[Midnightbsd-cvs] [MidnightBSD/src] ebcfab: document

[Lucas Holt]

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: ebcfab129b5a38476d72bd8a466442fe8edcdc37
      https://github.com/MidnightBSD/src/commit/ebcfab129b5a38476d72bd8a466442fe8edcdc37
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-05-22 (Fri, 22 May 2026)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  document


  Commit: 5285f3acb314f06dce10d7967b88c8c219a0fc8f
      https://github.com/MidnightBSD/src/commit/5285f3acb314f06dce10d7967b88c8c219a0fc8f
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-05-22 (Fri, 22 May 2026)

  Changed paths:
    M lib/libcasper/services/cap_net/cap_net.c

  Log Message:
  -----------
  libcasper: select(2) file descriptor set overflow causes stack overflow

Fixes  CVE-2026-39461

An attacker able to cause an application using libcasper(3) to allocate large
file descriptors, e.g., by opening many descriptors and executing a program
which is not careful to close them upon startup, may trigger stack
corruption.  If the target application runs with setuid root privileges, this
could be used to escalate local privileges.

Obtained from: FreeBSD


Compare: https://github.com/MidnightBSD/src/compare/e8cd69aef8dc...5285f3acb314

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications