Freebsd 14.2 p1 is out

[NapoleonWils0n]

Just a heads up Freebsd 14.2 p1 is out

freebsd-version -kru

14.2-RELEASE-p1
14.2-RELEASE-p1
14.2-RELEASE-p1

uname -a

FreeBSD pollux 14.2-RELEASE-p1 FreeBSD 14.2-RELEASE-p1 GENERIC amd64

there is an update for musicpd
note if you have a custom musicpd rc.d script in

/usr/local/etc/rc.d/musicpd

it will be overwritten by the update
so make sure to readd your custom musicpd rc.d script in the above location

and then restart musicpd

doas service musicpd restart

otherwise mpd wont start
happened to me a few times so i thought id mention it

 

[fernandel]

Is this update from January 29th?

 

[NapoleonWils0n]

not sure how i would check the release date off the top my head

 

[dkh]

It was out with the last batch of security advisories.

 

[fernandel]

not sure how i would check the release date off the top my head

I thought that is something new. Sorry.

 

[Erichans]

not sure how i would check the release date off the top my head

It was out with the last batch of security advisories.

Yes, SAs (Security Advisories) and/or ENs (Errata Notices) are (AFAIK) the reasons for a patch -> patch lvevel increase: 14.2-p1 - Commit on 2025-01-29:

-BRANCH="RELEASE"
+BRANCH="RELEASE-p1"

 

[bumpyhead]

14.2-RELEASE-p2 is out

 

[SirDice]

F

Thread 'FreeBSD-SA-25:05.openssh'

Feb 21, 2025

* OpenSSH client host verification error (CVE-2025-26465)

ssh(1) contains a logic error that allows an on-path attacker to impersonate any server during certain conditions when the VerifyHostKeyDNS option is enabled.

* OpenSSH server denial of service (CVE-2025-26466)

The OpenSSH client and server are both vulnerable to a memory/CPU denial of service while handling SSH2_MSG_PING packets.

Continue reading...

• FreeBSD Security
• Replies: 0
• Forum: Blogs and Newsfeeds

 

[SDK Chan]

Generally ssh is disabled on my system (not enabled in my /etc/rc.conf file).
I do not know about ports if they also somehow are affected by the patch level, but updating the poudriere jail will result in all ports being rebuild, right ?

Does it make any sense to update FreeBSDs patch level if I do not use ssh ?
I believe p1, and p2 were fixes for this daemon.

 

[SirDice]

I believe p1, and p2 were fixes for this daemon.

P1 included 3 SAs and 2 ENs, but nothing regarding OpenSSH.

https://www.freebsd.org/security/advisories/FreeBSD-SA-25:02.fs.asc

https://www.freebsd.org/security/advisories/FreeBSD-SA-25:03.etcupdate.asc

https://www.freebsd.org/security/advisories/FreeBSD-SA-25:04.ktrace.asc

https://www.freebsd.org/security/advisories/FreeBSD-EN-25:02.audit.asc

https://www.freebsd.org/security/advisories/FreeBSD-EN-25:03.tzdata.asc

 

[USerID]

Today.
# freebsd-version -kru

14.2-RELEASE-p1
14.2-RELEASE-p1
14.2-RELEASE-p2

 

[patmaddox]

not sure how i would check the release date off the top my head

Best way imo is to check UPDATING.