https://syspatch.se/ 2026-09-30T00:00:00Z https://syspatch.se/7.9/030_uidrange.html2026-09-30T00:00:00Z

Incorrect upper bound for uid and gid can result in -1 being used.

https://syspatch.se/7.9/029_sysvsem.html2026-09-30T00:00:00Z

Semaphore operation semop(2) could trigger a use-after-free in the kernel.

https://syspatch.se/7.9/028_wgbind.html2026-09-30T00:00:00Z

After wg(4) interface destruction a use-after-free coould be triggered by incoming packets.

https://syspatch.se/7.9/027_iked.html2026-09-30T00:00:00Z

A malicious IKEv2 peer could crash iked(8), or cause a certificate validation verdict to be applied to the wrong peer identity.

https://syspatch.se/7.9/026_sysvipc.html2026-09-30T00:00:00Z

A reference counting bug could lead to use-after-free in the kernel.

https://syspatch.se/7.9/025_procargs.html2026-09-30T00:00:00Z

An errant process could cause ps(1) to crash due to a buffer overflow in sysctl(2).

https://syspatch.se/7.9/024_libressl.html2026-09-30T00:00:00Z

Fix a variety of bugs in libressl: - Remove RelativeDistinguishedName support for CRL distribution points - Ensure verify callbacks always returning 1 can see a hostname mismatch - Correct botched size check in dtls1_preprocess_fragment() - Limit size of buffered DTLS handshake messages - Avoid potential overread on interrupted retransmission in DTLS - Fix OCSP responder authorization bypass in libtls and ocspcheck(8)

https://syspatch.se/7.9/023_unbound.html2026-09-30T00:00:00Z

Update unbound(8) to version 1.26.1. CVE-2026-14586 CVE-2026-32665 CVE-2026-32792 CVE-2026-33278 CVE-2026-40622 CVE-2026-40691 CVE-2026-41292 CVE-2026-41637 CVE-2026-42534 CVE-2026-42923 CVE-2026-42944 CVE-2026-42955 CVE-2026-42959 CVE-2026-42960 CVE-2026-44390 CVE-2026-44608 CVE-2026-44621 CVE-2026-44687 CVE-2026-44690 CVE-2026-46582 CVE-2026-50045 CVE-2026-50046 CVE-2026-50243 CVE-2026-50248 CVE-2026-50251 CVE-2026-50252 CVE-2026-52863 CVE-2026-54478 CVE-2026-55708 CVE-2026-55717 CVE-2026-55973 CVE-2026-55990 CVE-2026-55991 CVE-2026-56416 CVE-2026-56444

https://syspatch.se/7.9/022_nsd.html2026-09-30T00:00:00Z

Update nsd(8) to version 4.15.2. CVE-2026-12244 CVE-2026-12245 CVE-2026-12246 CVE-2026-12490 CVE-2026-18664 CVE-2026-18916 CVE-2026-19401 CVE-2026-19538

https://syspatch.se/7.9/021_ldapd.html2026-09-14T00:00:00Z

In ldapd(8), an authentication result from one transaction could be applied to another.

https://syspatch.se/7.9/020_xserver.html2026-09-14T00:00:00Z

Multiple vulnerabilities in the X server and server side font library. CVE-2026-55999 CVE-2026-56000 CVE-2026-56001 CVE-2026-56002 CVE-2026-56003

https://syspatch.se/7.9/019_expat.html2026-09-14T00:00:00Z

Backport all changes from libexpat 2.8.4. CVE-2026-66046 CVE-2026-76641 CVE-2026-76957

https://syspatch.se/7.9/018_shmat.html2026-09-14T00:00:00Z

Prevent integer overflow in shmat(4).

https://syspatch.se/7.9/017_wscons.html2026-09-14T00:00:00Z

Prevent integer overflow in wscons(4).

https://syspatch.se/7.9/016_nfs.html2026-09-14T00:00:00Z

A malicous NFS server could aid a local user in avoiding access controls.

https://syspatch.se/7.9/015_smtpd.html2026-09-14T00:00:00Z

In smtpd(8) a custom MDA could execute arbitrary code as an unprivileged recipient user.

https://syspatch.se/7.9/014_expat.html2026-08-22T00:00:00Z

Backport all changes from libexpat 2.8.3. CVE-2026-45186 CVE-2026-50219 CVE-2026-56131 CVE-2026-56132 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406 CVE-2026-56407 CVE-2026-56408 CVE-2026-56409 CVE-2026-56410 CVE-2026-56411 CVE-2026-56412 CVE-2026-72522

https://syspatch.se/7.9/013_ttyioctl.html2026-08-22T00:00:00Z

TIOCGSID on tty(4) could trigger a kernel panic.

https://syspatch.se/7.9/012_kernproc.html2026-08-22T00:00:00Z

The sysctl(2) kern.proc could leak kernel memory.

https://syspatch.se/7.9/011_nipledge.html2026-08-22T00:00:00Z

A race in pledge(2) namei check could trigger a kernel panic.

https://syspatch.se/7.9/010_ifioctl.html2026-08-22T00:00:00Z

Interface ioctl(4) could leak 4 bytes of kernel memory.

https://syspatch.se/7.9/009_iked.html2026-08-11T00:00:00Z

iked(8) could be crashed remotely pre authentication.

https://syspatch.se/7.9/008_npppd.html2026-08-11T00:00:00Z

Heap or stack corruption in npppd(8) LCP option handling could lead to crashes.

https://syspatch.se/7.9/007_ipsec.html2026-07-16T00:00:00Z

Stricter IPsec and IPComp input validation prevents kernel crash.

https://syspatch.se/7.9/006_nfs.html2026-07-16T00:00:00Z

Fix double-free, memory leaks, and vnode references in NFS server.

https://syspatch.se/7.9/005_sysv.html2026-07-16T00:00:00Z

Fix numerous problems in the System V (sem, msg, ipc) system call layers.

https://syspatch.se/7.9/004_elf.html2026-07-16T00:00:00Z

Fix some info leaks, kernel crashes, and pinsyscall(8) / kbind(8) locking failures.

https://syspatch.se/7.9/003_vmd.html2026-06-02T00:00:00Z

In vmd(8), fix a variety of crashing bugs and misbehavior of -b flag.

https://syspatch.se/7.9/002_smtpd.html2026-06-02T00:00:00Z

Fixes for a variety of crashing bugs in smtpd(8).

https://syspatch.se/7.9/001_xserver.html2026-06-02T00:00:00Z

Multiple vulnerabilites in the X server dri2, sync, saver and Xkb extensions.