 ++ -6:00 Mexico C%sT 1998 ++ -6:00 - CST 1998 Apr Sun>=1 3:00 ++ -7:00 Mexico M%sT 2010 ++ -7:00 US M%sT 2022 Oct 30 2:00 ++ -6:00 - CST 2022 Nov 30 0:00 ++ -7:00 US M%sT ++# Chihuahua (near US border - eastern side) ++# The municipalities of Coyame del Sotol, Ojinaga, and Manuel Benavides. ++# http://gaceta.diputados.gob.mx/PDF/65/2a022/nov/20221124-VII.pdf + Zone America/Ojinaga -6:57:40 - LMT 1922 Jan 1 7:00u + -7:00 - MST 1927 Jun 10 23:00 + -6:00 - CST 1930 Nov 15 +@@ -2629,7 +2650,8 @@ + -6:00 - CST 1998 Apr Sun>=1 3:00 + -7:00 Mexico M%sT 2010 + -7:00 US M%sT 2022 Oct 30 2:00 +- -6:00 - CST ++ -6:00 - CST 2022 Nov 30 0:00 ++ -6:00 US C%sT + # Chihuahua (away from US border) + Zone America/Chihuahua -7:04:20 - LMT 1922 Jan 1 7:00u + -7:00 - MST 1927 Jun 10 23:00 +@@ -2651,6 +2673,18 @@ + -7:00 Mexico M%sT 1999 + -7:00 - MST + ++# Baja California Sur, Nayarit (except Bahía de Banderas), Sinaloa ++Zone America/Mazatlan -7:05:40 - LMT 1922 Jan 1 7:00u ++ -7:00 - MST 1927 Jun 10 23:00 ++ -6:00 - CST 1930 Nov 15 ++ -7:00 Mexico M%sT 1932 Apr 1 ++ -6:00 - CST 1942 Apr 24 ++ -7:00 - MST 1949 Jan 14 ++ -8:00 - PST 1970 ++ -7:00 Mexico M%sT ++ ++# Bahía de Banderas ++ + # From Alexander Krivenyshev (2010-04-21): + # According to news, Bahía de Banderas (Mexican state of Nayarit) + # changed time zone UTC-7 to new time zone UTC-6 on April 4, 2010 (to +@@ -2678,17 +2712,6 @@ + # From Arthur David Olson (2010-05-01): + # Use "Bahia_Banderas" to keep the name to fourteen characters. + +-# Mazatlán +-Zone America/Mazatlan -7:05:40 - LMT 1922 Jan 1 7:00u +- -7:00 - MST 1927 Jun 10 23:00 +- -6:00 - CST 1930 Nov 15 +- -7:00 Mexico M%sT 1932 Apr 1 +- -6:00 - CST 1942 Apr 24 +- -7:00 - MST 1949 Jan 14 +- -8:00 - PST 1970 +- -7:00 Mexico M%sT +- +-# Bahía de Banderas + Zone America/Bahia_Banderas -7:01:00 - LMT 1922 Jan 1 7:00u + -7:00 - MST 1927 Jun 10 23:00 + -6:00 - CST 1930 Nov 15 +--- contrib/tzdata/southamerica.orig ++++ contrib/tzdata/southamerica +@@ -1418,9 +1418,14 @@ + # Milne gives 4:56:16.4 for Bogotá time in 1899. He writes, + # "A variation of fifteen minutes in the public clocks of Bogota is not rare." + ++# From Alois Treindl (2022-11-10): ++# End of time change in Colombia 1993 ... should be 6 February 24h ... ++# DECRETO 267 DE 1993 ++# https://www.suin-juriscol.gov.co/viewDocument.asp?ruta=Decretos/1061335 ++ + # Rule NAME FROM TO - IN ON AT SAVE LETTER/S +-Rule CO 1992 only - May 3 0:00 1:00 - +-Rule CO 1993 only - Apr 4 0:00 0 - ++Rule CO 1992 only - May 3 0:00 1:00 - ++Rule CO 1993 only - Feb 6 24:00 0 - + # Zone NAME STDOFF RULES FORMAT [UNTIL] + #STDOFF -4:56:16.4 + Zone America/Bogota -4:56:16 - LMT 1884 Mar 13 +--- contrib/tzdata/theory.html.orig ++++ contrib/tzdata/theory.html +@@ -60,7 +60,6 @@ + American mountain time zone can choose from the timezones + America/Denver which observes US-style daylight saving + time (DST), +-America/Mazatlan which observes Mexican-style DST, + and America/Phoenix which does not observe DST. + Applications that also deal with past timestamps in the mountain time + zone can choose from over a dozen timezones, such as +--- contrib/tzdata/version.orig ++++ contrib/tzdata/version +@@ -1 +1 @@ +-2022f ++2022g +--- contrib/tzdata/zone.tab.orig ++++ contrib/tzdata/zone.tab +@@ -114,8 +114,7 @@ + CA +5320-06025 America/Goose_Bay Atlantic - Labrador (most areas) + CA +5125-05707 America/Blanc-Sablon AST - QC (Lower North Shore) + CA +4339-07923 America/Toronto Eastern - ON, QC (most areas) +-CA +6344-06828 America/Iqaluit Eastern - NU (most east areas) +-CA +6608-06544 America/Pangnirtung Eastern - NU (Pangnirtung) ++CA +6344-06828 America/Iqaluit Eastern - NU (most areas) + CA +484531-0913718 America/Atikokan EST - ON (Atikokan); NU (Coral H) + CA +4953-09709 America/Winnipeg Central - ON (west); Manitoba + CA +744144-0944945 America/Resolute Central - NU (Resolute) +@@ -277,17 +276,18 @@ + MU -2010+05730 Indian/Mauritius + MV +0410+07330 Indian/Maldives + MW -1547+03500 Africa/Blantyre +-MX +1924-09909 America/Mexico_City Central Time +-MX +2105-08646 America/Cancun Eastern Standard Time - Quintana Roo +-MX +2058-08937 America/Merida Central Time - Campeche, Yucatan +-MX +2540-10019 America/Monterrey Central Time - Durango; Coahuila, Nuevo Leon, Tamaulipas (most areas) +-MX +2550-09730 America/Matamoros Central Time US - Coahuila, Nuevo Leon, Tamaulipas (US border) +-MX +2313-10625 America/Mazatlan Mountain Time - Baja California Sur, Nayarit, Sinaloa +-MX +2838-10605 America/Chihuahua Mountain Time - Chihuahua (most areas) +-MX +2934-10425 America/Ojinaga Mountain Time US - Chihuahua (US border) +-MX +2904-11058 America/Hermosillo Mountain Standard Time - Sonora +-MX +3232-11701 America/Tijuana Pacific Time US - Baja California +-MX +2048-10515 America/Bahia_Banderas Central Time - Bahia de Banderas ++MX +1924-09909 America/Mexico_City Central Mexico ++MX +2105-08646 America/Cancun Quintana Roo ++MX +2058-08937 America/Merida Campeche, Yucatan ++MX +2540-10019 America/Monterrey Durango; Coahuila, Nuevo Leon, Tamaulipas (most areas) ++MX +2550-09730 America/Matamoros Coahuila, Nuevo Leon, Tamaulipas (US border) ++MX +2838-10605 America/Chihuahua Chihuahua (most areas) ++MX +3144-10629 America/Ciudad_Juarez Chihuahua (US border - west) ++MX +2934-10425 America/Ojinaga Chihuahua (US border - east) ++MX +2313-10625 America/Mazatlan Baja California Sur, Nayarit (most areas), Sinaloa ++MX +2048-10515 America/Bahia_Banderas Bahia de Banderas ++MX +2904-11058 America/Hermosillo Sonora ++MX +3232-11701 America/Tijuana Baja California + MY +0310+10142 Asia/Kuala_Lumpur Malaysia (peninsula) + MY +0133+11020 Asia/Kuching Sabah, Sarawak + MZ -2558+03235 Africa/Maputo +--- contrib/tzdata/zone1970.tab.orig ++++ contrib/tzdata/zone1970.tab +@@ -103,8 +103,7 @@ + CA +4606-06447 America/Moncton Atlantic - New Brunswick + CA +5320-06025 America/Goose_Bay Atlantic - Labrador (most areas) + CA,BS +4339-07923 America/Toronto Eastern - ON, QC (most areas), Bahamas +-CA +6344-06828 America/Iqaluit Eastern - NU (most east areas) +-CA +6608-06544 America/Pangnirtung Eastern - NU (Pangnirtung) ++CA +6344-06828 America/Iqaluit Eastern - NU (most areas) + CA +4953-09709 America/Winnipeg Central - ON (west); Manitoba + CA +744144-0944945 America/Resolute Central - NU (Resolute) + CA +624900-0920459 America/Rankin_Inlet Central - NU (central) +@@ -215,17 +214,18 @@ + MT +3554+01431 Europe/Malta + MU -2010+05730 Indian/Mauritius + MV,TF +0410+07330 Indian/Maldives Maldives, Kerguelen, St Paul I, Amsterdam I +-MX +1924-09909 America/Mexico_City Central Time +-MX +2105-08646 America/Cancun Eastern Standard Time - Quintana Roo +-MX +2058-08937 America/Merida Central Time - Campeche, Yucatán +-MX +2540-10019 America/Monterrey Central Time - Durango; Coahuila, Nuevo León, Tamaulipas (most areas) +-MX +2550-09730 America/Matamoros Central Time US - Coahuila, Nuevo León, Tamaulipas (US border) +-MX +2313-10625 America/Mazatlan Mountain Time - Baja California Sur, Nayarit, Sinaloa +-MX +2838-10605 America/Chihuahua Mountain Time - Chihuahua (most areas) +-MX +2934-10425 America/Ojinaga Mountain Time US - Chihuahua (US border) +-MX +2904-11058 America/Hermosillo Mountain Standard Time - Sonora +-MX +3232-11701 America/Tijuana Pacific Time US - Baja California +-MX +2048-10515 America/Bahia_Banderas Central Time - Bahía de Banderas ++MX +1924-09909 America/Mexico_City Central Mexico ++MX +2105-08646 America/Cancun Quintana Roo ++MX +2058-08937 America/Merida Campeche, Yucatán ++MX +2540-10019 America/Monterrey Durango; Coahuila, Nuevo León, Tamaulipas (most areas) ++MX +2550-09730 America/Matamoros Coahuila, Nuevo León, Tamaulipas (US border) ++MX +2838-10605 America/Chihuahua Chihuahua (most areas) ++MX +3144-10629 America/Ciudad_Juarez Chihuahua (US border - west) ++MX +2934-10425 America/Ojinaga Chihuahua (US border - east) ++MX +2313-10625 America/Mazatlan Baja California Sur, Nayarit (most areas), Sinaloa ++MX +2048-10515 America/Bahia_Banderas Bahía de Banderas ++MX +2904-11058 America/Hermosillo Sonora ++MX +3232-11701 America/Tijuana Baja California + MY,BN +0133+11020 Asia/Kuching Sabah, Sarawak, Brunei + MZ,BI,BW,CD,MW,RW,ZM,ZW -2558+03235 Africa/Maputo Central Africa Time + NA -2234+01706 Africa/Windhoek +--- tools/build/mk/OptionalObsoleteFiles.inc.orig ++++ tools/build/mk/OptionalObsoleteFiles.inc +@@ -9798,6 +9798,7 @@ + OLD_FILES+=usr/share/zoneinfo/America/Cayman + OLD_FILES+=usr/share/zoneinfo/America/Chicago + OLD_FILES+=usr/share/zoneinfo/America/Chihuahua ++OLD_FILES+=usr/share/zoneinfo/America/Ciudad_Juarez + OLD_FILES+=usr/share/zoneinfo/America/Costa_Rica + OLD_FILES+=usr/share/zoneinfo/America/Creston + OLD_FILES+=usr/share/zoneinfo/America/Cuiaba diff --git a/website/static/security/patches/EN-23:01/tzdata-2022g.patch.asc b/website/static/security/patches/EN-23:01/tzdata-2022g.patch.asc new file mode 100644 index 0000000000..44308edb01 --- /dev/null +++ b/website/static/security/patches/EN-23:01/tzdata-2022g.patch.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmPj8AcACgkQbljekB8A +Gu8P4Q/8D4ZR6NRzL4rEWK+XAv1tmGkvbie8/y6zc99FRCxmPjmt07y8E1jgGf5h +h1aavFIHbU+X4AA/tVSIDuXVOE1QthnQMrQ8mcqcYITqf5XZLUocNAmly2igH7uI +pURFV1MNo7fOQIvrS7Hp+8nrmcjcYtjKncPdgd/NveMYr+YesCTtWytx2hQ73y0q +6tb/VTOrXCo7oScYxTQCPBXZGZ4qP6dG8CRca9ozpRSHnbGr6Gu6g0J7hSTRPJM5 +nvZwhi7gvYX6j/8Oi5tEUcuea4JzTR4rqP3zcPDAbL5whP7+/oR8m59BkSs95T3c +3Ev63cMxrZsSVUPwy0KQ3CvL9u369sdkuRs6exk4nXh7t5zRCpCcfCQj/MPBcsgz +QPQV80meV3dRZ7vBvCh+n3kgXX/BdmXxwF0EdOc0TBUZf1MVqhCIWG/XtsRIZdOJ +1uw88s8H7YW7/33ne7A0pQn+wSc20y2G4eNNgkb8E3u9/UWKcHymOCGm+qb4rURm +kblwBp6NPFFh3Ld2/0D7G+PpevrUrp9qxaKJctMXtMHJnD4Ug6TUdhbfow6UG173 +hcW+M3It+1NVUmdJ+QirjJVaMwNxwCxHT1PToNgqndFdG8dSkhcuDe9v8OtQ4Kd9 +pCyXTTLWdbO6ZBaRpwetUH3qq/6OHvrA+AglZjE0gUN/UFEQfw8= +=vN0K +-----END PGP SIGNATURE----- diff --git a/website/static/security/patches/EN-23:02/sdhci.patch b/website/static/security/patches/EN-23:02/sdhci.patch new file mode 100644 index 0000000000..1582faebb8 --- /dev/null +++ b/website/static/security/patches/EN-23:02/sdhci.patch @@ -0,0 +1,11 @@ +--- sys/dev/sdhci/sdhci_xenon.c.orig ++++ sys/dev/sdhci/sdhci_xenon.c +@@ -183,7 +183,7 @@ + struct sdhci_xenon_softc *sc = device_get_softc(bus); + + return (sdhci_generic_get_ro(bus, dev) ^ +- (sc->mmc_helper.props & MMC_PROP_WP_INVERTED)); ++ !!(sc->mmc_helper.props & MMC_PROP_WP_INVERTED)); + } + + static bool diff --git a/website/static/security/patches/EN-23:02/sdhci.patch.asc b/website/static/security/patches/EN-23:02/sdhci.patch.asc new file mode 100644 index 0000000000..f94a93996d --- /dev/null +++ b/website/static/security/patches/EN-23:02/sdhci.patch.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmPj8BQACgkQbljekB8A +Gu8r6w/8DMftODTBAsE6U5XGpaezae9S11F1uafRfMgvEnjOzz3HNn2J5+zNpE7k +M1LD06K3LNHZGgpxprE9NhAlclrMoHitHX7wTIpa86WQpY5X2b7nS7Ln52hRO0Dc +c4+7PMtPyUarKxQtJzXQgcd9LaluE90WvwcmrUfHVNworNWNzgg5RTmDjsjASg7r +ZT4kTIn+K9dZlpxjj093XhtVzgNV77NopcrkS3fU/P9Gsb/ir1YNY04VAVi1edBu +SNAlxV+LQOk/wUN5QqYumX+KSPZkvLGwdXeeIgyNnSl1X3UWM5eOFrgQ5OzEU3e/ +95EKlHHgfdjwSfO5+nuF4iw53HBN/ie6++AwSwiMx5I//ifWAoiS1Hc/xDdbq9wL +GnNZ9ji5+bX8slb16nj2buX7i6A1yxXugnMtfqUasj6n6xzYvAfygUSEYZR5bQv9 +Y7TxYTXiyxpCIOWO5BxY5UGr4Yo9CeHgzkrubIrL2u28A3Pfr3HhjywIGvF0Zf/H +uqU5XCRmJti0p8x8qZQR7Re9Vu3L1USTE5nJMLUxc5J2r/FAdtjOqLETDGeKqx6b +rbMv15h6FcsHm3+6GsUL6Xl3+YGBOA6OEsEPvRBFNj8K/22Vl9JzTk6Ls6F0xWXK +XGt/ptzrKeAa3CzWKoi/0CSmSDVycNK+KI+fbPCDdKkMdINTYBw= +=jiSU +-----END PGP SIGNATURE----- diff --git a/website/static/security/patches/EN-23:03/ena.patch b/website/static/security/patches/EN-23:03/ena.patch new file mode 100644 index 0000000000..fe45bc29f5 --- /dev/null +++ b/website/static/security/patches/EN-23:03/ena.patch @@ -0,0 +1,125 @@ +--- sys/dev/ena/ena.c.orig ++++ sys/dev/ena/ena.c +@@ -155,6 +155,7 @@ + static int ena_enable_wc(device_t, struct resource *); + static int ena_set_queues_placement_policy(device_t, struct ena_com_dev *, + struct ena_admin_feature_llq_desc *, struct ena_llq_configurations *); ++static int ena_map_llq_mem_bar(device_t, struct ena_com_dev *); + static uint32_t ena_calc_max_io_queue_num(device_t, struct ena_com_dev *, + struct ena_com_dev_get_features_ctx *); + static int ena_calc_io_queue_size(struct ena_calc_queue_size_ctx *); +@@ -2571,8 +2572,7 @@ + struct ena_admin_feature_llq_desc *llq, + struct ena_llq_configurations *llq_default_configurations) + { +- struct ena_adapter *adapter = device_get_softc(pdev); +- int rc, rid; ++ int rc; + uint32_t llq_feature_mask; + + llq_feature_mask = 1 << ENA_ADMIN_LLQ; +@@ -2583,26 +2583,36 @@ + return (0); + } + ++ if (ena_dev->mem_bar == NULL) { ++ ena_log(pdev, WARN, ++ "LLQ is advertised as supported but device doesn't expose mem bar.\n"); ++ ena_dev->tx_mem_queue_type = ENA_ADMIN_PLACEMENT_POLICY_HOST; ++ return (0); ++ } ++ + rc = ena_com_config_dev_mode(ena_dev, llq, llq_default_configurations); + if (unlikely(rc != 0)) { + ena_log(pdev, WARN, "Failed to configure the device mode. " + "Fallback to host mode policy.\n"); + ena_dev->tx_mem_queue_type = ENA_ADMIN_PLACEMENT_POLICY_HOST; +- return (0); + } + +- /* Nothing to config, exit */ +- if (ena_dev->tx_mem_queue_type == ENA_ADMIN_PLACEMENT_POLICY_HOST) +- return (0); ++ return (0); ++} ++ ++static int ++ena_map_llq_mem_bar(device_t pdev, struct ena_com_dev *ena_dev) ++{ ++ struct ena_adapter *adapter = device_get_softc(pdev); ++ int rc, rid; + + /* Try to allocate resources for LLQ bar */ + rid = PCIR_BAR(ENA_MEM_BAR); + adapter->memory = bus_alloc_resource_any(pdev, SYS_RES_MEMORY, + &rid, RF_ACTIVE); + if (unlikely(adapter->memory == NULL)) { +- ena_log(pdev, WARN, "unable to allocate LLQ bar resource. " +- "Fallback to host mode policy.\n"); +- ena_dev->tx_mem_queue_type = ENA_ADMIN_PLACEMENT_POLICY_HOST; ++ ena_log(pdev, WARN, ++ "Unable to allocate LLQ bar resource. LLQ mode won't be used.\n"); + return (0); + } + +@@ -2791,6 +2801,7 @@ + ena_device_init(struct ena_adapter *adapter, device_t pdev, + struct ena_com_dev_get_features_ctx *get_feat_ctx, int *wd_active) + { ++ struct ena_llq_configurations llq_config; + struct ena_com_dev* ena_dev = adapter->ena_dev; + bool readless_supported; + uint32_t aenq_groups; +@@ -2870,6 +2881,15 @@ + + *wd_active = !!(aenq_groups & BIT(ENA_ADMIN_KEEP_ALIVE)); + ++ set_default_llq_configurations(&llq_config, &get_feat_ctx->llq); ++ ++ rc = ena_set_queues_placement_policy(pdev, ena_dev, &get_feat_ctx->llq, ++ &llq_config); ++ if (unlikely(rc != 0)) { ++ ena_log(pdev, ERR, "Failed to set placement policy\n"); ++ goto err_admin_init; ++ } ++ + return (0); + + err_admin_init: +@@ -3506,7 +3526,6 @@ + ena_attach(device_t pdev) + { + struct ena_com_dev_get_features_ctx get_feat_ctx; +- struct ena_llq_configurations llq_config; + struct ena_calc_queue_size_ctx calc_queue_ctx = { 0 }; + static int version_printed; + struct ena_adapter *adapter; +@@ -3579,7 +3598,11 @@ + goto err_bus_free; + } + +- ena_dev->tx_mem_queue_type = ENA_ADMIN_PLACEMENT_POLICY_HOST; ++ rc = ena_map_llq_mem_bar(pdev, ena_dev); ++ if (unlikely(rc != 0)) { ++ ena_log(pdev, ERR, "Failed to map ENA mem bar"); ++ goto err_bus_free; ++ } + + /* Initially clear all the flags */ + ENA_FLAG_ZERO(adapter); +@@ -3592,15 +3615,6 @@ + goto err_bus_free; + } + +- set_default_llq_configurations(&llq_config, &get_feat_ctx.llq); +- +- rc = ena_set_queues_placement_policy(pdev, ena_dev, &get_feat_ctx.llq, +- &llq_config); +- if (unlikely(rc != 0)) { +- ena_log(pdev, ERR, "failed to set placement policy\n"); +- goto err_com_free; +- } +- + if (ena_dev->tx_mem_queue_type == ENA_ADMIN_PLACEMENT_POLICY_DEV) + adapter->disable_meta_caching = + !!(get_feat_ctx.llq.accel_mode.u.get.supported_flags & diff --git a/website/static/security/patches/EN-23:03/ena.patch.asc b/website/static/security/patches/EN-23:03/ena.patch.asc new file mode 100644 index 0000000000..b167b60aca --- /dev/null +++ b/website/static/security/patches/EN-23:03/ena.patch.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmPj8BYACgkQbljekB8A +Gu8knBAA0Ht1nQiF8yB7udpP/iZgpmK0Ju4a8NtHtuJcYR0lGNlNsOfCt+QgwZrJ +kFEA5D7vxzCsdY7a5AoIMy/kvsKk3oL4xDMBh4rTdR0e4tkrMDC8IKxwFDQntd9j +f3uVOf97l/UtooxSiDIHYdnvJZUg1Kyw99z6v46sHnNPlKGg/DJImWZF8N0jZXus +20W1dSP0gBX+vFQqrmOjWTcLu66jAlH3ufssEIj0hEwhHhrUhjm33B1PCTBKO5ir +6zM4icKbFM+MreQ5E8N7EkUWSX4TD8G7/YJHYUh7HIM64lYuSkIUSBYxHSLeIKn7 +6eMMYmZRY/3N7+SGMFMJ/qHUGCGMdF3gU0iL8eJqzo/E2rr0o31GCcFExHOdGxEc +aVqnU/z81D2X1iBkM4cMMy2rihOcdtt+1jSHALMjxZzQDaHHiPGd0JS1rPSorTNs +/MjPr6H5xWF/scFwShuPy0wH+zA+1093H5P+QZLGnbfGg1nQAqMBYUWEIJ2ByVnv +rzjeDeURbW9OYaC8X1bFhqQqddN9b8/telkbiUKd0O8JCuos/QhCWQGEl/gKjNTV +hEBNvY2xJ3cMImsc5kOkGFTN0SPUY1onfnReZPcxSXMUeF0b7z0pmDtH0zGsFBtk +cU3qMZOQ8nswLpDJK0su87+y6rj/oRCbaYs7bp0NmmDPSLEIrkg= +=0+uS +-----END PGP SIGNATURE----- diff --git a/website/static/security/patches/EN-23:04/ixgbe.patch b/website/static/security/patches/EN-23:04/ixgbe.patch new file mode 100644 index 0000000000..f90a951424 --- /dev/null +++ b/website/static/security/patches/EN-23:04/ixgbe.patch @@ -0,0 +1,16 @@ +--- sys/dev/ixgbe/if_ix.c.orig ++++ sys/dev/ixgbe/if_ix.c +@@ -1584,8 +1584,12 @@ + * - fragmented packets count, + * - oversized packets count, + * - jabber count. ++ * ++ * Ignore XEC errors for 82599 to workaround errata about ++ * UDP frames with zero checksum. + */ +- IXGBE_SET_IERRORS(sc, stats->crcerrs + stats->illerrc + stats->xec + ++ IXGBE_SET_IERRORS(sc, stats->crcerrs + stats->illerrc + ++ (hw->mac.type != ixgbe_mac_82599EB ? stats->xec : 0) + + stats->mpc[0] + stats->rlec + stats->ruc + stats->rfc + stats->roc + + stats->rjc); + } /* ixgbe_update_stats_counters */ diff --git a/website/static/security/patches/EN-23:04/ixgbe.patch.asc b/website/static/security/patches/EN-23:04/ixgbe.patch.asc new file mode 100644 index 0000000000..71f3e7ea12 --- /dev/null +++ b/website/static/security/patches/EN-23:04/ixgbe.patch.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmPj8BgACgkQbljekB8A +Gu/tWRAA6p7HVqPwrs+dFq96IR7EAsgcgc2yyZc1WkFBVD2QjJBUwrblzglhCpu9 +cff1jGFHX166FCvtA4IWwE52XpyNEv/C/111sTaDY/1vvOPE3K30k7M3AtqyrYJ8 +wM4Sk4HvGxEIL+SvtfZB/zeD198M5YpEtHDE8hReIdrbWx/YYbN4dwzAixWaIu9w +8iGvjyfSN2Qnu8/DCEZTHwqk1++b9Kb9HJRjLZ1P/d1FDqpOdQcCUR1D86jNDmA4 +StaCOpRgy3YOr++zh61UW2UUtH0caSGVZ2Ne0A+vI6+kncCtarU0Z0feSA7wY6r8 +En9LQFMVP2VZyBU6U67pM8cgEsRwifkKIgkrTGtwOi/hMRdR9JyAiHzdHoGXfcgy +OzCTuBHVRyrImeAJPQ6gXqLsiNrmMyRdIKZK/dI3Q3UPaLadf05guv/htJYt/l3p +wndbWeKvZyRhsy/s7M7mZVMgQx+naBMS7SVNsJzugsHwO7W3BW+4h/mxiihuWPMB +tq1vjAxK1b5jMUzkmzlUwBrGQQ4J8fuYoE3ZhNAmqxBuJa22JARESicY+IV3UcLb +8Mpco1BzRb3fCib3/O67Q3by+NPk9VQOqgPB7v3pjGuI4vrYI63Fmq+WK/VZGgnu +zH0j9pXG5sgvQ2zelCpgu+hAx+JdD6abd2QlOSvfMx86X9Nouew= +=oqaE +-----END PGP SIGNATURE----- diff --git a/website/static/security/patches/SA-23:01/geli.patch b/website/static/security/patches/SA-23:01/geli.patch new file mode 100644 index 0000000000..c089e55587 --- /dev/null +++ b/website/static/security/patches/SA-23:01/geli.patch @@ -0,0 +1,181 @@ +--- lib/geom/eli/geom_eli.c.orig ++++ lib/geom/eli/geom_eli.c +@@ -571,27 +571,35 @@ + return (0); + } + +-static unsigned char * +-eli_genkey(struct gctl_req *req, struct g_eli_metadata *md, unsigned char *key, +- bool new) ++static bool ++eli_init_key_hmac_ctx(struct gctl_req *req, struct hmac_ctx *ctx, bool new) + { +- struct hmac_ctx ctx; +- bool nopassphrase; + int nfiles; ++ bool nopassphrase; + + nopassphrase = + gctl_get_int(req, new ? "nonewpassphrase" : "nopassphrase"); + +- g_eli_crypto_hmac_init(&ctx, NULL, 0); +- +- nfiles = eli_genkey_files(req, new, "keyfile", &ctx, NULL, 0); +- if (nfiles == -1) +- return (NULL); +- else if (nfiles == 0 && nopassphrase) { ++ g_eli_crypto_hmac_init(ctx, NULL, 0); ++ nfiles = eli_genkey_files(req, new, "keyfile", ctx, NULL, 0); ++ if (nfiles == -1) { ++ return (false); ++ } else if (nfiles == 0 && nopassphrase) { + gctl_error(req, "No key components given."); +- return (NULL); ++ return (false); + } + ++ return (true); ++} ++ ++static unsigned char * ++eli_genkey(struct gctl_req *req, const struct hmac_ctx *ctxtemplate, ++ struct g_eli_metadata *md, unsigned char *key, bool new) ++{ ++ struct hmac_ctx ctx; ++ ++ memcpy(&ctx, ctxtemplate, sizeof(ctx)); ++ + if (eli_genkey_passphrase(req, md, new, &ctx) == -1) + return (NULL); + +@@ -600,6 +608,22 @@ + return (key); + } + ++static unsigned char * ++eli_genkey_single(struct gctl_req *req, struct g_eli_metadata *md, ++ unsigned char *key, bool new) ++{ ++ struct hmac_ctx ctx; ++ unsigned char *rkey; ++ ++ if (!eli_init_key_hmac_ctx(req, &ctx, new)) { ++ return (NULL); ++ } ++ rkey = eli_genkey(req, &ctx, md, key, new); ++ explicit_bzero(&ctx, sizeof(ctx)); ++ ++ return (rkey); ++} ++ + static int + eli_metadata_read(struct gctl_req *req, const char *prov, + struct g_eli_metadata *md) +@@ -711,6 +735,7 @@ + intmax_t val; + int error, i, nargs, nparams, param; + const int one = 1; ++ struct hmac_ctx ctxtemplate; + + nargs = gctl_get_int(req, "nargs"); + if (nargs <= 0) { +@@ -844,6 +869,10 @@ + */ + nparams = req->narg - nargs - 1; + ++ /* Generate HMAC context template. */ ++ if (!eli_init_key_hmac_ctx(req, &ctxtemplate, true)) ++ return; ++ + /* Create new child request for each provider and issue to kernel */ + for (i = 0; i < nargs; i++) { + r = gctl_get_handle(); +@@ -885,7 +914,7 @@ + arc4random_buf(md.md_mkeys, sizeof(md.md_mkeys)); + + /* Generate user key. */ +- if (eli_genkey(r, &md, key, true) == NULL) { ++ if (eli_genkey(r, &ctxtemplate, &md, key, true) == NULL) { + /* + * Error generating key - details added to geom request + * by eli_genkey(). +@@ -1009,6 +1038,7 @@ + + /* Clear the cached metadata, including keys. */ + explicit_bzero(&md, sizeof(md)); ++ explicit_bzero(&ctxtemplate, sizeof(ctxtemplate)); + } + + static void +@@ -1020,6 +1050,7 @@ + off_t mediasize; + int i, nargs, nparams, param; + const int one = 1; ++ struct hmac_ctx ctxtemplate; + + nargs = gctl_get_int(req, "nargs"); + if (nargs <= 0) { +@@ -1035,6 +1066,10 @@ + */ + nparams = req->narg - nargs - 1; + ++ /* Generate HMAC context template. */ ++ if (!eli_init_key_hmac_ctx(req, &ctxtemplate, false)) ++ return; ++ + /* Create new child request for each provider and issue to kernel */ + for (i = 0; i < nargs; i++) { + r = gctl_get_handle(); +@@ -1064,7 +1099,7 @@ + goto out; + } + +- if (eli_genkey(r, &md, key, false) == NULL) { ++ if (eli_genkey(r, &ctxtemplate, &md, key, false) == NULL) { + /* + * Error generating key - details added to geom request + * by eli_genkey(). +@@ -1098,6 +1133,7 @@ + + /* Clear sensitive data from memory. */ + explicit_bzero(cached_passphrase, sizeof(cached_passphrase)); ++ explicit_bzero(&ctxtemplate, sizeof(ctxtemplate)); + } + + static void +@@ -1295,7 +1331,7 @@ + old = md->md_iterations; + + /* Generate key for Master Key encryption. */ +- if (eli_genkey(req, md, key, true) == NULL) { ++ if (eli_genkey_single(req, md, key, true) == NULL) { + explicit_bzero(key, sizeof(key)); + return; + } +@@ -1330,7 +1366,7 @@ + } + + /* Generate key for Master Key decryption. */ +- if (eli_genkey(req, md, key, false) == NULL) { ++ if (eli_genkey_single(req, md, key, false) == NULL) { + explicit_bzero(key, sizeof(key)); + return; + } +@@ -1388,7 +1424,7 @@ + explicit_bzero(mkey, sizeof(mkey)); + + /* Generate key for Master Key encryption. */ +- if (eli_genkey(req, md, key, true) == NULL) { ++ if (eli_genkey_single(req, md, key, true) == NULL) { + explicit_bzero(key, sizeof(key)); + explicit_bzero(md, sizeof(*md)); + return; +@@ -1534,7 +1570,7 @@ + return; + } + +- if (eli_genkey(req, &md, key, false) == NULL) { ++ if (eli_genkey_single(req, &md, key, false) == NULL) { + explicit_bzero(key, sizeof(key)); + return; + } diff --git a/website/static/security/patches/SA-23:01/geli.patch.asc b/website/static/security/patches/SA-23:01/geli.patch.asc new file mode 100644 index 0000000000..3bbaf689ab --- /dev/null +++ b/website/static/security/patches/SA-23:01/geli.patch.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmPj8CAACgkQbljekB8A +Gu/XgQ//Q6uO+nHWtvXCp1vkiBIVoILV9APV4XMCfggARkjQ5mu4p3i5gwMrIbDx +v3V41OplhufP9hzMJrtep3B9JB3OnvjOW6SbkYxdVvnw405Npv9xJu9NJ55lcA8F +U68Mxp0Xt3iDAlAQSeLMmfytPMMxsjDPWbtWTeFxjpKBsTXM4vdb+6K5eXzp02aK +bJ1P8LOhiZU4iNjfDemO4gr0vllXnP2vzapmpYidjDItJ+dcR64a7R4pmRQGDy4Q +US+0a+yEGx+7H2z+F/fwBJGDMNOaetTk1jjSuWlJFfmC3io80eHmJqiIKka1N1WH +JUZlOJHJiJM77CDr9//A/rrDy+cOKtLCIja0s0MKtmvTwDC5pTnO+wSP+fnWgX6f +mLNpbOmISe+ABmWss/IJc3nZwosoFvQAhK+7GB1C6qtlrzP5BIGm/WhP+6RduPNG +eqGpEpRwRExqyDluc1mVu8wp0fXM6zM8fb5/FQI9NX7RREbNxFLicvLOk5Y1FvbA +zTu8hyfL+1lIVbKCq6GlsAJPOZDQdJq3icVg4mXnsIyuuOiD/io3q7RYMpR9asLt +AHCHANdNeV3kH5THULgurb7vJx+QG3Nwf1XAnbXuOpGJh/6wFH4B10HDXh6+U0Fn +xNgT/NxXqaGFlXvLgJOkrztypDD8jDi8MBPrqg4iR5apTbzAMl0= +=mtnf +-----END PGP SIGNATURE-----