security alert

Greetings all. I am running FreeBSD 13.5-RELEASE-p10 on two systems here. The periodic daily security job alerted about a new patch to fix a vulnerability, specifically: FreeBSD-kernel-13.5_10 is vulnerable: FreeBSD -- Remote code execution via RPCSEC_GSS packet validation CVE...

Link here. We'll see if we are included in the "potentially others". In our company we opened a few SR to our vendors and one of them told us that they are assisting the maintainers and honoring embargo holds.

The current driver in FreeBSD 12.3 is version 470.103.01 : https://www.freshports.org/x11/nvidia-driver-470/ https://www.freshports.org/x11/linux-nvidia-libs-470/ However, this has been the latest version for a while: https://www.nvidia.com/Download/driverResults.aspx/188879/en-us/ It is...

https://securityboulevard.com/2021/04/forescout-and-jsof-disclose-new-dns-vulnerabilities-impacting-millions-of-enterprise-and-consumer-devices/

I have a note referring to this security alert saying I need to truncate bsdpatch before doing freebsd-update: : > /usr/bin/bspatch In reading the SA, I'm unclear if this is still an issue. Do I need to keep doing this in 12.1? How can I tell?