git: d77c471296 - main - Add security advisories affecting 14.4R, 15.0R and 15.1R

Philip Paeps <[email protected]> Thu, 30 Jul 2026 01:38:19 +0000
Newsgroups gmane.os.freebsd.devel.cvs.doc
Message-ID <[email protected]>
The branch main has been updated by philip:

URL: https://cgit.FreeBSD.org/doc/commit/?id=d77c4712960b4e2dd27d6db7602ad7e4712bba93

commit d77c4712960b4e2dd27d6db7602ad7e4712bba93
Author:     Philip Paeps <[email protected]>
AuthorDate: 2026-07-30 01:36:20 +0000
Commit:     Philip Paeps <[email protected]>
CommitDate: 2026-07-30 01:36:20 +0000

    Add security advisories affecting 14.4R, 15.0R and 15.1R
    
    FreeBSD-SA-26:50.kqueue affects 15.1R
    FreeBSD-SA-26:51.ktimer affects 15.0R and 15.1R
    FreeBSD-SA-26:52.if_wg affects all supported releases
    FreeBSD-SA-26:53.ktrace affects 15.0R and 15.1R
    FreeBSD-SA-26:54.sysvsem affects all supported releases
    FreeBSD-SA-26:55.elf affects all supported releases
---
 website/content/en/releases/14.4R/errata.adoc | 3 +++
 website/content/en/releases/15.0R/errata.adoc | 6 ++++++
 website/content/en/releases/15.1R/errata.adoc | 6 ++++++
 3 files changed, 15 insertions(+)

diff --git a/website/content/en/releases/14.4R/errata.adoc b/website/content/en/releases/14.4R/errata.adoc
index 5c285f298c..186c7f5caf 100644
--- a/website/content/en/releases/14.4R/errata.adoc
+++ b/website/content/en/releases/14.4R/errata.adoc
@@ -86,6 +86,9 @@ For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:47.linux.asc[FreeBSD-SA-26:47.linux] |30 June 2026 |Kernel stack disclosure in Linux compatibility layer
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:48.compat32.asc[FreeBSD-SA-26:48.compat32] |30 June 2026 |Kernel stack disclosure in 32-bit compatibility support
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:49.iconv.asc[FreeBSD-SA-26:49.iconv] |30 June 2026 |Multiple vulnerabilities in iconv(3)
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:52.if_wg.asc[FreeBSD-SA-26:52.if_wg] |29 July 2026 |Missing MAC validation in wg(4) packet decryption
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:54.sysvsem.asc[FreeBSD-SA-26:54.sysvsem] |29 July 2026 |Heap out-of-bounds access in semctl(2)
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:55.elf.asc[FreeBSD-SA-26:55.elf] |29 July 2026 |Race condition in ELF core dump segment counting
 |===
 
 [[errata]]
diff --git a/website/content/en/releases/15.0R/errata.adoc b/website/content/en/releases/15.0R/errata.adoc
index 463c37e188..19f2309695 100644
--- a/website/content/en/releases/15.0R/errata.adoc
+++ b/website/content/en/releases/15.0R/errata.adoc
@@ -92,6 +92,12 @@ For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:47.linux.asc[FreeBSD-SA-26:47.linux] |30 June 2026 |Kernel stack disclosure in Linux compatibility layer
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:48.compat32.asc[FreeBSD-SA-26:48.compat32] |30 June 2026 |Kernel stack disclosure in 32-bit compatibility support
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:49.iconv.asc[FreeBSD-SA-26:49.iconv] |30 June 2026 |Multiple vulnerabilities in iconv(3)
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:50.kqueue.asc[FreeBSD-SA-26:50.kqueue] |UNKNOWN |Use-after-free in kqueue copy-on-fork
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:51.ktimer.asc[FreeBSD-SA-26:51.ktimer] |29 July 2026 |Kernel stack disclosure via timer_settime(2)
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:52.if_wg.asc[FreeBSD-SA-26:52.if_wg] |29 July 2026 |Missing MAC validation in wg(4) packet decryption
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:53.ktrace.asc[FreeBSD-SA-26:53.ktrace] |29 July 2026 |ktrace(2) privilege incorrectly validated in jails
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:54.sysvsem.asc[FreeBSD-SA-26:54.sysvsem] |29 July 2026 |Heap out-of-bounds access in semctl(2)
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:55.elf.asc[FreeBSD-SA-26:55.elf] |29 July 2026 |Race condition in ELF core dump segment counting
 |===
 
 [[errata]]
diff --git a/website/content/en/releases/15.1R/errata.adoc b/website/content/en/releases/15.1R/errata.adoc
index 2eb998e6fe..8da7acda68 100644
--- a/website/content/en/releases/15.1R/errata.adoc
+++ b/website/content/en/releases/15.1R/errata.adoc
@@ -55,6 +55,12 @@ For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:45.audit.asc[FreeBSD-SA-26:45.audit] |30 June 2026 |Incorrect audit records for ptrace(2) syscall requests
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:46.ktls.asc[FreeBSD-SA-26:46.ktls] |30 June 2026 |Remote DOS via uninitialized memory access in KTLS receive
 |link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:49.iconv.asc[FreeBSD-SA-26:49.iconv] |30 June 2026 |Multiple vulnerabilities in iconv(3)
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:50.kqueue.asc[FreeBSD-SA-26:50.kqueue] |29 July 2026 |Use-after-free in kqueue copy-on-fork
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:51.ktimer.asc[FreeBSD-SA-26:51.ktimer] |29 July 2026 |Kernel stack disclosure via timer_settime(2)
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:52.if_wg.asc[FreeBSD-SA-26:52.if_wg] |29 July 2026 |Missing MAC validation in wg(4) packet decryption
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:53.ktrace.asc[FreeBSD-SA-26:53.ktrace] |29 July 2026 |ktrace(2) privilege incorrectly validated in jails
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:54.sysvsem.asc[FreeBSD-SA-26:54.sysvsem] |29 July 2026 |Heap out-of-bounds access in semctl(2)
+|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-26:55.elf.asc[FreeBSD-SA-26:55.elf] |29 July 2026 |Race condition in ELF core dump segment counting
 |===
 
 [[errata]]