{"push_id":557713430,"size":3,"distinct_size":3,"ref":"refs/heads/svn_head","head":"938fbf3c7018f0396ac1384e734fd756b800ef3a","before":"669df212f6200f2821324841b32eba3438416706","commits":[{"sha":"b0dc673a7fd6da70f20d06df8e31b3a922efd14a","author":{"email":"93465216fd46a440eb04b27d6e009aced8b0c153@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f","name":"delphij"},"message":"Fix SCTP SCTP_SS_VALUE kernel memory corruption and disclosure vulnerability.\n\nWe would like to acknowledge Clement LECIGNE from Google Security Team and\nFrancisco Falcon from Core Security Technologies who discovered the issue\nindependently and reported to the FreeBSD Security Team.\n\nSecurity:\tFreeBSD-SA-15:02.kmem\nSecurity:\tCVE-2014-8612\nSubmitted by:\ttuexen\n\n\ngit-svn-id: svn+ssh://svn.freebsd.org/base/head@277804 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f","distinct":true,"url":"https://api.github.com/repos/freebsd/freebsd/commits/b0dc673a7fd6da70f20d06df8e31b3a922efd14a"},{"sha":"220e510507d5de13d12bfdab9f38a1dba9a0d30b","author":{"email":"93465216fd46a440eb04b27d6e009aced8b0c153@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f","name":"delphij"},"message":"Fix SCTP stream reset vulnerability.\n\nWe would like to acknowledge Gerasimos Dimitriadis who reported\nthe issue and Michael Tuexen who analyzed and provided the\nfix.\n\nSecurity:\tFreeBSD-SA-15:03.sctp\nSecurity:\tCVE-2014-8613\nSubmitted by:\ttuexen\n\n\ngit-svn-id: svn+ssh://svn.freebsd.org/base/head@277805 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f","distinct":true,"url":"https://api.github.com/repos/freebsd/freebsd/commits/220e510507d5de13d12bfdab9f38a1dba9a0d30b"},{"sha":"938fbf3c7018f0396ac1384e734fd756b800ef3a","author":{"email":"93465216fd46a440eb04b27d6e009aced8b0c153@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f","name":"delphij"},"message":"Use unsigned int for index value.\n\nWithout this change a local attacker could trigger a panic by\ntricking the kernel into accessing undefined kernel memory.\n\nWe would like to acknowledge Francisco Falcon from CORE Security\nTechnologies who discovered the issue and reported to the\nFreeBSD Security Team.\n\nMore information can be found at CORE Security's advisory at:\nhttp://www.coresecurity.com/content/freebsd-kernel-multiple-vulnerabilities\n\nThis is an errata candidate for releng/10.1 and releng/9.3.  Earlier\nreleases are not affected.\n\nReported by:\tFrancisco Falcon from CORE Security Technologies\nSecurity:\tCVE-2014-0998\nReviewed by:\tdumbbell\nMFC after:\t3 days\n\n\ngit-svn-id: svn+ssh://svn.freebsd.org/base/head@277806 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f","distinct":true,"url":"https://api.github.com/repos/freebsd/freebsd/commits/938fbf3c7018f0396ac1384e734fd756b800ef3a"}]}