Yasuhiro KIMURA
2019-Oct-16 08:28 UTC
Recent security update of softwares used in base system
Hello,
Recently security update are released for some softwares used in base
system.
* OpenSSL 1.0.2t and 1.1.1d
(https://www.openssl.org/news/secadv/20190910.txt)
* Unbound 1.9.4
(https://www.nlnetlabs.nl/projects/unbound/security-advisories/#vulnerability-in-parsing-notify-queries)
* Tcpdump 4.9.3 and libpcap 1.9.1
(https://www.tcpdump.org/public-cve-list.txt)
According to base SVN repository current status of these softwares is
* OpenSSL 1.0.2t and 1.1.1d are imported and merged into head,
stable/{11,12} and releng/12.1 but not into releng/{11.3,12.0} yet.
* Unbound 1.9.4 is not imported yet.
* Tcpdump 4.9.3 and libpcap 1.9.1 are imported but not merged into
head, stable and releng yet.
I hope these security updates are applied to all supported versions
ASAP and to releng/12.1 before the release of 12.1.
Best Regards.
---
Yasuhiro KIMURA