release/doc/share/xml/security.xml

   1 <?xml version="1.0" encoding="iso-8859-1"?>
   2 <!--
   3      The FreeBSD Documentation Project
   4
   5      $FreeBSD$
   6 -->
   7 <informaltable frame="none" pgwide="1">
   8   <tgroup cols="3">
   9     <colspec colwidth="40%"/>
  10     <colspec colwidth="30%"/>
  11     <colspec colwidth="30%"/>
  12     <thead>
  13       <row>
  14         <entry>Advisory</entry>
  15         <entry>Date</entry>
  16         <entry>Topic</entry>
  17       </row>
  18     </thead>
  19
  20     <tbody>
  21       <row>
  22         <entry><link xlink:href="&security.url;/FreeBSD-SA-13:07.bind.asc">FreeBSD-SA-13:07.bind</link></entry>
  23         <entry>26&nbsp;July&nbsp;2013</entry>
  24         <entry><para>Denial of Service vulnerability in
  25           &man.named.8;</para></entry>
  26       </row>
  27
  28       <row>
  29         <entry><link xlink:href="&security.url;/FreeBSD-SA-13:09.ip_multicast.asc">FreeBSD-SA-13:09.ip_multicast</link></entry>
  30         <entry>21&nbsp;August&nbsp;2013</entry>
  31         <entry><para>Integer overflow in computing the size of
  32             a temporary buffer can result in a buffer which is too
  33             small for the requested operation</para></entry>
  34       </row>
  35
  36       <row>
  37         <entry><link xlink:href="&security.url;/FreeBSD-SA-13:10.sctp.asc">FreeBSD-SA-13:10.sctp</link></entry>
  38         <entry>21&nbsp;August&nbsp;2013</entry>
  39         <entry><para>Fix a bug that could lead to kernel memory
  40             disclosure with SCTP state cookie</para></entry>
  41       </row>
  42
  43       <row>
  44         <entry><link xlink:href="&security.url;/FreeBSD-SA-13:12.ifioctl.asc">FreeBSD-SA-13:12.ifioctl</link></entry>
  45         <entry>10&nbsp;September&nbsp;2013</entry>
  46         <entry><para>In IPv6 and NetATM, stop
  47             <literal>SIOCSIFADDR</literal>,
  48             <literal>SIOCSIFBRDADDR</literal>,
  49             <literal>SIOCSIFDSTADDR</literal> and
  50             <literal>SIOCSIFNETMASK</literal> at the socket layer
  51             rather than pass them on to the link layer without
  52             validation or credential checks</para></entry>
  53       </row>
  54
  55       <row>
  56         <entry><link xlink:href="&security.url;/FreeBSD-SA-13:13.nullfs.asc">FreeBSD-SA-13:13.nullfs</link></entry>
  57         <entry>10&nbsp;September&nbsp;2013</entry>
  58         <entry><para>Prevent cross-mount hardlinks between different
  59             nullfs mounts of the same underlying
  60             filesystem</para></entry>
  61       </row>
  62
  63       <row>
  64         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:01.bsnmpd.asc">FreeBSD-SA-14:01.bsnmpd</link></entry>
  65         <entry>14&nbsp;January&nbsp;2014</entry>
  66         <entry><para>bsnmpd remote denial of service
  67             vulnerability</para></entry>
  68       </row>
  69
  70       <row>
  71         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:02.ntpd.asc">FreeBSD-SA-14:02.ntpd</link></entry>
  72         <entry>14&nbsp;January&nbsp;2014</entry>
  73         <entry><para>ntpd distributed reflection Denial of Service
  74             vulnerability</para></entry>
  75       </row>
  76
  77       <row>
  78         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:04.bind.asc">FreeBSD-SA-14:04.bind</link></entry>
  79         <entry>14&nbsp;January&nbsp;2014</entry>
  80         <entry><para>BIND remote denial of service
  81             vulnerability</para></entry>
  82       </row>
  83
  84       <row>
  85         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:05.nfsserver.asc">FreeBSD-SA-14:05.nfsserver</link></entry>
  86         <entry>8&nbsp;April&nbsp;2014</entry>
  87         <entry><para>NFS deadlock vulnerability</para></entry>
  88       </row>
  89
  90       <row>
  91         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:06.openssl.asc">FreeBSD-SA-14:06.openssl</link></entry>
  92         <entry>8&nbsp;April&nbsp;2014</entry>
  93         <entry><para>ECDSA Cache Side-channel Attack in
  94             OpenSSL</para></entry>
  95       </row>
  96
  97       <row>
  98         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:08.tcp.asc">FreeBSD-SA-14:08.tcp</link></entry>
  99         <entry>30&nbsp;April&nbsp;2014</entry>
 100         <entry><para>TCP reassembly vulnerability</para></entry>
 101       </row>
 102
 103       <row>
 104         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:11.sendmail.asc">FreeBSD-SA-14:11.sendmail</link></entry>
 105         <entry>5&nbsp;June&nbsp;2014</entry>
 106         <entry><para>sendmail improper close-on-exec flag
 107             handling</para></entry>
 108       </row>
 109
 110       <row>
 111         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:12.ktrace.asc">FreeBSD-SA-14:12.ktrace</link></entry>
 112         <entry>5&nbsp;June&nbsp;2014</entry>
 113         <entry><para>ktrace memory disclosure</para></entry>
 114       </row>
 115
 116       <row>
 117         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:14.openssl.asc">FreeBSD-SA-14:14.openssl</link></entry>
 118         <entry>5&nbsp;June&nbsp;2014</entry>
 119         <entry><para>OpenSSL multiple vulnerabilities</para></entry>
 120       </row>
 121
 122       <row>
 123         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:16.file.asc">FreeBSD-SA-14:16.file</link></entry>
 124         <entry>5&nbsp;June&nbsp;2014</entry>
 125         <entry><para>Multiple vulnerabilities in &man.file.1; and
 126             &man.libmagic.3;</para></entry>
 127       </row>
 128
 129       <row>
 130         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:17.kmem.asc">FreeBSD-SA-14:17.kmem</link></entry>
 131         <entry>8&nbsp;July&nbsp;2014</entry>
 132         <entry><para>kernel memory disclosure in control message and
 133             SCTP notifications</para></entry>
 134       </row>
 135
 136       <row>
 137         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:18.openssl.asc">FreeBSD-SA-14:18.openssl</link></entry>
 138         <entry>9&nbsp;September&nbsp;2014</entry>
 139         <entry><para>Multiple vulnerabilities in
 140             OpenSSL</para></entry>
 141       </row>
 142
 143       <row>
 144         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:19.tcp.asc">FreeBSD-SA-14:19.tcp</link></entry>
 145         <entry>16&nbsp;September&nbsp;2014</entry>
 146         <entry><para>Denial of Service in TCP packet
 147             processing</para></entry>
 148       </row>
 149
 150       <row>
 151         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:21.routed.asc">FreeBSD-SA-14:21.routed</link></entry>
 152         <entry>21&nbsp;October&nbsp;2014</entry>
 153         <entry><para>&man.routed.8; denial of service
 154             vulnerability</para></entry>
 155       </row>
 156
 157       <row>
 158         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:23.openssl.asc">FreeBSD-SA-14:23.openssl</link></entry>
 159         <entry>21&nbsp;October&nbsp;2014</entry>
 160         <entry><para>Multiple vulnerabilities in
 161             OpenSSL</para></entry>
 162       </row>
 163
 164       <row>
 165         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:25.setlogin.asc">FreeBSD-SA-14:25.setlogin</link></entry>
 166         <entry>4&nbsp;November&nbsp;2014</entry>
 167         <entry><para>kernel stack disclosure in &man.setlogin.2; and
 168           &man.getlogin.2;</para></entry>
 169       </row>
 170
 171       <row>
 172         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:26.ftp.asc">FreeBSD-SA-14:26.ftp</link></entry>
 173         <entry>4&nbsp;November&nbsp;2014</entry>
 174         <entry><para>Remote command execution in
 175             &man.ftp.1;</para></entry>
 176       </row>
 177
 178       <row>
 179         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:28.file.asc">FreeBSD-SA-14:28.file</link></entry>
 180         <entry>10&nbsp;December&nbsp;2014</entry>
 181         <entry><para>Multiple vulnerabilities in &man.file.1; and
 182             &man.libmagic.3;</para></entry>
 183       </row>
 184
 185       <row>
 186         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:29.bind.asc">FreeBSD-SA-14:29.bind</link></entry>
 187         <entry>10&nbsp;December&nbsp;2014</entry>
 188         <entry><para>BIND remote denial of service
 189             vulnerability</para></entry>
 190       </row>
 191
 192       <row>
 193         <entry><link xlink:href="&security.url;/FreeBSD-SA-14:31.ntp.asc">FreeBSD-SA-14:31.ntp</link></entry>
 194         <entry>23&nbsp;December&nbsp;2014</entry>
 195         <entry><para>Multiple vulnerabilities in NTP
 196             suite</para></entry>
 197       </row>
 198
 199       <row>
 200         <entry><link xlink:href="&security.url;/FreeBSD-SA-15:01.openssl.asc">FreeBSD-SA-15:01.ntp</link></entry>
 201         <entry>14&nbsp;January&nbsp;2015</entry>
 202         <entry><para>Multiple vulnerabilities in
 203             OpenSSL</para></entry>
 204       </row>
 205
 206       <row>
 207         <entry><link xlink:href="&security.url;/FreeBSD-SA-15:02.kmem.asc">FreeBSD-SA-15:02.kmem</link></entry>
 208         <entry>27&nbsp;January&nbsp;2015</entry>
 209         <entry><para>Fix SCTP SCTP_SS_VALUE kernel memory corruption
 210             and disclosure vulnerability</para></entry>
 211       </row>
 212
 213       <row>
 214         <entry><link xlink:href="&security.url;/FreeBSD-SA-15:03.sctp.asc">FreeBSD-SA-15:03.sctp</link></entry>
 215         <entry>27&nbsp;January&nbsp;2015</entry>
 216         <entry><para>Fix SCTP stream reset
 217             vulnerability</para></entry>
 218       </row>
 219
 220       <row>
 221         <entry><link
 222             xlink:href="&security.url;/FreeBSD-SA-15:04.igmp.asc">FreeBSD-SA-15:04.igmp</link></entry>
 223         <entry>25&nbsp;February&nbsp;2015</entry>
 224         <entry><para>Integer overflow in IGMP protocol</para></entry>
 225       </row>
 226
 227       <row>
 228         <entry><link
 229             xlink:href="&security.url;/FreeBSD-SA-15:05.bind.asc">FreeBSD-SA-15:05.igmp</link></entry>
 230         <entry>25&nbsp;February&nbsp;2015</entry>
 231         <entry><para>Remote denial of service
 232             vulnerability</para></entry>
 233       </row>
 234
 235       <row>
 236         <entry><link
 237             xlink:href="&security.url;/FreeBSD-SA-15:06.openssl.asc">FreeBSD-SA-15:06.openssl</link></entry>
 238         <entry>19&nbsp;March&nbsp;2015</entry>
 239         <entry><para>Multiple vulnerabilities</para></entry>
 240       </row>
 241
 242       <row>
 243         <entry><link
 244             xlink:href="&security.url;/FreeBSD-SA-15:07.ntp.asc">FreeBSD-SA-15:07.ntp</link></entry>
 245         <entry>7&nbsp;April&nbsp;2015</entry>
 246         <entry><para>Multiple vulnerabilities</para></entry>
 247       </row>
 248
 249       <row>
 250         <entry><link
 251             xlink:href="&security.url;/FreeBSD-SA-15:09.ipv6.asc">FreeBSD-SA-15:09.ipv6</link></entry>
 252         <entry>7&nbsp;April&nbsp;2015</entry>
 253         <entry><para>Router advertisement Denial of
 254             Service</para></entry>
 255       </row>
 256
 257       <row>
 258         <entry><link
 259             xlink:href="&security.url;/FreeBSD-SA-15:10.openssl.asc">FreeBSD-SA-15:10.openssl</link></entry>
 260         <entry>16&nbsp;June&nbsp;2015</entry>
 261         <entry><para>Multiple vulnerabilities</para></entry>
 262       </row>
 263
 264       <row>
 265         <entry><link
 266             xlink:href="&security.url;/FreeBSD-SA-15:11.bind.asc">FreeBSD-SA-15:11.bind</link></entry>
 267         <entry>7&nbsp;July&nbsp;2015</entry>
 268         <entry><para>Resolver remote denial of service</para></entry>
 269       </row>
 270     </tbody>
 271   </tgroup>
 272 </informaltable>