Index: head/share/security/advisories/FreeBSD-EN-20:17.linuxthread.asc =================================================================== --- head/share/security/advisories/FreeBSD-EN-20:17.linuxthread.asc (nonexistent) +++ head/share/security/advisories/FreeBSD-EN-20:17.linuxthread.asc (revision 54452) @@ -0,0 +1,132 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-20:17.linuxthread Errata Notice + The FreeBSD Project + +Topic: FreeBSD Linux ABI kernel panic + +Category: core +Module: kernel +Announced: 2020-09-02 +Credits: Martin Filla + Henrique L. Amorim, Independent Security Researcher + Rodrigo Rubira Branco (BSDaemon), Amazon Web Services +Affects: All supported versions of FreeBSD. +Corrected: 2020-06-25 05:24:35 UTC (stable/12, 12.1-STABLE) + 2020-09-02 16:21:27 UTC (releng/12.1, 12.1-RELEASE-p9) + 2020-06-25 05:35:46 UTC (stable/11, 11.4-STABLE) + 2020-09-02 16:21:27 UTC (releng/11.4, 11.4-RELEASE-p3) + 2020-09-02 16:21:27 UTC (releng/11.3, 11.3-RELEASE-p13) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +The Linux ABI layer (Linuxulator) allows Linux binaries to be executed on a +FreeBSD kernel. + +II. Problem Description + +The kernel function handling exec(3) of a Linux binary did not correctly +handle a calling process with multiple threads. + +III. Impact + +A multithread non-Linux process execing a Linux binary would fail a kernel +assertion, resuting in a kernel panic "thread_detach: emuldata not found." + +IV. Workaround + +No workaround is available. Systems not using the Linux ABI layer are not +affected. + +V. Solution + +Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date, and reboot. + +Perform one of the following: + +1) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install +# shutdown -r +10min "Rebooting for an errata update" + +2) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/EN-20:17/linuxthread.patch +# fetch https://security.FreeBSD.org/patches/EN-20:17/linuxthread.patch.asc +# gpg --verify linuxthread.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/12/ r362605 +releng/12.1/ r365253 +stable/11/ r362606 +releng/11.4/ r365253 +releng/11.3/ r365253 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAl9PzRZfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cIZEw//QwJJ3DX0k1PnOwRDdl5KSORAZq1Qfa0Rdo4N3QK31Ap/GiAmW+6wZRr1 +Cb3dAywlfjw8F+Hnxc6za1V0W7Ckr/tbJHGt1XXsq8Pjpc6+GdNGRZi7eiAQHvU7 +I9xkL1jnerBY0l5hq8A6ti1vhraNEFvA0/0lluhqCpgFPEtc/vbvKemyC0RAKVzF +wAz7P3/OyQqcd5qVHBIYfOziau/lfQ2/qD+6hLSZ5pgGX4e/tB1NrYVSd0vNevOl +d3P9LDQYxSIzQ5jHbfLSFOPkT471ItJ6+QW+pAIZQ0Sv4hTQPBRHOL4ZfXG/IDgr ++mVBa6L8lykeC+xh9Teih+dKqZRY5SzKuZVUqURCY2P6miq8C5A2eiTtGIIuwgFF +okqTJx0a+ECAEc7dmaEAM8snqKiPYgu1cCOXKrvAPpkB/Ss1w0Zr/YxLW6v3lMmO +nFOUGeXF9hLxDIINdKRNdaum8aqy1Vtg6xKNfP6z/H4V6saLSLrWk0M2HDKNOyts +MHc/P7zg7hMw1ft/VhiOEWgCk7Se3Q1D2IY53BsUNgtbs5ti29mEeOkNO09FkPYL +t9f3uIOZD9PLg1kDIDA97DulL95gXyX2K10wHciOnDgU+UitHCOqXAnkYGKbezfS +ID1JRdq4uHHIjPOTOiUkTYJDnR/Lgz2572KkTjM5d7YOviS8nS0= +=1pOR +-----END PGP SIGNATURE----- Property changes on: head/share/security/advisories/FreeBSD-EN-20:17.linuxthread.asc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/advisories/FreeBSD-EN-20:18.getfsstat.asc =================================================================== --- head/share/security/advisories/FreeBSD-EN-20:18.getfsstat.asc (nonexistent) +++ head/share/security/advisories/FreeBSD-EN-20:18.getfsstat.asc (revision 54452) @@ -0,0 +1,124 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-20:18.getfsstat Errata Notice + The FreeBSD Project + +Topic: getfsstat compatibility system call panic + +Category: core +Module: getfsstat +Announced: 2020-09-02 +Credits: Rodrigo Rubira Branco (BSDaemon), Amazon Web Services +Affects: FreeBSD 11.3 and 11.4 +Corrected: 2020-06-20 04:39:52 UTC (stable/11, 11.4-STABLE) + 2020-09-02 16:22:14 UTC (releng/11.4, 11.4-RELEASE-p3) + 2020-09-02 16:22:14 UTC (releng/11.3, 11.3-RELEASE-p13) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +getfsstat(2) is a system call which provides information about mounted +filesystems. The kernel provides compatibility system calls for old +versions of the interface. + +II. Problem Description + +A bug in an internal interface used by getfsstat(2) compatibility system +calls could result in a free of an uninitialized pointer when getfsstat(2) +is called with an invalid argument. + +III. Impact + +A kernel panic can be triggered by an unprivileged user process. + +IV. Workaround + +No workaround is available. + +V. Solution + +Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date, and reboot. + +Perform one of the following: + +1) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install +# shutdown -r +10min "Rebooting for an errata update" + +2) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/EN-20:18/getfsstat.patch +# fetch https://security.FreeBSD.org/patches/EN-20:18/getfsstat.patch.asc +# gpg --verify getfsstat.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/11/ r362426 +releng/11.4/ r365254 +releng/11.3/ r365254 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAl9PzSVfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cJrrw/9E3bKTN36F+FPrGdi6wWeAHUEZt3hoonrFqrn4SPUEVSRkk39HGpitgJ8 +KU7HDr9U9B6zaIYnqE+1BWiIYYhqQQM5zb77TGr0fy/LVa8a+m/6o9wzib26lsAT +jrBS0hsZ0Swb8TlrQdaEpLp1wkEdhy5t10hJ/+/nezzo+q2C52m4Bs80J7gE9BCq +uxgCRlnld3fXJrKrOva8WfvMziE8nV9CzKF9luYlP7U9s1PS5H5U6r22Y8tvzZqS +IbH60i7vPhlqX8faxZfKGRIABsJhnee98JF0rDRBOmMwTnFBTmaot75eEjwZIc5p +0GtM27NOM6a/AaO9Yr8U4PI0PffTi8hVm/1t6dlhG5X3O7IUxKC0XT1vlh3jJ1j2 +9i1iuuGU3zSzTSMyWMmzuxCz/YK0C/g4C86ehkdxOYtn6RV31rMSoKdPjxSbyhIJ +ef1eXHm6iBM8aofto24WjCSftPno0rx1peeOnKAqvpTpGH+n08H6iRFagaOt6kkQ +qhy+ZtrlzmjUeUqwLSnyuHJtK+QkP1WFTnT9QgMPnqpRB9e+OsQC2K1KgR9lkOG0 +2kyTu+fJGkNvhiHxKuvIsh5OiNvNm/QHYwESaGPbFhierh+CHs00M00GyeeCjBSr +nMbA3DsD3OxrrxYqh/17x4XoiopY6gUSlDSG+RbsTFsTqTxi308= +=E4P4 +-----END PGP SIGNATURE----- Property changes on: head/share/security/advisories/FreeBSD-EN-20:18.getfsstat.asc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/advisories/FreeBSD-SA-20:24.ipv6.asc =================================================================== --- head/share/security/advisories/FreeBSD-SA-20:24.ipv6.asc (nonexistent) +++ head/share/security/advisories/FreeBSD-SA-20:24.ipv6.asc (revision 54452) @@ -0,0 +1,124 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-SA-20:24.ipv6 Security Advisory + The FreeBSD Project + +Topic: IPv6 Hop-by-Hop options use-after-free bug + +Category: core +Module: kernel +Announced: 2020-09-02 +Affects: FreeBSD 11.3 +Corrected: 2020-05-07 01:28:59 UTC (stable/11, 11.4-PRERELEASE) + 2020-09-02 16:23:15 UTC (releng/11.3, 11.3-RELEASE-p13) +CVE Name: CVE-2020-7462 + +For general information regarding FreeBSD Security Advisories, +including descriptions of the fields above, security branches, and the +following sections, please visit . + +I. Background + +IPv6 is a network layer supporting Hop-by-Hop options, which can be sent by +applications via the socket API. The memory management for packet handling +is done using mbufs. + +II. Problem Description + +Due to improper mbuf handling in the kernel, a use-after-free bug might be +triggered by sending IPv6 Hop-by-Hop options over the loopback interface. + +III. Impact + +Triggering the use-after-free situation may result in unintended kernel +behaviour including a kernel panic. + +IV. Workaround + +No workaround is available. + +V. Solution + +Upgrade your vulnerable system to a supported FreeBSD stable or +release / security branch (releng) dated after the correction date, +and reboot. + +Perform one of the following: + +1) To update your vulnerable system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install +# shutdown -r +10min "Rebooting for a security update" + +2) To update your vulnerable system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/SA-20:24/ipv6.patch +# fetch https://security.FreeBSD.org/patches/SA-20:24/ipv6.patch.asc +# gpg --verify ipv6.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/11/ r360733 +releng/11.3/ r365255 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAl9PzTNfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cLJYxAAotGAWrawa3gRK8gVpEIJiYknR9bODjDojm7KovlkuKeYAkyQ92/Ii23U +U6tMXSPDYQFyscOdrGq4yEjxRDLLkGQGynQpioinDn8POKX7BKpy+PFFdv1mmBef +h/WpgmlPdhymYisaImgVyGAxU81auzpFB6mArzFDCdHavTd7jVD2lJwcpdzeOk// +NHOsj8C4VYJs0XcYrNa4CEWfH/D/uNO8u2b3QUfKQSOdfIfaDv22k2b96YKm+zcr +xS7Q1jDv7QBTQou7KNOfoPi0Gclp8Q9VReP2nY/hB5TmJjR3irz+Z6UcGfiyDGrL +XRB7oP23jIUmBbsINUN06FIhAPGF9/7zcOOoV1YOdwvmbLM0/W4c+mERZ16gw6+N +MzCLDOeiyKAUr+pQzcl6lORxr31eB8400l6nRJwmCiWx4nHwyHPIl1RtfvsdNqfE +/OBVEalxsCrzStfW4ME5RziPo9Y8DrajPf7+JY/4CIV3v/dJAiGi3+qs9Zn8enar +WCR/8+o4xbT+d1sGTG1W3Qjh9a28jxqEusLjdehDy8PTk9OnIfPRuxj+kvot3Wo0 +lWdeSIo8YZPYn7hG9N19k6aDlljM1fgkBmWj1uELtCeIE7WM5tHGMBuaS0cTt1jL +s2g01qgkgW2a6cChdm3oNfUKE5KpD3/hU63/jEA6QyJJQQqXlOs= +=kFlz +-----END PGP SIGNATURE----- Property changes on: head/share/security/advisories/FreeBSD-SA-20:24.ipv6.asc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/advisories/FreeBSD-SA-20:25.sctp.asc =================================================================== --- head/share/security/advisories/FreeBSD-SA-20:25.sctp.asc (nonexistent) +++ head/share/security/advisories/FreeBSD-SA-20:25.sctp.asc (revision 54452) @@ -0,0 +1,142 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-SA-20:25.sctp Security Advisory + The FreeBSD Project + +Topic: SCTP socket use-after-free bug + +Category: core +Module: kernel +Announced: 2020-09-02 +Credits: Megan2013678@protonmail.com +Affects: All supported versions of FreeBSD. +Corrected: 2020-08-24 09:19:05 UTC (stable/12, 12.1-STABLE) + 2020-09-02 16:24:32 UTC (releng/12.1, 12.1-RELEASE-p9) + 2020-08-24 09:46:36 UTC (stable/11, 11.4-STABLE) + 2020-09-02 16:24:32 UTC (releng/11.4, 11.4-RELEASE-p3) + 2020-09-02 16:24:32 UTC (releng/11.3, 11.3-RELEASE-p13) +CVE Name: CVE-2020-7463 + +For general information regarding FreeBSD Security Advisories, +including descriptions of the fields above, security branches, and the +following sections, please visit . + +I. Background + +The Stream Control Transmission Protocol (SCTP) is a message oriented +transport protocol supporting arbitrary large user messages. +It can be accessed from applications by using the the socket API. + +II. Problem Description + +Due to improper handling in the kernel, a use-after-free bug can be triggered +by sending large user messages from multiple threads on the same socket. + +III. Impact + +Triggering the use-after-free situation may result in unintended kernel +behaviour including a kernel panic. + +IV. Workaround + +No workaround is available. + +V. Solution + +Upgrade your vulnerable system to a supported FreeBSD stable or +release / security branch (releng) dated after the correction date, +and reboot. + +Perform one of the following: + +1) To update your vulnerable system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install +# shutdown -r +10min "Rebooting for a security update" + +2) To update your vulnerable system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +[FreeBSD 12.1] +# fetch https://security.FreeBSD.org/patches/SA-20:25/sctp.12.1.patch +# fetch https://security.FreeBSD.org/patches/SA-20:25/sctp.12.1.patch.asc +# gpg --verify sctp.12.1.patch.asc + +[FreeBSD 11.4] +# fetch https://security.FreeBSD.org/patches/SA-20:25/sctp.11.4.patch +# fetch https://security.FreeBSD.org/patches/SA-20:25/sctp.11.4.patch.asc +# gpg --verify sctp.11.4.patch.asc + +[FreeBSD 11.3] +# fetch https://security.FreeBSD.org/patches/SA-20:25/sctp.11.3.patch +# fetch https://security.FreeBSD.org/patches/SA-20:25/sctp.11.3.patch.asc +# gpg --verify sctp.11.3.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/12/ r364644 +releng/12.1/ r365256 +stable/11/ r364651 +releng/11.4/ r365256 +releng/11.3/ r365256 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAl9PzTZfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cIMPw//ZOYh7TQdwvreQ/iZbJphPp7hBVJqFWPE9M72Yfo87/vkl+T5/GW9wiLT +MQlknQ7SDyzE7i8RpGvX0lmXLbr1e2rkvin1ZFdCbWkPzC7w0WVH7XX6+I+RJmkh +E4dtmHrYhLRwmVtW5WYZdfO+iYVTJl/h43eYbYvNgJZSuKkvl2Vk6DqyseHx7xR6 +gc7/41AIpMiqRLQI9ZnRvZCEiLq4G+q5z499ACfAutT9o+1T9L6QLCPuyY+fziiq +cI2E/pQA5uxOY/z3ejKHeOzErjycY6GEhMiBKmsJqV6oU/cZd5hZ1qsmE9Xbi3/c +Ax+OZr+Ve2a78dD7jOrmCrpBtG1Pg39c6VuQqHD3UN3seBNEkn4kto9vDX9fLceD +GZbueV97boFxjnXu1B6C8ufqEZDqTaf/SU3+vCobBgydP+V8c1P5LbP6qcFHOUrk +k7ijiJv03aYyY1Z6XtqbRsudZzIaTt+jneUA1eA46iWQqVZQHKo2liw5kAtsGu0k +injGcazWRphV6xgOHIMCfrGcLLf0j+4UjiDUk30cansLGewuk/uEh6FlA4NzyRWA +4L3Q0l/XQWvO2sNMtF9LbBUUujDyy93Vy8BouSp59v7+bAYrRHfcIAmaQnE4jev2 +BY7/JsrfQ9rG/Anzg49Hec8pw9VEvv4kA1STqXcpMt9Fq+0DslA= +=2ET6 +-----END PGP SIGNATURE----- Property changes on: head/share/security/advisories/FreeBSD-SA-20:25.sctp.asc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/advisories/FreeBSD-SA-20:26.dhclient.asc =================================================================== --- head/share/security/advisories/FreeBSD-SA-20:26.dhclient.asc (nonexistent) +++ head/share/security/advisories/FreeBSD-SA-20:26.dhclient.asc (revision 54452) @@ -0,0 +1,145 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-SA-20:26.dhclient Security Advisory + The FreeBSD Project + +Topic: dhclient heap overflow + +Category: core +Module: dhclient +Announced: 2020-09-02 +Credits: Shlomi Oberman, JSOF +Affects: All supported versions of FreeBSD. +Corrected: 2020-08-31 21:28:09 UTC (stable/12, 12.1-STABLE) + 2020-09-02 16:25:31 UTC (releng/12.1, 12.1-RELEASE-p9) + 2020-08-31 21:28:57 UTC (stable/11, 11.4-STABLE) + 2020-09-02 16:25:31 UTC (releng/11.4, 11.4-RELEASE-p3) + 2020-09-02 16:25:31 UTC (releng/11.3, 11.3-RELEASE-p13) +CVE Name: CVE-2020-7461 + +For general information regarding FreeBSD Security Advisories, +including descriptions of the fields above, security branches, and the +following sections, please visit . + +I. Background + +dhclient(8) is the default IPv4 DHCP client used on FreeBSD. It is +responsible for contacting DHCP servers on a network segment, and for +initializing and configuring network interfaces and configuring name +resolution based on received information. + +dhclient(8) handles DHCP option 119, the Domain Search Option, which provides +a list of domains to search when resolving names using DNS. The option data +format uses a compression scheme to avoid transmitting duplicate domain name +labels. + +II. Problem Description + +When parsing option 119 data, dhclient(8) computes the uncompressed domain +list length so that it can allocate an appropriately sized buffer to store +the uncompressed list. The code to compute the length failed to handle +certain malformed input, resulting in a heap overflow when the uncompressed +list is copied into in inadequately sized buffer. + +III. Impact + +The heap overflow could in principle be exploited to achieve remote code +execution. The affected process runs with reduced privileges in a Capsicum +sandbox, limiting the immediate impact of an exploit. However, it is +possible the bug could be combined with other vulnerabilities to escape the +sandbox. + +IV. Workaround + +No workaround is available. To trigger the bug, a system must be running +dhclient(8) on the same network as a malicious DHCP server. + +V. Solution + +Upgrade your vulnerable system to a supported FreeBSD stable or +release / security branch (releng) dated after the correction date, and +restart dhclient or reboot. + +Perform one of the following: + +1) To update your vulnerable system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install +# shutdown -r +10min "Rebooting for a security update" + +2) To update your vulnerable system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/SA-20:26/dhclient.patch +# fetch https://security.FreeBSD.org/patches/SA-20:26/dhclient.patch.asc +# gpg --verify dhclient.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile the operating system using buildworld and installworld as +described in . + +Restart the applicable daemons, or reboot the system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/12/ r365010 +releng/12.1/ r365257 +stable/11/ r365011 +releng/11.4/ r365257 +releng/11.3/ r365257 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAl9PzTtfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cLLPxAAhg/FSqWLykYAiQ8czoy98X00VIWAP1f4InfUKm8qOB8/7ptzv3A+2Hov +7lHlyN0D4OwhJFt7fw9oTwNe4UgxShso6QrezaTJZR7juFELy9WODbRFnNK4i8w9 +NCBab+NIn1o7nFZnB0M5TMKfa4gc1jAV+Q/U/zi+ONvwZegmjXJxuop3Sq8wfBd2 +Vp9VAvEJvvBlQKExR2xNRDKV/0LpW+VffIuzlWT2ex3WwGpFVeVSL0ZNJsPbzMYX +j0aqGo9B/mHfXtKSQ415kGxiaQctnu5FqjNgSc00byzOU0YTiLsPwPdUgIt+nuQd +WFSePoZsDYstkkJ8YaCA/LVzmZo0tNR8m+z7xmhCszUbMIV+iRSycUexEbCXoPx/ +Ebg6ycyYMwguK7rL2dkjNWTkr3hP5CgLD7VnzVBYGiBY7ha0zOgbaYWl/33Az5Fb +0eaIyJRFCDmI32NZfri1WLc06K1gFcVcR6VO+BUqRHG6bkYnF/4xlla8ERhYgNeC +Y9cs4Y9TNRges79k7jovpu9B5nicTEqMRQBubcARX5+w9zLg8h2aKH6inuVy1srn +M9H/mjdCHMkySpSSrENw9Jk5I7RAgHHRgA1OTkB6Da02aMzPEh6fYHWeR7IpvxPc +2A/hxnZy0tTeZ4aKbds1GYZWUVDd3I8DlSVcT5Bq1g5kk6I+PN8= +=jfay +-----END PGP SIGNATURE----- Property changes on: head/share/security/advisories/FreeBSD-SA-20:26.dhclient.asc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/EN-20:17/linuxthread.patch =================================================================== --- head/share/security/patches/EN-20:17/linuxthread.patch (nonexistent) +++ head/share/security/patches/EN-20:17/linuxthread.patch (revision 54452) @@ -0,0 +1,63 @@ +--- sys/compat/linux/linux_emul.c.orig ++++ sys/compat/linux/linux_emul.c +@@ -261,22 +261,13 @@ + void + linux_proc_exec(void *arg __unused, struct proc *p, struct image_params *imgp) + { +- struct thread *td = curthread; ++ struct thread *td; + struct thread *othertd; + #if defined(__amd64__) + struct linux_pemuldata *pem; + #endif + +- /* +- * In a case of execing from Linux binary properly detach +- * other threads from the user space. +- */ +- if (__predict_false(SV_PROC_ABI(p) == SV_ABI_LINUX)) { +- FOREACH_THREAD_IN_PROC(p, othertd) { +- if (td != othertd) +- (p->p_sysent->sv_thread_detach)(othertd); +- } +- } ++ td = curthread; + + /* + * In a case of execing to Linux binary we create Linux +@@ -284,11 +275,32 @@ + */ + if (__predict_false((imgp->sysent->sv_flags & SV_ABI_MASK) == + SV_ABI_LINUX)) { +- +- if (SV_PROC_ABI(p) == SV_ABI_LINUX) ++ if (SV_PROC_ABI(p) == SV_ABI_LINUX) { ++ /* ++ * Process already was under Linuxolator ++ * before exec. Update emuldata to reflect ++ * single-threaded cleaned state after exec. ++ */ + linux_proc_init(td, NULL, 0); +- else ++ } else { ++ /* ++ * We are switching the process to Linux emulator. ++ */ + linux_proc_init(td, td, 0); ++ ++ /* ++ * Create a transient td_emuldata for all suspended ++ * threads, so that p->p_sysent->sv_thread_detach() == ++ * linux_thread_detach() can find expected but unused ++ * emuldata. ++ */ ++ FOREACH_THREAD_IN_PROC(td->td_proc, othertd) { ++ if (othertd != td) { ++ linux_proc_init(td, othertd, ++ LINUX_CLONE_THREAD); ++ } ++ } ++ } + #if defined(__amd64__) + /* + * An IA32 executable which has executable stack will have the Property changes on: head/share/security/patches/EN-20:17/linuxthread.patch ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/EN-20:17/linuxthread.patch.asc =================================================================== --- head/share/security/patches/EN-20:17/linuxthread.patch.asc (nonexistent) +++ head/share/security/patches/EN-20:17/linuxthread.patch.asc (revision 54452) @@ -0,0 +1,18 @@ +-----BEGIN PGP SIGNATURE----- + +iQKTBAABCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAl9Py7tfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cLxQw/9HUXUeCz5XHIK6qL0yaGIDQh2QOlLXiHSf+5EvGOv+xFsP+IFFwWLNCud +D5LCquLDcFOAxb2PZOZ8Of2zUtmiFGi2rly+aw//pNMiRzbI/wGfwvcr2iwleP0P +DBn0PDJzOJO87FzjdPnm3p8GqlndCkb2YEDzVDCzA29uTyXbNSB38fj5W+Nqg/H3 +ouxl9NEcN5q8cdUn2//F6DX/NKKoQ+KUR5ImAm5VPDDzs+i3U7uIGO/o1B1iZd1+ +EvSLRDmaB58xmqbhudbb//gzJycD8OAv0djxjjfsYhR2yr1sKWi0+lM22QFvSPGY +2PC4692pzOySX2sDf9qdVk2ljv8ab498Kkeo1fUtSTNIjwei2OjYsRYq5nmRfb0Q +2pKHOb80NfQTMIZ6nQHNi6AQ9T/Jezp14VlCeMzkIWQ9o8Lez6W3fxy+59Ir+tQh +CsWXIoTPXO9RjHkqQ8jw2F0qjI77dFxpN1hixi/3Wn5KA+3BkLidcCoXiejkR9jy +FnmAAWjS97TIpLMMwScmA5X83wNpylX1Y+/69NNxw6IiJvNN4KhLWAj2V4l0OSrZ +IJlBReeEJk0wL5z6JQyJ4XB6zTDjBb3Cx9grmDH6CPssLsDlcrJGyICpawXPLOeg +aLg8h1bgD8YlMVxyxUgqpPGaCDwY1pRale8+mYbWFUWfGcCll5U= +=InXC +-----END PGP SIGNATURE----- Property changes on: head/share/security/patches/EN-20:17/linuxthread.patch.asc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/EN-20:18/getfsstat.patch =================================================================== --- head/share/security/patches/EN-20:18/getfsstat.patch (nonexistent) +++ head/share/security/patches/EN-20:18/getfsstat.patch (revision 54452) @@ -0,0 +1,11 @@ +--- sys/kern/vfs_syscalls.c.orig ++++ sys/kern/vfs_syscalls.c +@@ -409,6 +409,8 @@ + case MNT_NOWAIT: + break; + default: ++ if (bufseg == UIO_SYSSPACE) ++ *buf = NULL; + return (EINVAL); + } + restart: Property changes on: head/share/security/patches/EN-20:18/getfsstat.patch ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/EN-20:18/getfsstat.patch.asc =================================================================== --- head/share/security/patches/EN-20:18/getfsstat.patch.asc (nonexistent) +++ head/share/security/patches/EN-20:18/getfsstat.patch.asc (revision 54452) @@ -0,0 +1,18 @@ +-----BEGIN PGP SIGNATURE----- + +iQKTBAABCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAl9Py7tfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cISgA/7Bc4uiJyULvRciFN5W7X1aNFKjFtBlP3LAsRVZFkAxxb5SEN9NIuMqru3 +smZ3oIPswksChJYWdGuiegvzVRPo73YinMnFZu+i064wLttnlOEJXIePfEgpvu81 +BaCtBI3iPrHroFA6LiSUPFlZUBYxl9sMucusRWOpORDPOeNVVoBm0jC282B2k6m0 +h6dPQG++ARXdoH8hBnXrZt17Lu8kK6BOQFysru8G35UCLf9jAczrzStaq9DC6rdi +UHilIaeXKvEM10r7hos8d3wLQjpKRXcSEmcYAWgbCG8ewlSVDDhORftqZ2gv6I/P +dqDwnwznS1ArhYWjk+RHheekbgqP89nJpaYT3rvne3wuzjX6fIDtJBEg0/v5PbOX +VZu/5MG8M/l02j5NLghgGnqRmQjalpl4khsBBweQfht/w4eSURA219V497v6Dm0w +cwk/+R1Nql7NY83PK3PhSvVkmjLvlRYYm47yJphWtqxZ2forwT9KSPZgcEYByd0t +Fiw2rJCyUDXtgMPNmIYcqeX/5IUT921L1wr8VWCYdaS15qFEjU790M+moiK9j6En +IyCsoNN6WASORwcgJGqi6kiScYQEUR+I34feox4dkfavDMrG2ll7Spzz4RZJSar/ +HF191J+feeHbMFcz7gqH6vumj8mMKrx/ARWD16OVSFIFaaF7QjA= +=yl10 +-----END PGP SIGNATURE----- Property changes on: head/share/security/patches/EN-20:18/getfsstat.patch.asc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/SA-20:24/ipv6.patch =================================================================== --- head/share/security/patches/SA-20:24/ipv6.patch (nonexistent) +++ head/share/security/patches/SA-20:24/ipv6.patch (revision 54452) @@ -0,0 +1,37 @@ +--- sys/netinet6/ip6_input.c ++++ sys/netinet6/ip6_input.c +@@ -402,20 +402,22 @@ VNET_SYSUNINIT(inet6, SI_SUB_PROTO_DOMAIN, SI_ORDER_THIRD, ip6_destroy, NULL); + #endif + + static int +-ip6_input_hbh(struct mbuf *m, uint32_t *plen, uint32_t *rtalert, int *off, ++ip6_input_hbh(struct mbuf **mp, uint32_t *plen, uint32_t *rtalert, int *off, + int *nxt, int *ours) + { ++ struct mbuf *m; + struct ip6_hdr *ip6; + struct ip6_hbh *hbh; + +- if (ip6_hopopts_input(plen, rtalert, &m, off)) { ++ if (ip6_hopopts_input(plen, rtalert, mp, off)) { + #if 0 /*touches NULL pointer*/ +- in6_ifstat_inc(m->m_pkthdr.rcvif, ifs6_in_discard); ++ in6_ifstat_inc((*mp)->m_pkthdr.rcvif, ifs6_in_discard); + #endif + goto out; /* m have already been freed */ + } + + /* adjust pointer */ ++ m = *mp; + ip6 = mtod(m, struct ip6_hdr *); + + /* +@@ -855,7 +857,7 @@ ip6_input(struct mbuf *m) + */ + plen = (u_int32_t)ntohs(ip6->ip6_plen); + if (ip6->ip6_nxt == IPPROTO_HOPOPTS) { +- if (ip6_input_hbh(m, &plen, &rtalert, &off, &nxt, &ours) != 0) ++ if (ip6_input_hbh(&m, &plen, &rtalert, &off, &nxt, &ours) != 0) + return; + } else + nxt = ip6->ip6_nxt; Property changes on: head/share/security/patches/SA-20:24/ipv6.patch ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/SA-20:24/ipv6.patch.asc =================================================================== --- head/share/security/patches/SA-20:24/ipv6.patch.asc (nonexistent) +++ head/share/security/patches/SA-20:24/ipv6.patch.asc (revision 54452) @@ -0,0 +1,18 @@ +-----BEGIN PGP SIGNATURE----- + +iQKTBAABCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAl9Py7tfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cIWLQ//f5XvBbodgJD5LiVh8RJwlPjdTI72UqY+YoFq2v3ELlaIL40Zpfr1WUE/ +70lPdfeX8GgKDLzvV0RA05HFYyhMD8zOY2TOglS0dEcU6gQ7z0ncPm3pmS2G8JjS +/f8Lioqp1UbxROpW+vquj3Zls40Lkk5T2xOrhR6mNzOVSFHm3q8+ElPAEFsrfPy1 +KZEM3CefIEgngED9m5bUsICnuIIdyiOZW+zx+3NnJEzwL4laS7KKzzplzibBtogq +2qx6tDnIatRUJLb7ZVzayW4FAT2aRhS02JqcnL5vljtkefr50f5a+yA8lflBJm5I ++3rCJcFG89c4OOjO6e7LtyorFk7OKtdWGkHFNLlXmN9C8a6Rap9r3SW3NC/6YJHB +7v7sZ0WHv8ECl65HnA/KCBvtdfCUEb6EqOCJW2CncmVFdBxMcCOAsAdC36Cc4yPl +3/7HFzhrO5LoM8xbGZdYKjb+T+LgsrIyeYgGr19RfoYNqVkzxxFX8Nz+OLwbPIC3 +/MTSM0VYEelmAEsFiEV4oL6D42xYhafXSRRstQAMSijW8v4ao8KpJaz2dzbcQ2NO +U8S9NI3kwC7lvjO+hH1n7w2nJi25Z4fTBiz6vKCOYwEEN38tis6S2YOusfPiI39z +0C8VvWVXRHUJBqsjBZ6I74Bs5CSjRSL2YQbVyvLl82WctHrXk5Q= +=y2VF +-----END PGP SIGNATURE----- Property changes on: head/share/security/patches/SA-20:24/ipv6.patch.asc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/SA-20:25/sctp.11.3.patch =================================================================== --- head/share/security/patches/SA-20:25/sctp.11.3.patch (nonexistent) +++ head/share/security/patches/SA-20:25/sctp.11.3.patch (revision 54452) @@ -0,0 +1,305 @@ +--- sys/netinet/sctp_input.c ++++ sys/netinet/sctp_input.c +@@ -839,7 +839,6 @@ sctp_handle_abort(struct sctp_abort_chunk *abort, + SCTP_TCB_LOCK(stcb); + atomic_subtract_int(&stcb->asoc.refcnt, 1); + #endif +- SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED); + (void)sctp_free_assoc(stcb->sctp_ep, stcb, SCTP_NORMAL_PROC, + SCTP_FROM_SCTP_INPUT + SCTP_LOC_8); + #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING) +@@ -1989,7 +1988,7 @@ sctp_process_cookie_existing(struct mbuf *m, int iphlen, int offset, + /* send up all the data */ + SCTP_TCB_SEND_LOCK(stcb); + +- sctp_report_all_outbound(stcb, 0, 1, SCTP_SO_LOCKED); ++ sctp_report_all_outbound(stcb, 0, SCTP_SO_LOCKED); + for (i = 0; i < stcb->asoc.streamoutcnt; i++) { + stcb->asoc.strmout[i].chunks_on_queues = 0; + #if defined(SCTP_DETAILED_STR_STATS) +--- sys/netinet/sctp_output.c ++++ sys/netinet/sctp_output.c +@@ -13159,11 +13159,10 @@ sctp_lower_sosend(struct socket *so, + error = EINVAL; + goto out; + } +- SCTP_TCB_SEND_UNLOCK(stcb); +- + strm = &stcb->asoc.strmout[srcv->sinfo_stream]; + if (strm->last_msg_incomplete == 0) { + do_a_copy_in: ++ SCTP_TCB_SEND_UNLOCK(stcb); + sp = sctp_copy_it_in(stcb, asoc, srcv, uio, net, max_len, user_marks_eor, &error); + if (error) { + goto out; +@@ -13189,13 +13188,11 @@ sctp_lower_sosend(struct socket *so, + if (srcv->sinfo_flags & SCTP_UNORDERED) { + SCTP_STAT_INCR(sctps_sends_with_unord); + } ++ sp->processing = 1; + TAILQ_INSERT_TAIL(&strm->outqueue, sp, next); + stcb->asoc.ss_functions.sctp_ss_add_to_stream(stcb, asoc, strm, sp, 1); +- SCTP_TCB_SEND_UNLOCK(stcb); + } else { +- SCTP_TCB_SEND_LOCK(stcb); + sp = TAILQ_LAST(&strm->outqueue, sctp_streamhead); +- SCTP_TCB_SEND_UNLOCK(stcb); + if (sp == NULL) { + /* ???? Huh ??? last msg is gone */ + #ifdef INVARIANTS +@@ -13207,7 +13204,16 @@ sctp_lower_sosend(struct socket *so, + goto do_a_copy_in; + + } ++ if (sp->processing) { ++ SCTP_TCB_SEND_UNLOCK(stcb); ++ SCTP_LTRACE_ERR_RET(inp, stcb, net, SCTP_FROM_SCTP_OUTPUT, EINVAL); ++ error = EINVAL; ++ goto out; ++ } else { ++ sp->processing = 1; ++ } + } ++ SCTP_TCB_SEND_UNLOCK(stcb); + while (uio->uio_resid > 0) { + /* How much room do we have? */ + struct mbuf *new_tail, *mm; +@@ -13232,20 +13238,29 @@ sctp_lower_sosend(struct socket *so, + if (mm) { + sctp_m_freem(mm); + } ++ SCTP_TCB_SEND_LOCK(stcb); ++ if (sp != NULL) { ++ sp->processing = 0; ++ } ++ SCTP_TCB_SEND_UNLOCK(stcb); + goto out; + } + /* Update the mbuf and count */ + SCTP_TCB_SEND_LOCK(stcb); +- if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { ++ if ((stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) || ++ (stcb->asoc.state & SCTP_STATE_WAS_ABORTED)) { + /* + * we need to get out. Peer probably + * aborted. + */ + sctp_m_freem(mm); +- if (stcb->asoc.state & SCTP_PCB_FLAGS_WAS_ABORTED) { ++ if (stcb->asoc.state & SCTP_STATE_WAS_ABORTED) { + SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTP_OUTPUT, ECONNRESET); + error = ECONNRESET; + } ++ if (sp != NULL) { ++ sp->processing = 0; ++ } + SCTP_TCB_SEND_UNLOCK(stcb); + goto out; + } +@@ -13305,6 +13320,11 @@ sctp_lower_sosend(struct socket *so, + /* wait for space now */ + if (non_blocking) { + /* Non-blocking io in place out */ ++ SCTP_TCB_SEND_LOCK(stcb); ++ if (sp != NULL) { ++ sp->processing = 0; ++ } ++ SCTP_TCB_SEND_UNLOCK(stcb); + goto skip_out_eof; + } + /* What about the INIT, send it maybe */ +@@ -13428,6 +13448,11 @@ sctp_lower_sosend(struct socket *so, + } + } + SOCKBUF_UNLOCK(&so->so_snd); ++ SCTP_TCB_SEND_LOCK(stcb); ++ if (sp != NULL) { ++ sp->processing = 0; ++ } ++ SCTP_TCB_SEND_UNLOCK(stcb); + goto out_unlocked; + } + +@@ -13437,12 +13462,19 @@ sctp_lower_sosend(struct socket *so, + } + } + SOCKBUF_UNLOCK(&so->so_snd); ++ SCTP_TCB_SEND_LOCK(stcb); + if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { ++ if (sp != NULL) { ++ sp->processing = 0; ++ } ++ SCTP_TCB_SEND_UNLOCK(stcb); + goto out_unlocked; + } ++ SCTP_TCB_SEND_UNLOCK(stcb); + } + SCTP_TCB_SEND_LOCK(stcb); +- if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { ++ if ((stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) || ++ (stcb->asoc.state & SCTP_STATE_WAS_ABORTED)) { + SCTP_TCB_SEND_UNLOCK(stcb); + goto out_unlocked; + } +@@ -13458,6 +13490,7 @@ sctp_lower_sosend(struct socket *so, + strm->last_msg_incomplete = 0; + asoc->stream_locked = 0; + } ++ sp->processing = 0; + } else { + SCTP_PRINTF("Huh no sp TSNH?\n"); + strm->last_msg_incomplete = 0; +--- sys/netinet/sctp_pcb.c ++++ sys/netinet/sctp_pcb.c +@@ -4722,6 +4722,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + /* there is no asoc, really TSNH :-0 */ + return (1); + } ++ SCTP_TCB_SEND_LOCK(stcb); + if (stcb->asoc.alternate) { + sctp_free_remote_addr(stcb->asoc.alternate); + stcb->asoc.alternate = NULL; +@@ -4756,6 +4757,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + /* nope, reader or writer in the way */ + sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL); + /* no asoc destroyed */ ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + #ifdef SCTP_LOG_CLOSING + sctp_log_closing(inp, stcb, 8); +@@ -4853,6 +4855,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + SCTP_CLEAR_SUBSTATE(stcb, SCTP_STATE_IN_ACCEPT_QUEUE); + sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL); + } ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) || + (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) +@@ -4886,10 +4889,12 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + if (from_inpcbfree == SCTP_NORMAL_PROC) { + atomic_add_int(&stcb->asoc.refcnt, 1); + ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + SCTP_INP_INFO_WLOCK(); + SCTP_INP_WLOCK(inp); + SCTP_TCB_LOCK(stcb); ++ SCTP_TCB_SEND_LOCK(stcb); + } + /* Double check the GONE flag */ + if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) || +@@ -4938,6 +4943,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + SCTP_INP_INFO_WUNLOCK(); + SCTP_INP_WUNLOCK(inp); + } ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + return (0); + } +@@ -4981,7 +4987,6 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + * in case. + */ + /* anything on the wheel needs to be removed */ +- SCTP_TCB_SEND_LOCK(stcb); + for (i = 0; i < asoc->streamoutcnt; i++) { + struct sctp_stream_out *outs; + +@@ -5012,7 +5017,6 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + sctp_free_a_strmoq(stcb, sp, SCTP_SO_LOCKED); + } + } +- SCTP_TCB_SEND_UNLOCK(stcb); + /* sa_ignore FREED_MEMORY */ + TAILQ_FOREACH_SAFE(strrst, &asoc->resetHead, next_resp, nstrrst) { + TAILQ_REMOVE(&asoc->resetHead, strrst, next_resp); +@@ -5214,6 +5218,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + /* Insert new items here :> */ + + /* Get rid of LOCK */ ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + SCTP_TCB_LOCK_DESTROY(stcb); + SCTP_TCB_SEND_LOCK_DESTROY(stcb); +--- sys/netinet/sctp_structs.h ++++ sys/netinet/sctp_structs.h +@@ -535,6 +535,7 @@ struct sctp_stream_queue_pending { + uint8_t sender_all_done; + uint8_t put_last_out; + uint8_t discard_rest; ++ uint8_t processing; + }; + + /* +--- sys/netinet/sctputil.c ++++ sys/netinet/sctputil.c +@@ -3858,7 +3858,7 @@ sctp_ulp_notify(uint32_t notification, struct sctp_tcb *stcb, + } + + void +-sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int holds_lock, int so_locked ++sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int so_locked + #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING) + SCTP_UNUSED + #endif +@@ -3884,9 +3884,6 @@ sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int holds_lock, + return; + } + /* now through all the gunk freeing chunks */ +- if (holds_lock == 0) { +- SCTP_TCB_SEND_LOCK(stcb); +- } + /* sent queue SHOULD be empty */ + TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) { + TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next); +@@ -3963,10 +3960,6 @@ sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int holds_lock, + /* sa_ignore FREED_MEMORY */ + } + } +- +- if (holds_lock == 0) { +- SCTP_TCB_SEND_UNLOCK(stcb); +- } + } + + void +@@ -3990,8 +3983,11 @@ sctp_abort_notification(struct sctp_tcb *stcb, uint8_t from_peer, uint16_t error + (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET)) { + return; + } ++ SCTP_TCB_SEND_LOCK(stcb); ++ SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED); + /* Tell them we lost the asoc */ +- sctp_report_all_outbound(stcb, error, 0, so_locked); ++ sctp_report_all_outbound(stcb, error, so_locked); ++ SCTP_TCB_SEND_UNLOCK(stcb); + if (from_peer) { + sctp_ulp_notify(SCTP_NOTIFY_ASSOC_REM_ABORTED, stcb, error, abort, so_locked); + } else { +@@ -4023,7 +4019,6 @@ sctp_abort_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb, + if (stcb != NULL) { + /* We have a TCB to abort, send notification too */ + sctp_abort_notification(stcb, 0, 0, NULL, SCTP_SO_NOT_LOCKED); +- SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED); + /* Ok, now lets free it */ + #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING) + so = SCTP_INP_SO(inp); +@@ -4133,8 +4128,6 @@ sctp_abort_an_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb, + } + } + return; +- } else { +- SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED); + } + /* notify the peer */ + sctp_send_abort_tcb(stcb, op_err, so_locked); +--- sys/netinet/sctputil.h ++++ sys/netinet/sctputil.h +@@ -163,7 +163,7 @@ sctp_pull_off_control_to_new_inp(struct sctp_inpcb *old_inp, + void sctp_stop_timers_for_shutdown(struct sctp_tcb *); + + void +-sctp_report_all_outbound(struct sctp_tcb *, uint16_t, int, int ++sctp_report_all_outbound(struct sctp_tcb *, uint16_t, int + #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING) + SCTP_UNUSED + #endif Property changes on: head/share/security/patches/SA-20:25/sctp.11.3.patch ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/SA-20:25/sctp.11.3.patch.asc =================================================================== --- head/share/security/patches/SA-20:25/sctp.11.3.patch.asc (nonexistent) +++ head/share/security/patches/SA-20:25/sctp.11.3.patch.asc (revision 54452) @@ -0,0 +1,18 @@ +-----BEGIN PGP SIGNATURE----- + +iQKTBAABCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAl9Py7xfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cL8YQ/+KvStckC4dSqfz2BxUPzv+edzvvNhQ/IqStJapNrkt77DvaOq9MorO08C +jSN4JopHrZBbehUscBxvNvRZ7B3arm3vy1WTaZOwazpjCAcLvTFKgIrZrTuM2Lu6 +33AZme81aXcYmJFFqNteMt1qlTEUcH97H0r0wQ8xFszly0qCXCPxv79X81JIiAR2 +DXA769OIOU+vmk6ki+pDZGBUlpDRa1FnMpnFU+Z4qJmYdeX2FAze4T8KWbrzL7d0 +bob8LiskZxxGnn/a7tgJJH/bLoWwAXX1V35P23xLfj6jCfT3WdjcBqHFZv2W0RHk +hZsGD3MwcEP75woyjwJFb2aYT4nQjvcTI8ag+My4CPP5JaDbAw69aEYtNGJnulzO +38Jfn+VrEAuq678jWNZ2WsGpPsJANCw2eDsp8q9E4ClwdTw73OujqxLaufkcJAxh +OL4hrW1DADTFeKcni3o1ac7aaWSD0qFTNkH9dfD38h/oZPefW4vBxawbNkOOlB93 +ZagP2d7j+iHE0vznt+1IisZ0O6zDaZ/9M9he1qVIKC81YRwizmcEc+BA+zGhbjkS +yQ5REgb5ib7kwIGa6ZluxSV3EhOa8PRcVHYGhCxRcmpCSR1tybChtnKcvvM2itKE +Hm7ZLPgWWEtXw0QTVUPnOAFnYF0Rg8IDAqdtfyFc/3YYYMxvYUI= +=yz8z +-----END PGP SIGNATURE----- Property changes on: head/share/security/patches/SA-20:25/sctp.11.3.patch.asc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/SA-20:25/sctp.11.4.patch =================================================================== --- head/share/security/patches/SA-20:25/sctp.11.4.patch (nonexistent) +++ head/share/security/patches/SA-20:25/sctp.11.4.patch (revision 54452) @@ -0,0 +1,305 @@ +--- sys/netinet/sctp_input.c ++++ sys/netinet/sctp_input.c +@@ -846,7 +846,6 @@ sctp_handle_abort(struct sctp_abort_chunk *abort, + SCTP_TCB_LOCK(stcb); + atomic_subtract_int(&stcb->asoc.refcnt, 1); + #endif +- SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED); + (void)sctp_free_assoc(stcb->sctp_ep, stcb, SCTP_NORMAL_PROC, + SCTP_FROM_SCTP_INPUT + SCTP_LOC_8); + #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING) +@@ -1995,7 +1994,7 @@ sctp_process_cookie_existing(struct mbuf *m, int iphlen, int offset, + /* send up all the data */ + SCTP_TCB_SEND_LOCK(stcb); + +- sctp_report_all_outbound(stcb, 0, 1, SCTP_SO_LOCKED); ++ sctp_report_all_outbound(stcb, 0, SCTP_SO_LOCKED); + for (i = 0; i < stcb->asoc.streamoutcnt; i++) { + stcb->asoc.strmout[i].chunks_on_queues = 0; + #if defined(SCTP_DETAILED_STR_STATS) +--- sys/netinet/sctp_output.c ++++ sys/netinet/sctp_output.c +@@ -13202,11 +13202,10 @@ sctp_lower_sosend(struct socket *so, + error = EINVAL; + goto out; + } +- SCTP_TCB_SEND_UNLOCK(stcb); +- + strm = &stcb->asoc.strmout[srcv->sinfo_stream]; + if (strm->last_msg_incomplete == 0) { + do_a_copy_in: ++ SCTP_TCB_SEND_UNLOCK(stcb); + sp = sctp_copy_it_in(stcb, asoc, srcv, uio, net, max_len, user_marks_eor, &error); + if (error) { + goto out; +@@ -13232,13 +13231,11 @@ sctp_lower_sosend(struct socket *so, + if (sinfo_flags & SCTP_UNORDERED) { + SCTP_STAT_INCR(sctps_sends_with_unord); + } ++ sp->processing = 1; + TAILQ_INSERT_TAIL(&strm->outqueue, sp, next); + stcb->asoc.ss_functions.sctp_ss_add_to_stream(stcb, asoc, strm, sp, 1); +- SCTP_TCB_SEND_UNLOCK(stcb); + } else { +- SCTP_TCB_SEND_LOCK(stcb); + sp = TAILQ_LAST(&strm->outqueue, sctp_streamhead); +- SCTP_TCB_SEND_UNLOCK(stcb); + if (sp == NULL) { + /* ???? Huh ??? last msg is gone */ + #ifdef INVARIANTS +@@ -13250,7 +13247,16 @@ sctp_lower_sosend(struct socket *so, + goto do_a_copy_in; + + } ++ if (sp->processing) { ++ SCTP_TCB_SEND_UNLOCK(stcb); ++ SCTP_LTRACE_ERR_RET(inp, stcb, net, SCTP_FROM_SCTP_OUTPUT, EINVAL); ++ error = EINVAL; ++ goto out; ++ } else { ++ sp->processing = 1; ++ } + } ++ SCTP_TCB_SEND_UNLOCK(stcb); + while (uio->uio_resid > 0) { + /* How much room do we have? */ + struct mbuf *new_tail, *mm; +@@ -13275,20 +13281,29 @@ sctp_lower_sosend(struct socket *so, + if (mm) { + sctp_m_freem(mm); + } ++ SCTP_TCB_SEND_LOCK(stcb); ++ if (sp != NULL) { ++ sp->processing = 0; ++ } ++ SCTP_TCB_SEND_UNLOCK(stcb); + goto out; + } + /* Update the mbuf and count */ + SCTP_TCB_SEND_LOCK(stcb); +- if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { ++ if ((stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) || ++ (stcb->asoc.state & SCTP_STATE_WAS_ABORTED)) { + /* + * we need to get out. Peer probably + * aborted. + */ + sctp_m_freem(mm); +- if (stcb->asoc.state & SCTP_PCB_FLAGS_WAS_ABORTED) { ++ if (stcb->asoc.state & SCTP_STATE_WAS_ABORTED) { + SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTP_OUTPUT, ECONNRESET); + error = ECONNRESET; + } ++ if (sp != NULL) { ++ sp->processing = 0; ++ } + SCTP_TCB_SEND_UNLOCK(stcb); + goto out; + } +@@ -13348,6 +13363,11 @@ sctp_lower_sosend(struct socket *so, + /* wait for space now */ + if (non_blocking) { + /* Non-blocking io in place out */ ++ SCTP_TCB_SEND_LOCK(stcb); ++ if (sp != NULL) { ++ sp->processing = 0; ++ } ++ SCTP_TCB_SEND_UNLOCK(stcb); + goto skip_out_eof; + } + /* What about the INIT, send it maybe */ +@@ -13471,6 +13491,11 @@ sctp_lower_sosend(struct socket *so, + } + } + SOCKBUF_UNLOCK(&so->so_snd); ++ SCTP_TCB_SEND_LOCK(stcb); ++ if (sp != NULL) { ++ sp->processing = 0; ++ } ++ SCTP_TCB_SEND_UNLOCK(stcb); + goto out_unlocked; + } + +@@ -13480,12 +13505,19 @@ sctp_lower_sosend(struct socket *so, + } + } + SOCKBUF_UNLOCK(&so->so_snd); ++ SCTP_TCB_SEND_LOCK(stcb); + if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { ++ if (sp != NULL) { ++ sp->processing = 0; ++ } ++ SCTP_TCB_SEND_UNLOCK(stcb); + goto out_unlocked; + } ++ SCTP_TCB_SEND_UNLOCK(stcb); + } + SCTP_TCB_SEND_LOCK(stcb); +- if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { ++ if ((stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) || ++ (stcb->asoc.state & SCTP_STATE_WAS_ABORTED)) { + SCTP_TCB_SEND_UNLOCK(stcb); + goto out_unlocked; + } +@@ -13501,6 +13533,7 @@ sctp_lower_sosend(struct socket *so, + strm->last_msg_incomplete = 0; + asoc->stream_locked = 0; + } ++ sp->processing = 0; + } else { + SCTP_PRINTF("Huh no sp TSNH?\n"); + strm->last_msg_incomplete = 0; +--- sys/netinet/sctp_pcb.c ++++ sys/netinet/sctp_pcb.c +@@ -4725,6 +4725,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + /* there is no asoc, really TSNH :-0 */ + return (1); + } ++ SCTP_TCB_SEND_LOCK(stcb); + if (stcb->asoc.alternate) { + sctp_free_remote_addr(stcb->asoc.alternate); + stcb->asoc.alternate = NULL; +@@ -4759,6 +4760,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + /* nope, reader or writer in the way */ + sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL); + /* no asoc destroyed */ ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + #ifdef SCTP_LOG_CLOSING + sctp_log_closing(inp, stcb, 8); +@@ -4827,6 +4829,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + SCTP_CLEAR_SUBSTATE(stcb, SCTP_STATE_IN_ACCEPT_QUEUE); + sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL); + } ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) || + (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) +@@ -4860,10 +4863,12 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + if (from_inpcbfree == SCTP_NORMAL_PROC) { + atomic_add_int(&stcb->asoc.refcnt, 1); + ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + SCTP_INP_INFO_WLOCK(); + SCTP_INP_WLOCK(inp); + SCTP_TCB_LOCK(stcb); ++ SCTP_TCB_SEND_LOCK(stcb); + } + /* Double check the GONE flag */ + if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) || +@@ -4911,6 +4916,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + SCTP_INP_INFO_WUNLOCK(); + SCTP_INP_WUNLOCK(inp); + } ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + return (0); + } +@@ -4942,7 +4948,6 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + * in case. + */ + /* anything on the wheel needs to be removed */ +- SCTP_TCB_SEND_LOCK(stcb); + for (i = 0; i < asoc->streamoutcnt; i++) { + struct sctp_stream_out *outs; + +@@ -4973,7 +4978,6 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + sctp_free_a_strmoq(stcb, sp, SCTP_SO_LOCKED); + } + } +- SCTP_TCB_SEND_UNLOCK(stcb); + /* sa_ignore FREED_MEMORY */ + TAILQ_FOREACH_SAFE(strrst, &asoc->resetHead, next_resp, nstrrst) { + TAILQ_REMOVE(&asoc->resetHead, strrst, next_resp); +@@ -5175,6 +5179,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + /* Insert new items here :> */ + + /* Get rid of LOCK */ ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + SCTP_TCB_LOCK_DESTROY(stcb); + SCTP_TCB_SEND_LOCK_DESTROY(stcb); +--- sys/netinet/sctp_structs.h ++++ sys/netinet/sctp_structs.h +@@ -535,6 +535,7 @@ struct sctp_stream_queue_pending { + uint8_t sender_all_done; + uint8_t put_last_out; + uint8_t discard_rest; ++ uint8_t processing; + }; + + /* +--- sys/netinet/sctputil.c ++++ sys/netinet/sctputil.c +@@ -3921,7 +3921,7 @@ sctp_ulp_notify(uint32_t notification, struct sctp_tcb *stcb, + } + + void +-sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int holds_lock, int so_locked ++sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int so_locked + #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING) + SCTP_UNUSED + #endif +@@ -3947,9 +3947,6 @@ sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int holds_lock, + return; + } + /* now through all the gunk freeing chunks */ +- if (holds_lock == 0) { +- SCTP_TCB_SEND_LOCK(stcb); +- } + /* sent queue SHOULD be empty */ + TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) { + TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next); +@@ -4026,10 +4023,6 @@ sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int holds_lock, + /* sa_ignore FREED_MEMORY */ + } + } +- +- if (holds_lock == 0) { +- SCTP_TCB_SEND_UNLOCK(stcb); +- } + } + + void +@@ -4053,8 +4046,11 @@ sctp_abort_notification(struct sctp_tcb *stcb, uint8_t from_peer, uint16_t error + (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET)) { + return; + } ++ SCTP_TCB_SEND_LOCK(stcb); ++ SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED); + /* Tell them we lost the asoc */ +- sctp_report_all_outbound(stcb, error, 0, so_locked); ++ sctp_report_all_outbound(stcb, error, so_locked); ++ SCTP_TCB_SEND_UNLOCK(stcb); + if (from_peer) { + sctp_ulp_notify(SCTP_NOTIFY_ASSOC_REM_ABORTED, stcb, error, abort, so_locked); + } else { +@@ -4086,7 +4082,6 @@ sctp_abort_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb, + if (stcb != NULL) { + /* We have a TCB to abort, send notification too */ + sctp_abort_notification(stcb, 0, 0, NULL, SCTP_SO_NOT_LOCKED); +- SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED); + /* Ok, now lets free it */ + #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING) + so = SCTP_INP_SO(inp); +@@ -4196,8 +4191,6 @@ sctp_abort_an_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb, + } + } + return; +- } else { +- SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED); + } + /* notify the peer */ + sctp_send_abort_tcb(stcb, op_err, so_locked); +--- sys/netinet/sctputil.h ++++ sys/netinet/sctputil.h +@@ -166,7 +166,7 @@ void sctp_stop_timers_for_shutdown(struct sctp_tcb *); + void sctp_stop_association_timers(struct sctp_tcb *, bool); + + void +-sctp_report_all_outbound(struct sctp_tcb *, uint16_t, int, int ++sctp_report_all_outbound(struct sctp_tcb *, uint16_t, int + #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING) + SCTP_UNUSED + #endif Property changes on: head/share/security/patches/SA-20:25/sctp.11.4.patch ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/SA-20:25/sctp.11.4.patch.asc =================================================================== --- head/share/security/patches/SA-20:25/sctp.11.4.patch.asc (nonexistent) +++ head/share/security/patches/SA-20:25/sctp.11.4.patch.asc (revision 54452) @@ -0,0 +1,18 @@ +-----BEGIN PGP SIGNATURE----- + +iQKTBAABCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAl9Py7xfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cKUoxAAkOwk5xE4BbVqudkxT2sTPG9kUbqMAATpS+F31u7s6R55sodqEB5gMjBn +vEF9poL2VXX2S316kfndP3sWgSOXxty3TF9ZPDajsTK3x4NTpWN2BB8nabsiqXx/ +9lB9nEo2pNM2Iohmomj9tQ0+Mw0L5wmNUD+QH8D0hALkUQgqgPHmhSAn+w4bskxQ +EWBAYT4b7W/W5Mq+mo2QaOjI4zKQObbqEIZOOhyIFtxp08CZBKAxxG1fUPUgebtx +NYbiMr9JVrkFP1dCAWdFSnnixO2GILOAZt2YL/XNjwfYFEKC4gaEJy4wOBcTHAyT +corlrnj2t59p8ylzpSkq9QJECFyzFwb5VQeXqm7lYSxr0Cc8m8zm8PUtl3XNUxYC +yTttQ04W8Aj7BSOgOXuQPUFIVsRkrYYi33DtKyZktsMYzuY3ETZsRNY6w+mtfTVZ +M54bXblPaLvRHLaj0XpDDJ0FA3V3FsEbckTAUSSMhHvLhWGe0NOqPzLRlNco73X5 +WnFEFX+tlBvL9z+6ZE5zp7sKopi74vPXNPz3Yw+tkUGHtBE9lfutKDe3EREpimAa +ej6u5Lv/X4fB74BrcaWp2fKWoO76FdjDsYPMzi+soJXAbm0VlV6+Fu2ROz59qjkP +Kk1tFQDlZKWR8P9/FRfgwrFeDdwQgg2sYsj4iRpqt94HfgJhWe4= +=8c9z +-----END PGP SIGNATURE----- Property changes on: head/share/security/patches/SA-20:25/sctp.11.4.patch.asc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/SA-20:25/sctp.12.1.patch =================================================================== --- head/share/security/patches/SA-20:25/sctp.12.1.patch (nonexistent) +++ head/share/security/patches/SA-20:25/sctp.12.1.patch (revision 54452) @@ -0,0 +1,305 @@ +--- sys/netinet/sctp_input.c ++++ sys/netinet/sctp_input.c +@@ -841,7 +841,6 @@ sctp_handle_abort(struct sctp_abort_chunk *abort, + SCTP_TCB_LOCK(stcb); + atomic_subtract_int(&stcb->asoc.refcnt, 1); + #endif +- SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED); + (void)sctp_free_assoc(stcb->sctp_ep, stcb, SCTP_NORMAL_PROC, + SCTP_FROM_SCTP_INPUT + SCTP_LOC_8); + #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING) +@@ -1987,7 +1986,7 @@ sctp_process_cookie_existing(struct mbuf *m, int iphlen, int offset, + /* send up all the data */ + SCTP_TCB_SEND_LOCK(stcb); + +- sctp_report_all_outbound(stcb, 0, 1, SCTP_SO_LOCKED); ++ sctp_report_all_outbound(stcb, 0, SCTP_SO_LOCKED); + for (i = 0; i < stcb->asoc.streamoutcnt; i++) { + stcb->asoc.strmout[i].chunks_on_queues = 0; + #if defined(SCTP_DETAILED_STR_STATS) +--- sys/netinet/sctp_output.c ++++ sys/netinet/sctp_output.c +@@ -13207,11 +13207,10 @@ sctp_lower_sosend(struct socket *so, + error = EINVAL; + goto out; + } +- SCTP_TCB_SEND_UNLOCK(stcb); +- + strm = &stcb->asoc.strmout[srcv->sinfo_stream]; + if (strm->last_msg_incomplete == 0) { + do_a_copy_in: ++ SCTP_TCB_SEND_UNLOCK(stcb); + sp = sctp_copy_it_in(stcb, asoc, srcv, uio, net, max_len, user_marks_eor, &error); + if (error) { + goto out; +@@ -13237,13 +13236,11 @@ sctp_lower_sosend(struct socket *so, + if (sinfo_flags & SCTP_UNORDERED) { + SCTP_STAT_INCR(sctps_sends_with_unord); + } ++ sp->processing = 1; + TAILQ_INSERT_TAIL(&strm->outqueue, sp, next); + stcb->asoc.ss_functions.sctp_ss_add_to_stream(stcb, asoc, strm, sp, 1); +- SCTP_TCB_SEND_UNLOCK(stcb); + } else { +- SCTP_TCB_SEND_LOCK(stcb); + sp = TAILQ_LAST(&strm->outqueue, sctp_streamhead); +- SCTP_TCB_SEND_UNLOCK(stcb); + if (sp == NULL) { + /* ???? Huh ??? last msg is gone */ + #ifdef INVARIANTS +@@ -13255,7 +13252,16 @@ sctp_lower_sosend(struct socket *so, + goto do_a_copy_in; + + } ++ if (sp->processing) { ++ SCTP_TCB_SEND_UNLOCK(stcb); ++ SCTP_LTRACE_ERR_RET(inp, stcb, net, SCTP_FROM_SCTP_OUTPUT, EINVAL); ++ error = EINVAL; ++ goto out; ++ } else { ++ sp->processing = 1; ++ } + } ++ SCTP_TCB_SEND_UNLOCK(stcb); + while (uio->uio_resid > 0) { + /* How much room do we have? */ + struct mbuf *new_tail, *mm; +@@ -13280,20 +13286,29 @@ sctp_lower_sosend(struct socket *so, + if (mm) { + sctp_m_freem(mm); + } ++ SCTP_TCB_SEND_LOCK(stcb); ++ if (sp != NULL) { ++ sp->processing = 0; ++ } ++ SCTP_TCB_SEND_UNLOCK(stcb); + goto out; + } + /* Update the mbuf and count */ + SCTP_TCB_SEND_LOCK(stcb); +- if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { ++ if ((stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) || ++ (stcb->asoc.state & SCTP_STATE_WAS_ABORTED)) { + /* + * we need to get out. Peer probably + * aborted. + */ + sctp_m_freem(mm); +- if (stcb->asoc.state & SCTP_PCB_FLAGS_WAS_ABORTED) { ++ if (stcb->asoc.state & SCTP_STATE_WAS_ABORTED) { + SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTP_OUTPUT, ECONNRESET); + error = ECONNRESET; + } ++ if (sp != NULL) { ++ sp->processing = 0; ++ } + SCTP_TCB_SEND_UNLOCK(stcb); + goto out; + } +@@ -13353,6 +13368,11 @@ sctp_lower_sosend(struct socket *so, + /* wait for space now */ + if (non_blocking) { + /* Non-blocking io in place out */ ++ SCTP_TCB_SEND_LOCK(stcb); ++ if (sp != NULL) { ++ sp->processing = 0; ++ } ++ SCTP_TCB_SEND_UNLOCK(stcb); + goto skip_out_eof; + } + /* What about the INIT, send it maybe */ +@@ -13476,6 +13496,11 @@ sctp_lower_sosend(struct socket *so, + } + } + SOCKBUF_UNLOCK(&so->so_snd); ++ SCTP_TCB_SEND_LOCK(stcb); ++ if (sp != NULL) { ++ sp->processing = 0; ++ } ++ SCTP_TCB_SEND_UNLOCK(stcb); + goto out_unlocked; + } + +@@ -13485,12 +13510,19 @@ sctp_lower_sosend(struct socket *so, + } + } + SOCKBUF_UNLOCK(&so->so_snd); ++ SCTP_TCB_SEND_LOCK(stcb); + if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { ++ if (sp != NULL) { ++ sp->processing = 0; ++ } ++ SCTP_TCB_SEND_UNLOCK(stcb); + goto out_unlocked; + } ++ SCTP_TCB_SEND_UNLOCK(stcb); + } + SCTP_TCB_SEND_LOCK(stcb); +- if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { ++ if ((stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) || ++ (stcb->asoc.state & SCTP_STATE_WAS_ABORTED)) { + SCTP_TCB_SEND_UNLOCK(stcb); + goto out_unlocked; + } +@@ -13506,6 +13538,7 @@ sctp_lower_sosend(struct socket *so, + strm->last_msg_incomplete = 0; + asoc->stream_locked = 0; + } ++ sp->processing = 0; + } else { + SCTP_PRINTF("Huh no sp TSNH?\n"); + strm->last_msg_incomplete = 0; +--- sys/netinet/sctp_pcb.c ++++ sys/netinet/sctp_pcb.c +@@ -4726,6 +4726,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + /* there is no asoc, really TSNH :-0 */ + return (1); + } ++ SCTP_TCB_SEND_LOCK(stcb); + if (stcb->asoc.alternate) { + sctp_free_remote_addr(stcb->asoc.alternate); + stcb->asoc.alternate = NULL; +@@ -4760,6 +4761,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + /* nope, reader or writer in the way */ + sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL); + /* no asoc destroyed */ ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + #ifdef SCTP_LOG_CLOSING + sctp_log_closing(inp, stcb, 8); +@@ -4857,6 +4859,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + SCTP_CLEAR_SUBSTATE(stcb, SCTP_STATE_IN_ACCEPT_QUEUE); + sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL); + } ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) || + (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) +@@ -4890,10 +4893,12 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + if (from_inpcbfree == SCTP_NORMAL_PROC) { + atomic_add_int(&stcb->asoc.refcnt, 1); + ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + SCTP_INP_INFO_WLOCK(); + SCTP_INP_WLOCK(inp); + SCTP_TCB_LOCK(stcb); ++ SCTP_TCB_SEND_LOCK(stcb); + } + /* Double check the GONE flag */ + if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) || +@@ -4941,6 +4946,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + SCTP_INP_INFO_WUNLOCK(); + SCTP_INP_WUNLOCK(inp); + } ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + return (0); + } +@@ -4984,7 +4990,6 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + * in case. + */ + /* anything on the wheel needs to be removed */ +- SCTP_TCB_SEND_LOCK(stcb); + for (i = 0; i < asoc->streamoutcnt; i++) { + struct sctp_stream_out *outs; + +@@ -5015,7 +5020,6 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + sctp_free_a_strmoq(stcb, sp, SCTP_SO_LOCKED); + } + } +- SCTP_TCB_SEND_UNLOCK(stcb); + /* sa_ignore FREED_MEMORY */ + TAILQ_FOREACH_SAFE(strrst, &asoc->resetHead, next_resp, nstrrst) { + TAILQ_REMOVE(&asoc->resetHead, strrst, next_resp); +@@ -5217,6 +5221,7 @@ sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfre + /* Insert new items here :> */ + + /* Get rid of LOCK */ ++ SCTP_TCB_SEND_UNLOCK(stcb); + SCTP_TCB_UNLOCK(stcb); + SCTP_TCB_LOCK_DESTROY(stcb); + SCTP_TCB_SEND_LOCK_DESTROY(stcb); +--- sys/netinet/sctp_structs.h ++++ sys/netinet/sctp_structs.h +@@ -537,6 +537,7 @@ struct sctp_stream_queue_pending { + uint8_t sender_all_done; + uint8_t put_last_out; + uint8_t discard_rest; ++ uint8_t processing; + }; + + /* +--- sys/netinet/sctputil.c ++++ sys/netinet/sctputil.c +@@ -3870,7 +3870,7 @@ sctp_ulp_notify(uint32_t notification, struct sctp_tcb *stcb, + } + + void +-sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int holds_lock, int so_locked ++sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int so_locked + #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING) + SCTP_UNUSED + #endif +@@ -3896,9 +3896,6 @@ sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int holds_lock, + return; + } + /* now through all the gunk freeing chunks */ +- if (holds_lock == 0) { +- SCTP_TCB_SEND_LOCK(stcb); +- } + /* sent queue SHOULD be empty */ + TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) { + TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next); +@@ -3975,10 +3972,6 @@ sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int holds_lock, + /* sa_ignore FREED_MEMORY */ + } + } +- +- if (holds_lock == 0) { +- SCTP_TCB_SEND_UNLOCK(stcb); +- } + } + + void +@@ -4002,8 +3995,11 @@ sctp_abort_notification(struct sctp_tcb *stcb, uint8_t from_peer, uint16_t error + (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET)) { + return; + } ++ SCTP_TCB_SEND_LOCK(stcb); ++ SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED); + /* Tell them we lost the asoc */ +- sctp_report_all_outbound(stcb, error, 0, so_locked); ++ sctp_report_all_outbound(stcb, error, so_locked); ++ SCTP_TCB_SEND_UNLOCK(stcb); + if (from_peer) { + sctp_ulp_notify(SCTP_NOTIFY_ASSOC_REM_ABORTED, stcb, error, abort, so_locked); + } else { +@@ -4035,7 +4031,6 @@ sctp_abort_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb, + if (stcb != NULL) { + /* We have a TCB to abort, send notification too */ + sctp_abort_notification(stcb, 0, 0, NULL, SCTP_SO_NOT_LOCKED); +- SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED); + /* Ok, now lets free it */ + #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING) + so = SCTP_INP_SO(inp); +@@ -4145,8 +4140,6 @@ sctp_abort_an_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb, + } + } + return; +- } else { +- SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED); + } + /* notify the peer */ + sctp_send_abort_tcb(stcb, op_err, so_locked); +--- sys/netinet/sctputil.h ++++ sys/netinet/sctputil.h +@@ -165,7 +165,7 @@ sctp_pull_off_control_to_new_inp(struct sctp_inpcb *old_inp, + void sctp_stop_timers_for_shutdown(struct sctp_tcb *); + + void +-sctp_report_all_outbound(struct sctp_tcb *, uint16_t, int, int ++sctp_report_all_outbound(struct sctp_tcb *, uint16_t, int + #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING) + SCTP_UNUSED + #endif Property changes on: head/share/security/patches/SA-20:25/sctp.12.1.patch ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/SA-20:25/sctp.12.1.patch.asc =================================================================== --- head/share/security/patches/SA-20:25/sctp.12.1.patch.asc (nonexistent) +++ head/share/security/patches/SA-20:25/sctp.12.1.patch.asc (revision 54452) @@ -0,0 +1,18 @@ +-----BEGIN PGP SIGNATURE----- + +iQKTBAABCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAl9Py7xfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cKavRAAiV9zA8vimzM6KyMVIFfknivLA6Djf7qRG5bXLIkCAmYf0gQhBQGgw6V5 +Vv08+Qc5GV9ze0019B5Fa9QAuKUdlfFQBSZU4y2p8LHZVFrWughafngbmR99YfcW +QW+A8SaNRfNSy3xP4X0CEMl6y5ozcHgzfKxwvsVqgV12YYuh38GMLxGf/hlUvjOi +uszC5h07iHZGLdgvoYWd/aeXdtcDjrJRKNCUVwym0FqD2MRZCnnt7P9qY5/D6bRF +XF3RmXNqjkr2qdOP4B5NxCIv3cng9fzF32fcDz2HHE51G97GgBevIOhBpivQ1uw4 +j1hhrB/TmegbSgIY+9wWbMFo1Ht/iEmeSbjR3avp/NZRor5oNPa06zDI3L3orvC5 +zWzs/972KwI07OziQ0oyFw6VqPEbGKlCJO0uAiiEMbU6+rMy+o8riK2a4vw/1ghx +UaL1P4j0trOio7Rg7TrjN/1dnnlpOYbk+oNTqskS6VttpE+spYB5gQuJk0EM7wlp +U7Mlls5e1C9kL4qPamkoc+lmI8luURGVqj3rZMa4zI9JIR9G5aBaIViMNYN/xtTi +r1vw0jeWlKkIpCN1EsncR5n1PPkorfTgOEDFZ9Gn3YpVj5RtcAhqSBJV3nO40s8h +1jt0s5DbEl5Bw23uJ3HdHCYesmh7Vdlsr9OL6VUpjHqQB6gtjRA= +=xJcD +-----END PGP SIGNATURE----- Property changes on: head/share/security/patches/SA-20:25/sctp.12.1.patch.asc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/SA-20:26/dhclient.patch =================================================================== --- head/share/security/patches/SA-20:26/dhclient.patch (nonexistent) +++ head/share/security/patches/SA-20:26/dhclient.patch (revision 54452) @@ -0,0 +1,11 @@ +--- sbin/dhclient/options.c.orig ++++ sbin/dhclient/options.c +@@ -298,6 +298,8 @@ + + pointed_len = find_search_domain_name_len(option, + &pointer); ++ if (pointed_len < 0) ++ return (-1); + domain_name_len += pointed_len; + + *offset = i + 2; Property changes on: head/share/security/patches/SA-20:26/dhclient.patch ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/security/patches/SA-20:26/dhclient.patch.asc =================================================================== --- head/share/security/patches/SA-20:26/dhclient.patch.asc (nonexistent) +++ head/share/security/patches/SA-20:26/dhclient.patch.asc (revision 54452) @@ -0,0 +1,18 @@ +-----BEGIN PGP SIGNATURE----- + +iQKTBAABCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAl9Py7xfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cIg5w/+LEbHcWU+OeVBAhzwQsZ7LI5IJ2eigcv32KHXnX4gfd1E+9obvR6Pi6AX +XPMlm4WJH5YoYm+TEkPsIzPp8iXh1KPNJdYk8W0m0U6QJVCR1eMMV7cyCo+rtk5L +HNqHqVJRakVxAm6AapNXZodWX/kkyVCl9UK6N/fq0lTef6yV0CUXfmpNehCzRUqo +88fcfaYZq8zzJJoU2iiuWlq07qjMDHsvazdpNMuWZqMaQl4JqRGRUAHnGG2OiJZC +RNzvwkGk/bG4M7fgNQtcRriJAhM63rVkV9DzKqExHFPtdL3TiBgsKt1G6PwaH/z0 +iMwWRvjo+WljBK5cxkELLsZWsTVmc8QFBZlDTYPfuqsNLNHPN15o73J526+X0Pro +5ERaxGsyia4bfmLV3D1rmXSMOcvtFjVR2zIpyje/glNumQa/aDn47ECHKQ3hEndf +AM2QqT7SJDg/zgh71/Zmt5cfPX7ISlnn8fIryH4+zbY4p0STy9ZrzRsrihtI6lVK +w4AUk9zTziFbFcUoQWq18x3NHE2F0XkwLb2EduUbYa/gs4X4kmCqNTxQeFeoRILZ +Da21t68bLeXWfMIRKeJ1hsu0rXt0NJxjtnlfXvvA6L+arGS8RW7a+ta0AgM7aH7m +Y+X4d87ixkMnaKhdV7WtMyKSYTvs6EGEJQFbObkqZiv5HdC1X+k= +=BvcT +-----END PGP SIGNATURE----- Property changes on: head/share/security/patches/SA-20:26/dhclient.patch.asc ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +yes \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/share/xml/advisories.xml =================================================================== --- head/share/xml/advisories.xml (revision 54451) +++ head/share/xml/advisories.xml (revision 54452) @@ -1,4905 +1,4926 @@ $FreeBSD$ 2020 + 9 + + + 2 + + + FreeBSD-SA-20:26.dhclient + + + + FreeBSD-SA-20:25.sctp + + + + FreeBSD-SA-20:24.ipv6 + + + + + + 8 5 FreeBSD-SA-20:23.sendmsg FreeBSD-SA-20:22.sqlite FreeBSD-SA-20:21.usb_net 7 8 FreeBSD-SA-20:20.ipv6 FreeBSD-SA-20:19.unbound FreeBSD-SA-20:18.posix_spawnp 6 9 FreeBSD-SA-20:17.usb 5 12 FreeBSD-SA-20:16.cryptodev FreeBSD-SA-20:15.cryptodev FreeBSD-SA-20:14.sctp FreeBSD-SA-20:13.libalias FreeBSD-SA-20:12.libalias 4 21 FreeBSD-SA-20:11.openssl FreeBSD-SA-20:10.ipfw 3 19 FreeBSD-SA-20:09.ntp FreeBSD-SA-20:08.jail FreeBSD-SA-20:07.epair FreeBSD-SA-20:06.if_ixl_ioctl FreeBSD-SA-20:05.if_oce_ioctl FreeBSD-SA-20:04.tcp 1 28 FreeBSD-SA-20:03.thrmisc FreeBSD-SA-20:02.ipsec FreeBSD-SA-20:01.libfetch 2019 11 12 FreeBSD-SA-19:26.mcu FreeBSD-SA-19:25.mcepsc 8 20 FreeBSD-SA-19:24.mqueuefs FreeBSD-SA-19:23.midi FreeBSD-SA-19:22.mbuf 6 FreeBSD-SA-19:21.bhyve FreeBSD-SA-19:20.bsnmp FreeBSD-SA-19:19.mldv2 FreeBSD-SA-19:18.bzip2 7 24 FreeBSD-SA-19:17.fd FreeBSD-SA-19:16.bhyve FreeBSD-SA-19:15.mqueuefs FreeBSD-SA-19:14.freebsd32 FreeBSD-SA-19:13.pts FreeBSD-SA-19:12.telnet 2 FreeBSD-SA-19:11.cd_ioctl FreeBSD-SA-19:10.ufs FreeBSD-SA-19:09.iconv 6 19 FreeBSD-SA-19:08.rack 5 14 FreeBSD-SA-19:07.mds FreeBSD-SA-19:06.pf FreeBSD-SA-19:05.pf FreeBSD-SA-19:04.ntp FreeBSD-SA-19:03.wpa 2 5 FreeBSD-SA-19:02.fd FreeBSD-SA-19:01.syscall 2018 12 19 FreeBSD-SA-18:15.bootpd 04 FreeBSD-SA-18:14.bhyve 11 27 FreeBSD-SA-18:13.nfs 9 12 FreeBSD-SA-18:12.elf 8 14 FreeBSD-SA-18:11.hostapd FreeBSD-SA-18:10.ip FreeBSD-SA-18:09.l1tf 6 FreeBSD-SA-18:08.tcp 6 21 FreeBSD-SA-18:07.lazyfpu 5 8 FreeBSD-SA-18:06.debugreg 4 4 FreeBSD-SA-18:05.ipsec FreeBSD-SA-18:04.vt 3 14 FreeBSD-SA-18:03.speculative_execution 7 FreeBSD-SA-18:02.ntp FreeBSD-SA-18:01.ipsec 2017 12 09 FreeBSD-SA-17:12.openssl 11 29 FreeBSD-SA-17:11.openssl 15 FreeBSD-SA-17:10.kldstat FreeBSD-SA-17:09.shm FreeBSD-SA-17:08.ptrace 10 17 FreeBSD-SA-17:07.wpa 8 10 FreeBSD-SA-17:06.openssh 7 12 FreeBSD-SA-17:05.heimdal 4 27 FreeBSD-SA-17:04.ipfilter 12 FreeBSD-SA-17:03.ntp 2 23 FreeBSD-SA-17:02.openssl 1 11 FreeBSD-SA-17:01.openssh 2016 12 22 FreeBSD-SA-16:39.ntp 6 FreeBSD-SA-16:38.bhyve FreeBSD-SA-16:37.libc FreeBSD-SA-16:36.telnetd 11 2 FreeBSD-SA-16:35.openssl FreeBSD-SA-16:34.bind FreeBSD-SA-16:33.openssh 10 25 FreeBSD-SA-16:32.bhyve 10 FreeBSD-SA-16:31.libarchive FreeBSD-SA-16:30.portsnap FreeBSD-SA-16:29.bspatch FreeBSD-SA-16:28.bind FreeBSD-SA-16:27.openssl 9 23 FreeBSD-SA-16:26.openssl 7 25 FreeBSD-SA-16:25.bspatch 6 4 FreeBSD-SA-16:24.ntp 5 31 FreeBSD-SA-16:23.libarchive FreeBSD-SA-16:22.libarchive FreeBSD-SA-16:21.43bsd FreeBSD-SA-16:20.linux 17 FreeBSD-SA-16:19.sendmsg FreeBSD-SA-16:18.atkbd 4 FreeBSD-SA-16:17.openssl 4 29 FreeBSD-SA-16:16.ntp 3 16 FreeBSD-SA-16:15.sysarch FreeBSD-SA-16:14.openssh 10 FreeBSD-SA-16:13.bind FreeBSD-SA-16:12.openssl 1 30 FreeBSD-SA-16:11.openssl 27 FreeBSD-SA-16:10.linux FreeBSD-SA-16:09.ntp FreeBSD-SA-16:08.bind 14 FreeBSD-SA-16:07.openssh FreeBSD-SA-16:06.bsnmpd FreeBSD-SA-16:05.tcp FreeBSD-SA-16:04.linux FreeBSD-SA-16:03.linux FreeBSD-SA-16:02.ntp FreeBSD-SA-16:01.sctp 2015 12 16 FreeBSD-SA-15:27.bind 6 FreeBSD-SA-15:26.openssl 10 26 FreeBSD-SA-15:25.ntp 9 29 FreeBSD-SA-15:24.rpcbind 2 FreeBSD-SA-15:23.bind 8 25 FreeBSD-SA-15:22.openssh FreeBSD-SA-15:21.amd64 18 FreeBSD-SA-15:20.expat 5 FreeBSD-SA-15:19.routed FreeBSD-SA-15:18.bsdpatch 7 28 FreeBSD-SA-15:17.bind FreeBSD-SA-15:16.openssh FreeBSD-SA-15:15.tcp FreeBSD-SA-15:14.bsdpatch 21 FreeBSD-SA-15:13.tcp 9 FreeBSD-SA-15:12.openssl 7 FreeBSD-SA-15:11.bind 6 12 FreeBSD-SA-15:10.openssl 4 7 FreeBSD-SA-15:09.ipv6 FreeBSD-SA-15:08.bsdinstall FreeBSD-SA-15:07.ntp 3 19 FreeBSD-SA-15:06.openssl 2 25 FreeBSD-SA-15:05.bind FreeBSD-SA-15:04.igmp 1 27 FreeBSD-SA-15:03.sctp FreeBSD-SA-15:02.kmem 14 FreeBSD-SA-15:01.openssl 2014 12 23 FreeBSD-SA-14:31.ntp 17 FreeBSD-SA-14:30.unbound 10 FreeBSD-SA-14:29.bind FreeBSD-SA-14:28.file FreeBSD-SA-14:27.stdio 11 04 FreeBSD-SA-14:26.ftp FreeBSD-SA-14:25.setlogin FreeBSD-SA-14:24.sshd 10 21 FreeBSD-SA-14:23.openssl FreeBSD-SA-14:22.namei FreeBSD-SA-14:21.routed FreeBSD-SA-14:20.rtsold 9 16 FreeBSD-SA-14:19.tcp 9 FreeBSD-SA-14:18.openssl 7 8 FreeBSD-SA-14:17.kmem 6 24 FreeBSD-SA-14:16.file FreeBSD-SA-14:15.iconv 5 FreeBSD-SA-14:14.openssl 3 FreeBSD-SA-14:13.pam FreeBSD-SA-14:12.ktrace FreeBSD-SA-14:11.sendmail 5 13 FreeBSD-SA-14:10.openssl 4 30 FreeBSD-SA-14:09.openssl FreeBSD-SA-14:08.tcp FreeBSD-SA-14:07.devfs 08 FreeBSD-SA-14:06.openssl FreeBSD-SA-14:05.nfsserver 1 14 FreeBSD-SA-14:04.bind FreeBSD-SA-14:03.openssl FreeBSD-SA-14:02.ntpd FreeBSD-SA-14:01.bsnmpd 2013 11 19 FreeBSD-SA-13:14.openssh 9 10 FreeBSD-SA-13:13.nullfs FreeBSD-SA-13:12.ifioctl FreeBSD-SA-13:11.sendfile 8 22 FreeBSD-SA-13:10.sctp FreeBSD-SA-13:09.ip_multicast 7 26 FreeBSD-SA-13:08.nfsserver FreeBSD-SA-13:07.bind 6 18 FreeBSD-SA-13:06.mmap 4 29 FreeBSD-SA-13:05.nfsserver 2 FreeBSD-SA-13:04.bind FreeBSD-SA-13:03.openssl 2 19 FreeBSD-SA-13:02.libc FreeBSD-SA-13:01.bind 2012 11 22 FreeBSD-SA-12:08.linux FreeBSD-SA-12:07.hostapd FreeBSD-SA-12:06.bind 8 6 FreeBSD-SA-12:05.bind 6 12 FreeBSD-SA-12:04.sysret FreeBSD-SA-12:03.bind 5 30 FreeBSD-SA-12:02.crypt 30 FreeBSD-SA-12:01.openssl 2011 12 23 FreeBSD-SA-11:10.pam FreeBSD-SA-11:09.pam_ssh FreeBSD-SA-11:08.telnetd FreeBSD-SA-11:07.chroot FreeBSD-SA-11:06.bind 9 28 FreeBSD-SA-11:05.unix FreeBSD-SA-11:04.compress FreeBSD-SA-11:03.bind 5 28 FreeBSD-SA-11:02.bind 4 20 FreeBSD-SA-11:01.mountd 2010 11 29 FreeBSD-SA-10:10.openssl 10 FreeBSD-SA-10:09.pseudofs 9 20 FreeBSD-SA-10:08.bzip2 7 13 FreeBSD-SA-10:07.mbuf 5 27 FreeBSD-SA-10:06.nfsclient FreeBSD-SA-10:05.opie FreeBSD-SA-10:04.jail 1 6 FreeBSD-SA-10:03.zfs FreeBSD-SA-10:02.ntpd FreeBSD-SA-10:01.bind 2009 12 3 FreeBSD-SA-09:17.freebsd-update FreeBSD-SA-09:16.rtld FreeBSD-SA-09:15.ssl 10 2 FreeBSD-SA-09:14.devfs FreeBSD-SA-09:13.pipe 7 29 FreeBSD-SA-09:12.bind 6 10 FreeBSD-SA-09:11.ntpd FreeBSD-SA-09:10.ipv6 FreeBSD-SA-09:09.pipe 4 22 FreeBSD-SA-09:08.openssl FreeBSD-SA-09:07.libc 3 23 FreeBSD-SA-09:06.ktimer 2 16 FreeBSD-SA-09:05.telnetd 1 13 FreeBSD-SA-09:04.bind FreeBSD-SA-09:03.ntpd 7 FreeBSD-SA-09:02.openssl FreeBSD-SA-09:01.lukemftpd 2008 12 23 FreeBSD-SA-08:13.protosw FreeBSD-SA-08:12.ftpd 11 24 FreeBSD-SA-08:11.arc4random 10 2 FreeBSD-SA-08:10.nd6 9 3 FreeBSD-SA-08:09.icmp6 FreeBSD-SA-08:08.nmount FreeBSD-SA-08:07.amd64 7 13 FreeBSD-SA-08:06.bind 4 17 FreeBSD-SA-08:05.openssh 2 14 FreeBSD-SA-08:04.ipsec FreeBSD-SA-08:03.sendfile 1 18 FreeBSD 6.3-RELEASE 14 FreeBSD-SA-08:02.libc FreeBSD-SA-08:01.pty 2007 11 29 FreeBSD-SA-07:10.gtar FreeBSD-SA-07:09.random 10 3 FreeBSD-SA-07:08.openssl 8 1 FreeBSD-SA-07:07.bind FreeBSD-SA-07:06.tcpdump 7 12 FreeBSD-SA-07:05.libarchive 5 23 FreeBSD-SA-07:04.file 4 26 FreeBSD-SA-07:03.ipv6 2 9 FreeBSD-SA-07:02.bind 1 15 FreeBSD 6.2-RELEASE 11 FreeBSD-SA-07:01.jail 2006 12 6 FreeBSD-SA-06:26.gtar FreeBSD-SA-06:25.kmem 11 8 FreeBSD-SA-06:24.libarchive 9 30 FreeBSD-SA-06:22.openssh 28 FreeBSD-SA-06:23.openssl 19 FreeBSD-SA-06:21.gzip 6 FreeBSD-SA-06:20.bind FreeBSD-SA-06:19.openssl 8 23 FreeBSD-SA-06:18.ppp 6 14 FreeBSD-SA-06:17.sendmail 5 31 FreeBSD-SA-06:16.smbfs FreeBSD-SA-06:15.ypserv 25 FreeBSD 5.5-RELEASE 9 FreeBSD 6.1-RELEASE 4 19 FreeBSD-SA-06:14.fpu 3 22 FreeBSD-SA-06:13.sendmail FreeBSD-SA-06:12.opie FreeBSD-SA-06:11.ipsec 1 FreeBSD-SA-06:10.nfs FreeBSD-SA-06:09.openssh 2 1 FreeBSD-SA-06:08.sack 1 25 FreeBSD-SA-06:07.pf FreeBSD-SA-06:06.kmem 18 FreeBSD-SA-06:05.80211 11 FreeBSD-SA-06:04.ipfw FreeBSD-SA-06:03.cpio FreeBSD-SA-06:02.ee FreeBSD-SA-06:01.texindex 2005 11 4 FreeBSD 6.0-RELEASE 10 11 FreeBSD-SA-05:21.openssl 9 7 FreeBSD-SA-05:20.cvsbug 7 27 FreeBSD-SA-05:19.ipsec FreeBSD-SA-05:18.zlib 20 FreeBSD-SA-05:17.devfs 6 FreeBSD-SA-05:16.zlib 6 29 FreeBSD-SA-05:15.tcp FreeBSD-SA-05:14.bzip2 FreeBSD-SA-05:13.ipfw 9 FreeBSD-SA-05:12.bind9 FreeBSD-SA-05:11.gzip FreeBSD-SA-05:10.tcpdump 5 13 FreeBSD-SA-05:09.htt 9 FreeBSD 5.4-RELEASE 6 FreeBSD-SA-05:08.kmem FreeBSD-SA-05:07.ldt FreeBSD-SA-05:06.iir 4 22 FreeBSD-SA-05:05.cvs 15 FreeBSD-SA-05:04.ifconf 6 FreeBSD-SA-05:03.amd64 4 FreeBSD-SA-05:02.sendfile 3 28 FreeBSD-SA-05:01.telnet 1 25 FreeBSD 4.11-RELEASE 2004 12 1 FreeBSD-SA-04:17.procfs 11 18 FreeBSD-SA-04:16.fetch 6 FreeBSD 5.3-RELEASE 10 4 FreeBSD-SA-04:15.syscons 9 19 FreeBSD-SA-04:14.cvs 6 30 FreeBSD-SA-04:13.linux 7 FreeBSD-SA-04:12.jailroute 5 27 FreeBSD 4.10-RELEASE 19 FreeBSD-SA-04:11.msync 19 FreeBSD-SA-04:10.cvs 5 FreeBSD-SA-04:09.kadmind FreeBSD-SA-04:08.heimdal 4 15 FreeBSD-SA-04:07.cvs 3 29 FreeBSD-SA-04:06.ipv6 17 FreeBSD-SA-04:05.openssl 2 FreeBSD-SA-04:04.tcp 2 26 FreeBSD 5.2.1-RELEASE 25 FreeBSD-SA-04:03.jail 05 FreeBSD-SA-04:02.shmat 1 30 FreeBSD-SA-04:01.mksnap_ffs 12 FreeBSD 5.2-RELEASE 2003 11 28 FreeBSD-SA-03:19.bind 10 27 FreeBSD 4.9-RELEASE 5 FreeBSD-SA-03:15.openssh 3 FreeBSD-SA-03:18.openssl FreeBSD-SA-03:17.procfs 2 FreeBSD-SA-03:16.filedesc 9 23 FreeBSD-SA-03:14.arp 17 FreeBSD-SA-03:13.sendmail 16 FreeBSD-SA-03:12.openssh 8 26 FreeBSD-SA-03:11.sendmail http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1170 10 FreeBSD-SA-03:10.ibcs2 http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1164 FreeBSD-SA-03:09.signal http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1163 3 FreeBSD-SA-03:08.realpath http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1158 6 9 FreeBSD 5.1-RELEASE 4 8 FreeBSD-SN-03:02 7 FreeBSD-SN-03:01 3 FreeBSD 4.8-RELEASE 3 30 FreeBSD-SA-03:07.sendmail http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1122 21 FreeBSD-SA-03:06.openssl http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1118 20 FreeBSD-SA-03:05.xdr http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1117 3 FreeBSD-SA-03:04.sendmail http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1112 2 24 FreeBSD-SA-03:03.syncookies http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1106 FreeBSD-SA-03:02.openssl http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1105 04 FreeBSD-SA-03:01.cvs http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1100 1 19 FreeBSD 5.0-RELEASE 07 FreeBSD-SA-02:44.filedesc http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1090 2002 11 15 FreeBSD-SA-02:43.bind http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1084 FreeBSD-SA-02:41.smrsh http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1082 12 FreeBSD-SA-02:42.resolv http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1083 FreeBSD-SA-02:40.kadmind http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1081 10 10 FreeBSD 4.7-RELEASE FreeBSD-SN-02:06 9 16 FreeBSD-SA-02:39.libkvm http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1051 8 28 FreeBSD-SN-02:05 19 FreeBSD-SA-02:38.signed-error http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1041 15 FreeBSD 4.6.2-RELEASE 05 FreeBSD-SA-02:37.kqueue http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1033 FreeBSD-SA-02:36.nfs http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1032 FreeBSD-SA-02:35.ffs http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1031 FreeBSD-SA-02:33.openssl http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1023 01 FreeBSD-SA-02:34.rpc http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1024 7 31 FreeBSD-SA-02:32.pppd http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1022 15 FreeBSD-SA-02:31.openssh 12 FreeBSD-SA-02:30.ktrace FreeBSD-SA-02:29.tcpdump 6 26 FreeBSD-SA-02:28.resolv 19 FreeBSD-SN-02:04 15 FreeBSD 4.6-RELEASE 5 29 FreeBSD-SA-02:27.rc FreeBSD-SA-02:26.accept 28 FreeBSD-SN-02:03 20 FreeBSD-SA-02:25.bzip2 FreeBSD-SA-02:24.k5su 13 FreeBSD-SN-02:02 4 22 FreeBSD-SA-02:23.stdio http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/1021 18 FreeBSD-SA-02:22.mmap 17 FreeBSD-SA-02:21.tcpip http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/980 16 FreeBSD-SA-02:20.syncache http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/979 3 30 FreeBSD-SN-02:01 26 FreeBSD-SA-02:19.squid http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/960 18 FreeBSD-SA-02:18.zlib http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/978 12 FreeBSD-SA-02:17.mod_frontpage http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/954 FreeBSD-SA-02:16.netscape http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/953 FreeBSD-SA-02:15.cyrus-sasl http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/952 FreeBSD-SA-02:14.pam-pgsql http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/951 07 FreeBSD-SA-02:13.openssh http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/945 2 21 FreeBSD-SA-02:12.squid http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/938 12 FreeBSD-SA-02:11.snmp http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/936 06 FreeBSD-SA-02:10.rsync http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/928 FreeBSD-SA-02:09.fstatfs http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/927 1 29 FreeBSD 4.5-RELEASE 24 FreeBSD-SA-02:08.exec http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/923 18 FreeBSD-SA-02:07.k5su http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/912 16 FreeBSD-SA-02:06.sudo http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/909 04 FreeBSD-SA-02:05.pine http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/894 FreeBSD-SA-02:04.mutt http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/893 FreeBSD-SA-02:03.mod_auth_pgsql http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/892 FreeBSD-SA-02:02.pw http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/891 FreeBSD-SA-02:01.pkg_add http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/898 2001 12 04 FreeBSD-SA-01:64.wu-ftpd http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/870 02 FreeBSD-SA-01:63.openssh http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/871 10 08 FreeBSD-SA-01:62.uucp FreeBSD-SA-01:61.squid 9 24 FreeBSD-SA-01:60.procmail 20 FreeBSD 4.4-RELEASE 04 FreeBSD-SA-01:59.rmuser 8 30 FreeBSD-SA-01:58.lpd 27 FreeBSD-SA-01:57.sendmail 23 FreeBSD-SA-01:56.tcp_wrappers 21 FreeBSD-SA-01:55.procfs 20 FreeBSD-SA-01:54.ports-telnetd 17 FreeBSD-SA-01:53.ipfw 06 FreeBSD-SA-01:52.fragment 7 30 FreeBSD-SA-01:51.openssl 27 FreeBSD-SA-01:50.windowmaker 23 FreeBSD-SA-01:49.telnetd 17 FreeBSD-SA-01:48.tcpdump 10 FreeBSD-SA-01:47.xinetd FreeBSD-SA-01:46.w3m FreeBSD-SA-01:45.samba FreeBSD-SA-01:44.gnupg FreeBSD-SA-01:43.fetchmail FreeBSD-SA-01:42.signal 09 FreeBSD-SA-01:41.hanterm 6 04 FreeBSD-SA-01:40.fts 5 02 FreeBSD-SA-01:39.tcp-isn 4 23 FreeBSD-SA-01:38.sudo FreeBSD-SA-01:37.slrn FreeBSD-SA-01:36.samba FreeBSD-SA-01:35.licq FreeBSD-SA-01:34.hylafax 20 FreeBSD 4.3-RELEASE 17 FreeBSD-SA-01:33.ftpd-glob 16 FreeBSD-SA-01:32.ipfilter 06 FreeBSD-SA-01:31.ntpd 3 22 FreeBSD-SA-01:30.ufs-ext2fs http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/738 12 FreeBSD-SA-01:29.rwhod http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/732 FreeBSD-SA-01:28.timed http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/731 FreeBSD-SA-01:27.cfengine http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/730 FreeBSD-SA-01:26.interbase http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/729 FreeBSD-SA-01:23.icecast http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/728 2 14 FreeBSD-SA-01:25.kerberosIV http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/716 12 FreeBSD-SA-01:24.ssh http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/715 07 FreeBSD-SA-01:22.dc20ctrl http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/714 FreeBSD-SA-01:21.ja-elvis http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/713 FreeBSD-SA-01:20.mars_nwe http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/712 FreeBSD-SA-01:19.ja-klock http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/707 1 31 FreeBSD-SA-01:18.bind http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/706 29 FreeBSD-SA-01:17.exmh http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/705 FreeBSD-SA-01:16.mysql http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/704 FreeBSD-SA-01:15.tinyproxy http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/703 FreeBSD-SA-01:14.micq http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/702 FreeBSD-SA-01:13.sort http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/701 FreeBSD-SA-01:12.periodic http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/700 FreeBSD-SA-01:11.inetd http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/699 23 FreeBSD-SA-01:10.bind http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/698 FreeBSD-SA-01:09.crontab http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/697 FreeBSD-SA-01:08.ipfw http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/696 FreeBSD-SA-01:07.xfree86 15 FreeBSD-SA-01:06.zope http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/669 FreeBSD-SA-01:05.stunnel http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/668 FreeBSD-SA-01:04.joe http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/667 FreeBSD-SA-01:03.bash1 http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/666 FreeBSD-SA-01:02.syslog-ng http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/665 FreeBSD-SA-01:01.openssh http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/664 2000 12 20 FreeBSD-SA-00:81.ethereal http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/651 FreeBSD-SA-00:80.halflifeserver http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/650 FreeBSD-SA-00:79.oops http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/649 FreeBSD-SA-00:78.bitchx http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/648 18 FreeBSD-SA-00:77.procfs http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/647 11 20 FreeBSD-SA-00:76.tcsh-csh http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/628 FreeBSD-SA-00:75.php http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/627 FreeBSD-SA-00:74.gaim FreeBSD-SA-00:73.thttpd http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/626 FreeBSD-SA-00:72.curl http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/625 FreeBSD-SA-00:71.mgetty http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/624 14 FreeBSD-SA-00:70.ppp-nat http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/623 FreeBSD-SA-00:69.telnetd http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/622 13 FreeBSD-SA-00:68.ncurses http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/621 10 FreeBSD-SA-00:67.gnupg http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/620 06 FreeBSD-SA-00:66.netscape http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/619 FreeBSD-SA-00:65.xfce http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/618 FreeBSD-SA-00:64.global http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/617 01 FreeBSD-SA-00:63.getnameinfo http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/589 FreeBSD-SA-00:62.top http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/616 10 31 FreeBSD-SA-00:61.tcpdump http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/615 30 FreeBSD-SA-00:60.boa http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/586 FreeBSD-SA-00:59.pine http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/585 FreeBSD-SA-00:58.chpass http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/584 13 FreeBSD-SA-00:57.muh http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/570 FreeBSD-SA-00:56.lprng http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/569 FreeBSD-SA-00:55.xpdf http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/568 FreeBSD-SA-00:54.fingerd http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/567 06 FreeBSD-SA-00:52.tcp-iss http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/561 9 27 FreeBSD-SA-00:53.catopen http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/562 13 FreeBSD-SA-00:51.mailman http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/550 FreeBSD-SA-00:50.listmanager http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/549 FreeBSD-SA-00:49.eject http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/548 FreeBSD-SA-00:48.xchat http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/547 FreeBSD-SA-00:47.pine http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/546 FreeBSD-SA-00:46.screen http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/545 8 31 FreeBSD-SA-00:45.esound http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/526 28 FreeBSD-SA-00:44.xlock http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/523 FreeBSD-SA-00:43.brouted http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/520 FreeBSD-SA-00:42.linux http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/530 FreeBSD-SA-00:41.elf http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/527 FreeBSD-SA-00:40.mopd http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/521 FreeBSD-SA-00:39.netscape http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/528 14 FreeBSD-SA-00:38.zope http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/525 FreeBSD-SA-00:37.cvsweb http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/524 FreeBSD-SA-00:36.ntop http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/531 FreeBSD-SA-00:35.proftpd http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/522 FreeBSD-SA-00:34.dhclient http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/529 7 12 FreeBSD-SA-00:33.kerberosIV http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/488 05 FreeBSD-SA-00:32.bitchx http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/487 FreeBSD-SA-00:31.canna http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/486 FreeBSD-SA-00:30.openssh http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/485 FreeBSD-SA-00:29.wu-ftpd http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/489 FreeBSD-SA-00:28.majordomo http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/484 FreeBSD-SA-00:27.XFree86-4 http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/483 FreeBSD-SA-00:26.popper http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/482 FreeBSD-SA-00:24.libedit http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/481 6 19 FreeBSD-SA-00:23.ip-options http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/480 12 FreeBSD-SA-00:25.alpha-random http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/473 07 FreeBSD-SA-00:22.apsfilter http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/461 FreeBSD-SA-00:21.ssh http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/459 5 26 FreeBSD-SA-00:20.krb5 http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/452 23 FreeBSD-SA-00:19.semconfig http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/451 09 FreeBSD-SA-00:18.gnapster.knapster http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/429 FreeBSD-SA-00:17.libmytinfo http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/442 FreeBSD-SA-00:16.golddig http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/439 4 24 FreeBSD-SA-00:15.imap-uw http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/438 FreeBSD-SA-00:14.imap-uw http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/441 19 FreeBSD-SA-00:13.generic-nqs http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/437 10 FreeBSD-SA-00:12.healthd http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/436 FreeBSD-SA-00:11.ircii http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/440 3 15 FreeBSD-SA-00:10.orville-write http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/408 FreeBSD-SA-00:09.mtr http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/408 FreeBSD-SA-00:08.lynx http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/407 FreeBSD-SA-00:07.mh http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/411 01 FreeBSD-SA-00:06.htdig http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/403 2 28 FreeBSD-SA-00:05.mysql http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/402 19 FreeBSD-SA-00:04.delegate http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/392 FreeBSD-SA-00:03.asmon http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/391 1 24 FreeBSD-SA-00:02.procfs http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/380 19 FreeBSD-SA-00:01.make 1999 9 16 FreeBSD-SA-99:06.amd http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/318 15 FreeBSD-SA-99:05.fts http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/313 FreeBSD-SA-99:04.core http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/312 05 FreeBSD-SA-99:03.ftpd http://home.jp.freebsd.org/cgi-bin/showmail/announce-jp/311 04 FreeBSD-SA-99:02.profil FreeBSD-SA-99:01.chflags 1998 11 04 FreeBSD-SA-98:08.fragment 10 13 FreeBSD-SA-98:07.rst 6 10 FreeBSD-SA-98:06.icmp 04 FreeBSD-SA-98:05.nfs 02 FreeBSD-SA-98:04.mmap 5 14 FreeBSD-SA-98:03.ttcp 3 12 FreeBSD-SA-98:02.mmap 1997 12 09 FreeBSD-SA-97:06.f00f 01 FreeBSD-SA-98:01.land 10 29 FreeBSD-SA-97:05.open 8 19 FreeBSD-SA-97:04.procfs 4 07 FreeBSD-SA-97:03.sysinstall 3 26 FreeBSD-SA-97:02.lpd 2 05 FreeBSD-SA-97:01.setlocale 1 18 FreeBSD-SA-96:21.talkd 1996 12 16 FreeBSD-SA-96:20.stack-overflow 10 FreeBSD-SA-96:19.modstat 11 25 FreeBSD-SA-96:18.lpr 7 16 FreeBSD-SA-96:17.rzsz 12 FreeBSD-SA-96:16.rdist 04 FreeBSD-SA-96:15.ppp 6 28 FreeBSD-SA-96:12.perl 24 FreeBSD-SA-96:14.ipfw 05 FreeBSD-SA-96:13.comsat 5 21 FreeBSD-SA-96:11.man 17 FreeBSD-SA-96:10.mount_union FreeBSD-SA-96:09.vfsload 4 22 FreeBSD-SA-96:02.apache 21 FreeBSD-SA-96:08.syslog FreeBSD-SA-96:01.sliplogin 20 FreeBSD-SA-96:03.sendmail-suggestion Index: head/share/xml/notices.xml =================================================================== --- head/share/xml/notices.xml (revision 54451) +++ head/share/xml/notices.xml (revision 54452) @@ -1,1261 +1,1278 @@ $FreeBSD$ 2020 + 9 + + + 2 + + + FreeBSD-EN-20:18.getfsstat + + + + FreeBSD-EN-20:17.linuxthread + + + + + + 8 5 FreeBSD-EN-20:16.vmx 7 8 FreeBSD-EN-20:15.mps FreeBSD-EN-20:14.linuxkpi FreeBSD-EN-20:13.bhyve 6 9 FreeBSD-EN-20:12.iflib FreeBSD-EN-20:11.ena 5 12 FreeBSD-EN-20:10.build FreeBSD-EN-20:09.igb FreeBSD-EN-20:08.tzdata 4 21 FreeBSD-EN-20:07.quotad 3 19 FreeBSD-EN-20:06.ipv6 FreeBSD-EN-20:05.mlx5en FreeBSD-EN-20:04.pfctl FreeBSD-EN-20:03.sshd 1 28 FreeBSD-EN-20:02.nmount FreeBSD-EN-20:01.ssp 2019 11 12 FreeBSD-EN-19:19.loader 10 23 FreeBSD-EN-19:18.tzdata 8 20 FreeBSD-EN-19:17.ipfw FreeBSD-EN-19:16.bhyve 6 FreeBSD-EN-19:15.libunwind FreeBSD-EN-19:14.epoch 7 24 FreeBSD-EN-19:13.mds 2 FreeBSD-EN-19:12.tzdata 6 19 FreeBSD-EN-19:11.net 5 14 FreeBSD-EN-19:10.scp FreeBSD-EN-19:09.xinstall FreeBSD-EN-19:08.tzdata 2 5 FreeBSD-EN-19:07.lle FreeBSD-EN-19:06.dtrace 1 9 FreeBSD-EN-19:05.kqueue FreeBSD-EN-19:04.tzdata FreeBSD-EN-19:03.sqlite FreeBSD-EN-19:02.tcp FreeBSD-EN-19:01.cc_cubic 2018 12 19 FreeBSD-EN-18:18.zfs FreeBSD-EN-18:17.vm FreeBSD-EN-18:16.ptrace 11 27 FreeBSD-EN-18:15.loader FreeBSD-EN-18:14.tzdata FreeBSD-EN-18:13.icmp 9 27 FreeBSD-EN-18:12.mem FreeBSD-EN-18:11.listen FreeBSD-EN-18:10.syscall FreeBSD-EN-18:09.ip 12 FreeBSD-EN-18:08.lazyfpu 6 21 FreeBSD-EN-18:07.pmap 5 8 FreeBSD-EN-18:06.tzdata FreeBSD-EN-18:05.mem 4 4 FreeBSD-EN-18:04.mem FreeBSD-EN-18:03.tzdata 3 7 FreeBSD-EN-18:02.file FreeBSD-EN-18:01.tzdata 2017 11 2 FreeBSD-EN-17:09.tzdata 8 10 FreeBSD-EN-17:08.pf FreeBSD-EN-17:07.vnet 7 12 FreeBSD-EN-17:06.hyperv 4 12 FreeBSD-EN-17:05.xen 2 23 FreeBSD-EN-17:04.mandoc FreeBSD-EN-17:03.hyperv FreeBSD-EN-17:02.yp FreeBSD-EN-17:01.pcie 2016 12 6 FreeBSD-EN-16:21.localedef FreeBSD-EN-16:20.tzdata FreeBSD-EN-16:19.tzcode 10 25 FreeBSD-EN-16:18.loader FreeBSD-EN-16:17.vm 8 12 FreeBSD-EN-16:16.hv_storvsc FreeBSD-EN-16:15.vmbus FreeBSD-EN-16:14.hv_storvsc FreeBSD-EN-16:13.vmbus FreeBSD-EN-16:12.hv_storvsc FreeBSD-EN-16:11.vmbus FreeBSD-EN-16:10.dhclient 7 25 FreeBSD-EN-16:09.freebsd-update 5 4 FreeBSD-EN-16:08.zfs FreeBSD-EN-16:07.ipi FreeBSD-EN-16:06.libc 3 16 FreeBSD-EN-16:05.hv_netvsc FreeBSD-EN-16:04.hyperv 1 14 FreeBSD-EN-16:03.yplib FreeBSD-EN-16:02.pf FreeBSD-EN-16:01.filemon 2015 11 4 FreeBSD-EN-15:20.vm FreeBSD-EN-15:19.kqueue 9 16 FreeBSD-EN-15:18.pkg FreeBSD-EN-15:17.libc FreeBSD-EN-15:16.pw 8 25 FreeBSD-EN-15:15.pkg FreeBSD-EN-15:14.ixgbe 18 FreeBSD-EN-15:13.vidcontrol FreeBSD-EN-15:12.netstat FreeBSD-EN-15:11.toolchain 6 30 FreeBSD-EN-15:10.iconv FreeBSD-EN-15:09.xlocale 18 FreeBSD-EN-15:08.sendmail 9 FreeBSD-EN-15:07.zfs FreeBSD-EN-15:06.file 5 13 FreeBSD-EN-15:05.ufs FreeBSD-EN-15:04.freebsd-update 2 25 FreeBSD-EN-15:03.freebsd-update FreeBSD-EN-15:02.openssl FreeBSD-EN-15:01.vt 2014 12 23 FreeBSD-EN-14:13.freebsd-update 11 04 FreeBSD-EN-14:12.zfs 10 22 FreeBSD-EN-14:11.crypt FreeBSD-EN-14:10.tzdata 7 8 FreeBSD-EN-14:09.jail 6 24 FreeBSD-EN-14:08.heimdal FreeBSD-EN-14:07.pmap 3 FreeBSD-EN-14:06.exec 5 13 FreeBSD-EN-14:05.ciss FreeBSD-EN-14:04.kldxref FreeBSD-EN-14:03.pkg 1 14 FreeBSD-EN-14:02.mmap FreeBSD-EN-14:01.random 2013 11 28 FreeBSD-EN-13:05.freebsd-update 10 26 FreeBSD-EN-13:04.freebsd-update 8 22 FreeBSD-EN-13:03.mfi 6 28 FreeBSD-EN-13:01.fxp FreeBSD-EN-13:02.vtnet 2012 6 12 FreeBSD-EN-12:02.ipv6refcount 1 4 FreeBSD-EN-12:01.freebsd-update 2010 2 27 FreeBSD-EN-10:02.sched_ule 1 6 FreeBSD-EN-10:01.freebsd 2009 10 2 FreeBSD-EN-09:05.null 6 24 FreeBSD-EN-09:04.fork FreeBSD-EN-09:03.fxp FreeBSD-EN-09:02.bce 3 23 FreeBSD-EN-09:01.kenv 2008 6 19 FreeBSD-EN-08:02.tcp 4 17 FreeBSD-EN-08:01.libpthread 2007 3 15 FreeBSD-EN-07:05.freebsd-update 2 28 FreeBSD-EN-07:04.zoneinfo FreeBSD-EN-07:03.rc.d_jail FreeBSD-EN-07:02.net 14 FreeBSD-EN-07:01.nfs 2006 8 28 FreeBSD-EN-06:02.net 7 7 FreeBSD-EN-06:01.jail 2005 12 19 FreeBSD-EN-05:04.nfs 1 16 FreeBSD-EN-05:03.ipi 6 FreeBSD-EN-05:02.sk 5 FreeBSD-EN-05:01.nfs 2004 6 28 FreeBSD-EN-04:01.twe 2 26 FreeBSD 5.2.1-RELEASE