<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>MidnightBSD 4.0.7 RELEASE is uploading right now. It contains a
number of security updates and is recommended for all users.</p>
<ul
style="box-sizing: border-box; margin-top: 0px; margin-bottom: 16px; padding-left: 2em; color: rgb(31, 35, 40); font-family: "Mona Sans VF", -apple-system, BlinkMacSystemFont, "Segoe UI", "Noto Sans", Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji"; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">
<li style="box-sizing: border-box;">libarchive 3.8.8 (<a
title="CVE-2026-14164" data-hovercard-type="advisory"
data-hovercard-url="/advisories/GHSA-xq96-f7x8-gfx3/hovercard"
href="https://github.com/advisories/GHSA-xq96-f7x8-gfx3"
aria-keyshortcuts="Alt+ArrowUp"
style="box-sizing: border-box; background-color: rgba(0, 0, 0, 0); color: rgb(9, 105, 218); text-decoration: underline; text-underline-offset: 0.2rem;">CVE-2026-14164</a>)</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">tzdata
2026c</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">llvm:<span> </span><a
title="CVE-2026-13574" data-hovercard-type="advisory"
data-hovercard-url="/advisories/GHSA-pf97-7r98-qpj7/hovercard"
href="https://github.com/advisories/GHSA-pf97-7r98-qpj7"
aria-keyshortcuts="Alt+ArrowUp"
style="box-sizing: border-box; background-color: rgba(0, 0, 0, 0); color: rgb(9, 105, 218); text-decoration: underline; text-underline-offset: 0.2rem;">CVE-2026-13574</a><span> </span>gc.relocate
malformed index diagnostic crash</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">ldns
1.9.2:<span> </span><a title="CVE-2026-10846"
data-hovercard-type="advisory"
data-hovercard-url="/advisories/GHSA-x77r-8q36-8529/hovercard"
href="https://github.com/advisories/GHSA-x77r-8q36-8529"
aria-keyshortcuts="Alt+ArrowUp"
style="box-sizing: border-box; background-color: rgba(0, 0, 0, 0); color: rgb(9, 105, 218); text-decoration: underline; text-underline-offset: 0.2rem;">CVE-2026-10846</a><span> </span>off-path
DNS response spoofing in the stub resolver and drill; responses
are now matched to the query by source address/port, transaction
ID and question</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">openssl:<span> </span><a
title="CVE-2026-45447" data-hovercard-type="advisory"
data-hovercard-url="/advisories/GHSA-f684-cpcq-j565/hovercard"
href="https://github.com/advisories/GHSA-f684-cpcq-j565"
aria-keyshortcuts="Alt+ArrowUp"
style="box-sizing: border-box; background-color: rgba(0, 0, 0, 0); color: rgb(9, 105, 218); text-decoration: underline; text-underline-offset: 0.2rem;">CVE-2026-45447</a><span> </span>PKCS#7/S/MIME
verification use-after-free fix.</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">openssl:<span> </span><a
title="CVE-2026-34180" data-hovercard-type="advisory"
data-hovercard-url="/advisories/GHSA-3c8f-qq7h-7qv6/hovercard"
href="https://github.com/advisories/GHSA-3c8f-qq7h-7qv6"
aria-keyshortcuts="Alt+ArrowUp"
style="box-sizing: border-box; background-color: rgba(0, 0, 0, 0); color: rgb(9, 105, 218); text-decoration: underline; text-underline-offset: 0.2rem;">CVE-2026-34180</a><span> </span>ASN.1
decoder large primitive length over-read fix.</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">openssl:<span> </span><a
title="CVE-2026-7383" data-hovercard-type="advisory"
data-hovercard-url="/advisories/GHSA-w853-v86g-gv7j/hovercard"
href="https://github.com/advisories/GHSA-w853-v86g-gv7j"
aria-keyshortcuts="Alt+ArrowUp"
style="box-sizing: border-box; background-color: rgba(0, 0, 0, 0); color: rgb(9, 105, 218); text-decoration: underline; text-underline-offset: 0.2rem;">CVE-2026-7383</a><span> </span>ASN1_mbstring_ncopy()
Unicode output size overflow fix.</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">openssl:<span> </span><a
title="CVE-2026-28388" data-hovercard-type="advisory"
data-hovercard-url="/advisories/GHSA-rpg5-467j-c25q/hovercard"
href="https://github.com/advisories/GHSA-rpg5-467j-c25q"
aria-keyshortcuts="Alt+ArrowUp"
style="box-sizing: border-box; background-color: rgba(0, 0, 0, 0); color: rgb(9, 105, 218); text-decoration: underline; text-underline-offset: 0.2rem;">CVE-2026-28388</a><span> </span>delta
CRL missing CRL Number NULL pointer dereference fix.</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">llvm:<span> </span><a
title="CVE-2026-13574" data-hovercard-type="advisory"
data-hovercard-url="/advisories/GHSA-pf97-7r98-qpj7/hovercard"
href="https://github.com/advisories/GHSA-pf97-7r98-qpj7"
aria-keyshortcuts="Alt+ArrowUp"
style="box-sizing: border-box; background-color: rgba(0, 0, 0, 0); color: rgb(9, 105, 218); text-decoration: underline; text-underline-offset: 0.2rem;">CVE-2026-13574</a><span> </span>gc.relocate
malformed index diagnostic crash fix.</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">vm:
CVE-2026-49418 device pager page list use-after-free fix.</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">iconv:
CVE-2026-58081, CVE-2026-58082 buffer overflows in the HZ,UTF-7,
VIQR, ZW and ISO-2022 iconv(3) encoding modules.</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">audit:
CVE-2026-49426 incorrect audit records for ptrace(PT_SC_REMOTE)
syscall requests</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">posixshm:
CVE-2026-49427, CVE-2026-49428 use-after-free in POSIX largepage
shared memory objects (sendfile SF_NOCACHE and O_TRUNC paths).</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">tcp:
CVE-2026-49422 use-after-free in the RACK TCP stack
setsockopt(2) handler (tcp_rack.ko).</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">unlinkat:
CVE-2026-49421 unlinkat(2)/funlinkat(2) silently ignored the
AT_RESOLVE_BENEATH path-containment flag.</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">libalias:
CVE-2026-49420 buffer overflow in the RTSP handler
(alias_smedia).</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">zfs:
CVE-2026-49429, CVE-2026-49430, CVE-2026-49431 OpenZFS heap
overflow (USERSPACE_MANY), receive-path memory corruption
(RECV_NEW heal) and improper SET_PROP privilege check.</li>
<li style="box-sizing: border-box; margin-top: 0.25em;">execve:
CVE-2026-49415 local privilege escalation via a procfs debugging
permission race.</li>
</ul>
<p><br>
</p>
<pre class="moz-signature" cols="72">--
Lucas Holt
<a class="moz-txt-link-abbreviated" href="mailto:Luke@FoolishGames.com">Luke@FoolishGames.com</a>
________________________________________________________
MidnightBSD.org (Free OS)
JustJournal.com (Free blogging)</pre>
</body>
</html>