DELTA 507675 0 32660 SVN'`&fTb>q'_S?D@Rrf^5721ae65-b30a-11e9-a87f-a4badb2f4699"> FreeBSD -- pts(4) write-after-freeThe code which handles a close(2) of a descriptor created by posix_openpt(2) fails to undo the configuration which causes SIGIO to be raised. This bug can lead to a write-after-free of kernel memory.

Impact:

The bug permits malicious code to trigger a write-after-free, which may be used to gain root privileges or escape a jail6 SA-19:13.pts24)( RyRAE> 1I7vflx^RMO0=_1y]`7UqX !δ5$v q]_oJ!Pm%zvU֛X[)aX>>P|o>%jX:T媔LPSx `|1F)Rng?t͙0@"cSL O!K$a.$^ 22uxTز`-qJ3Ve䰣XPˍ(J66%YC&XqƜ;~:XTZWth9H5(Yksjқ}oM>"ݔZZFqq_`c.&'ُp0<&hư(T']~b[hVd.lv?3Y>(Wx^}Rn <7_rU{V(ظmkp,3qI#Z@mHHhlXFN{g Z G;V8g k;»Sh~T~.8zӖ934huܦ*<(c{H=>ex^SAn0<ǯXI8.RI ɕD"UιKqZr9;R/@*%Gਲ਼Pͮ'#i8!&h'x~y4`郳GČjT:3v#j%1(kR@/iBOl 5(#ՙnAZP@u0JZN'ĠsL.*xjǂRqrP>+~i֞( 4t} L&rfwU~ZU2uVǖKJWܫS mo] >HŢ,4Q{ONǛt O|ieoE49\M+רF^Id+SR4=kSN7KroxY@!g4AAGwwM'|1T$wY-з0v=^&065JYWE =mVG't?Q8J`rI<|ԱkHU};׊n<\U\QK`>GrdiF ႜQfm`O8nY+e%9e(]tRͽA/8$,:YT@rtȫm\ݪ. ve"Ik""P.bq_/WRvZn] hrخղO$ ʲ"87~ayv?îIv)CE^DŽ6𽖄W#Pz]jWGyA_1_E?v}f_x^u[O0WxeUU_Ğd&v'{wC*)3;gfRfBu Pfi<l;k&!&*ϛ(h:On(@vIN!tefh[ʎ"KQfRfN2Z㧋'5M^ +'V5U*Bmam]؏"`ywZ<9 'IO-[#nGDi:%{s&q4=m!~t4 GikB*ȞZӗJes+QQV͹x]ҠG=A'ieav@59)-;>zcvE'x ʴW p1Jk+;2X֨z B)>ڏbl5bK%Wd,Vp;F a/А+a䋒b K#!ڀ.) 9GԦl"`&~u0T뚼_U#Mfp̺N5J_֗t{i|B.F wܯ׼Cwڕ\TIt[Ö+RXm04Xejg.NJB@T!E{x^@?'|S/^(Z)!L6dinsWz'jUCfy~,D @hvJWE4aumC!b! VUC9iXElK!M0ˆRMeA\}6?!-g<@b1)BdZ&Gir[6"r/؎ :'Mneg]9/OӋb8pOi¡YS+`U,A! :;վ^_^78[eʄ17)pI=S[5/jB%)z7/}LZJsb"MbtĨ&F#7˱~`[z U%q:]H}FB/#ϟ_P_.F3ÆV)>ś''['WVQ򀫏dq3n1A!)G(^sZ?n5s6y/)=E3225.htmL">

These updates resolve a race condition vulnerability that could lead to information disclosure (CVE-2016-4247).( 68ɉ`[$5FU>Cе:+AGOZ.-hQ¹0ܴjl00( zw{Sx77brBUjOJs|Yzډ=/-zTb^A_ef]%˰t,jZ{C A(0qME#9w|{_? p3f\S$NLj,|wNtk>M3ߍjXMiW<+lEA&O4ȶ% 0N0N7OerurO&!TLPKH{H{H{H{H{H{H{H{IzH{H{H{I{I{>(Ohttps://www.mozilla.org/security/advisories/mfsa2016-17181920212223242262728291$ #_`7iJ{{v@fx^PMo0 ='Bȹ2MBee@Ov%ѢOn+90`;( #ߕ$ybuڍDPc^bݎ ,?/?mݖO)MO]̑1Fz " QIK|':Tp4QzW~$t eJ72J$50gu kDf7Iv@dT#vjGكة-k+Iލ]FI=k r(1[l 2015-09-04 2016-01-02 qemu -- denial of service12.50.g201412309/02/7">

Qemu emulator built with the VNC display driver is vulnerable to an infinite loop issue. It could occur while processing a CLIENT_CUT_TEXT me sfx^}Sn0<_1?`v)"r]S+-MKڮ]JvC+ɝoŻoxzOgדhO3Z cm0B  q?KLփ5LGB&$iRFh`L:$ [" SaJzoU.ʕON®ƁG,+Dٶ˰ cT̡c?@M)Ij,d}aԯ"lGerWaApJe/#2mT?Ο7|D%O^FRUz5RKh  _Kcjߟ_1 yM b<u(vַRWkmCس4.PcICNFR48ZH}SCg3HP]ӖOj}Hz: b[Ys&G_Dݩ#gtnX75cigmS>٬]RC1op7>eQEeXgN@+J~pfx^RѮ } %$Qe4MTLwB"S~&ico?^w/@GߨvdR+.d*8Ysi{poNʡ.2H4a@a &&6^upvDLpߦ^77/MaV3IRDͺ[U *@/䄉Ů &(("%9FdڇqE҃v ŕ:AvMw!NUs`9bϜ+ף>[M2F>L(9g4]hOm  hNw)ӓr֖yQae.ޑMOl_fKa/X %+ YW=X5 תUF=-#!YmmUgyVVuy!8!dwn+E|` uc)_qzg}82N~fLx^Sn0<7_FJTwd026m)Q,5z4;;^Cfs,6pS[TK6;8ߚ`#ėB9PJ쉀'SJ,(dqCkM_KBk8J-BQۣ+>>Tvge_j &:ozČO'R-0YyA| X[w%/[ em(ؓQB?W@3m">MoKvԣc8;K ; L]Za2ٚ,fyD;Yb.#,rM[h`; 8.Ujxv_9Bş׽*/8?)F(GX?,B@S9vAfvx^MQn0<7_Aȑ,[(B]7m#E Ę"-7m5֌sJ =< gH{sX.1eЃCv1&G(ѱep-(EYGoeL~|mF8"R8{ egԶ{+ܪJmAH 7G`[VOm%,i<ƌ=;׫{hWzؚo/fQt{|{#lTo|v2Y2ޣ =B8IxHT*R)*q^bVT4#:PJLYy-$B=#B+wRBHzOsB,( g#C3$#F[P >?R(^kf@EwnRK.<^O&oUD-TpUNX3B@ex^Rn0 >O.diסF.n; n;-ѶY2D:A~MQ=:(t`8 ,=314CФ$,dc2t ZL3#(Yy414BTvY })!pZ)uz FV-  -(tc3ENN%pm|3[߭6ُu^vö15`* ojDk|QQh,kog s̞, >i>CF&J4He˨noL sU)j)R+ۼƯ eL"vNZ3 \2y䵂5 >RL ݺ`2cRg.dINz_cOi+/K%ϴ "h*k)v{i^\yb^7ZXoYRv8.ix^n0Dk+D"VcS* ,S.]>8M  \hbHA|fum/zBs6#$\>-κ we̶Ԯ~X|i‰^XYHR/I=7glh?nE٧uG{g\ U0M l)#O @/CҠ=UG$UBQ;ː]ӗPܮwP\~;y:fEx^}Sr0 <_7zŏVϝ634?QŘ"U/)IzX,Zp:3RfvPxy!@Qɂ70zZ@Pj8oAI`Mʃ BD`H;ԢGpSBq o@/2c[J=/6 p̫̋bP|-XpveZx9ԑn /鄹},Lm|{ 0$rvNy#2)]c#>$}9UIeMP=T4asfJ{pb@d&Tҿrvmcл1E^GbήƬE0\HT8&76쒥X9#QFOߥf<ϩIaqSa88 XVb˶AjYH n_ c8f7x^Sn0='_19lEEn=@S0"GdU#JZVyHg֏LT|ׅknoj|!#|V&+U15U;V[#H TM EѦ/5d1v(Bo/ϼzcUvca!=Z $M]G|:`&#A=10&~b"BOb(^XSؤ%8oJ2#P1jH+@&;dVv4i%0*k91 LCfqFep(Ona [=rqr,:+M'fa>3E``ѹZwu!dpN^7QZ]LY.+YYłS$yY^✴innq{qj+á((1ʶ*\uJ4r[eȹCa@>Z D|!h?sC], o:6U~w70'=&F>J;J;J;J;J;E!x^M05R~Ƹ'uPZ xząr[NfW0h XوpgـviGl;&jԌ %3Q$DÿIQ"$EM))b,& RMTF>CeYR^֐=iZ7Y|,e%yj c8dLxfx^uQK0ǟOqi"R D|ksۂi2rp~z/]rRzV4ܡƣ2[QUXMIVL\e/?e~Qك86x '/.F]9QS5QTBB%RqK&r*%dP–KS=Ȑ02xYҤmhDbڍ] &`i>3mKNNŽtU@M {3R&o5ػ]mg5CgoOn' 2oW_Ƚܬo^gjrZ9?;Ů[߁qp-+bo ?X\.jÁ Cfx^mSo0>ʤ【@UI6D55~i<sZ_goފD.>ڋYg}uAlr N;=;w&vaV2abu[OI4R 9QY/؃bo!e0P &ê΢4±bCMUtE*165v?4 H:aEw\U=q2Ōm >LS0%+$@pn﷤s|4H~zՀ^(KU@Ll%/N%hi#b즰y jD^9q%)sM'E S^tK cX,n%aVtBv{x[w-Co4Y3@'IoV[WWӵ?SR0%l;Z ‡#ux^b-XvM̪G珺:k|XC)su͝"rT4xНi8kpNebo]/Ձt vB]_Nx^]RMo0=7bS+-&e=VڽG 0*^$C@7(Fח]? Q_{f ߙӁ#j;/On  O!6P+O-Վ'ѝU,Oy!>:R]們a[dct)~1&"q?Ƣ78颀/xY|W~NO#by?Nzk ?_#Ձܼ : {RdF9 ֙Tնڪn-MVÀS"@bt(J230g^D`rV_CchQT4R3#s*N %Г Tg+~f[1>/z(4u!tIBAxd5yĨ-y,~/a s[jxP#UFl ¢Gu=aul[t`t囒c]'MjO@猻xUpwo0_1w[ 2Ϣ(ǯ=?!_'ݿ"xb1<@E[^[`P_M`D/{!m"V*}Mi4B0DZ*$z"I湫epܝFP!8)~Nf舔0yB6"8ҽӪ;ٌNl8OzNsK'0=Ntr@%K\^9'|"51lwwl*CJ5ErEnu)qe<[w%(6+ل\U~/-Y He`C~h-}a8<ԁ x~f"x^}n0 S9/IVt:`δLBmIt~Q[0,'>I'<]pcMU.4ixS|W~Te^Afot/$)Z&!RQV٩yz+tEmYfptӇaOI$b &)R - ڝ%0'h ~bx|k&!t-|bAcLjF(23%HfuoyU yJsCΜ!xBXDϼāJ_Suj<2Pf=\ ( fNy"g(m=dٝ5(ֻUV^8uaK2:!Dy  3kCFz3]z ۥ a:Pf Mns]R@<:jnK+r{U!y:U߯7{5ѵPV#uzuiNI[u X?!9l5_r7E <DN?RbpT8JcOx^mQMo0 =ifq4 CQ ;;5%:!jK%m%l:Qo{u3tgrx›w LN)ÊLYv: "ZALa8jgPI>z#h@| &&34Lh'pϏevm;t)6/ :?$z040D6EphRkd Ч:^UD0y&DSME&raxt(yԜj#ֻ}ݨ42燢}F]mUyKXbor.9"Ш>NyQMS|P'm]TUn2K]֥9n/{+nWl6vy'2mIflX`2iJ<vfzx^eAo0ɯK,$ z"%RsJk5ecl}mتѼ=(lWFș4^4SwB,sp9D7R(`#~W}+A:fֈth<)^1M0Gm_V:=l&+e=5b~8Gj*/5.Fش)#?~N&Ht@#siF8&/]}]" Rzrرw`#绨xLRT k2XHQi$N0b -itm\`7/ ֔N!- c-X>{&T:GY< 9jŝCwA%ΤjoC"f88Oo/uDLsfx>c9Fd(f%F!vtޒP7D/_~LtMvb}x^Mo0_1 |,ɦ(DBZMIbؑ?҆_l^;3F- 8Z#{#l@8 &=^v-.⿏FTKtRQ<.ҥʾ' m:2v8ǀ8jP{v34 F:kϯt[-ؠZ 甆NLGj醕U)}}؋xfLP+%yu>GՉ89Ҝ%#⟹]7gi9đW˫=sqnkF0KcEE) FUQ,v,M)Ғη-o&ɛ~0;n1K݄޼.h?'U'nmieόESS+T2u6Uv@FLfx^mQ]o0 |~ѧmeK3 h^6+-SEdq({k>7wX㇅-v`iv w&tztOoY:ߴMm : kPv94w<]duͭW?ge/*sHi8-}7<}UE1Cr74ET69Bg3(}PsU6"+ %.WNjDX먝+ŷihbdd1W| mpysB1^8ybk]9BRw8Lz8&9b:}s} N#=(/='mdF6Ir9p* ſ+O^MKRJw+'g!N`_UC$FV- (ǂ#" M?|T:_K@fuUJx^n ٧\ xmlj\WJӪE Y  ƻoͪQ F3zi zhel)A8O &aeGӊA- L.XrVȂv-F=qcR&K+8 Fu{R!ɶÊa[lp˹DOjLX{&~5헴(%}@4uar |}c6Xdt(狣JpF!# ђ.sA&*7a8uŮ}=\MoP_W޲+yrnٔݔL0Vl4}/֕zWIq!o^QK U/?^AK`ߨȸI=©|ž Qƥ)bG KEC !zTFZ{*bdO+AҬ )H\sQ. n01#]y9k. fE?&Rs{̋gRl]<[~ fx^Rr0<7_ɡ7#m[L:=t5#~$p}4cNҲZ=7,^J*а-mn>06Q3ZMͼ4d@kXOk&VgN1_ Gu^da H=FgP)(;_?Q+n弴8r+ݨ>A*p`D]iIK30""]MS_ZmWWЖI\G[Kkz,v4d(N7評|49XYH؇}⼕NEپfW5 l.bnbdK5g(rz@oǛrs>2W%"[:Q;ك;Z?(k0!HӎE}SPȺ΁~.jj!:=+לYexU9^Y~,fQkh/GpȥVcgJ,&X#DNRr?!N\c%fwx^RM0=o~(瀁dibaǪJUo `ű=ٶR+է|y ©DL^pW1Ly^vWowI7,,(ۭ,,u]M I`pjR:5K2mKr  ;W3 X[&TRѥ.CU.hi_\?UbsGm2Z&y3OBh٧#jȟ4ld&"rEY="utt=W|ȏ=Ξo( hfFy;V o=2vD^0Pd;*vf=8k3~ց0` 4dH(nSxf̣6LywFWtv5r}/>%>+~t`qvv*I"v?'=k򂲠!f uNc_&HNSx^MAO0 WX@"mu@ј$V]%n{ \b+z~~_CwCnl^g' Ǻ/GC譶!@$n#1K t,a,B G\mUϫfKL)7rz2W0Zs{4T7\U %WFNfVo;JA,^{IRUh5I%$~ {oƕPk |v:ÉCt ("&>sNbԡ3B\i؋]îOOӜKoDhע /V"?ϰ(*y1}c"#!GLxT1w}Qx^f2x^]Rn0=ob$"EU=զڞ=Kf߯IB{̛+V72XG% b8Ɵ_ ?5 &tPD,J>yy~N JZ[qT 꽲9lС8\Ul!\a1VH6ly^^iU}y{6a$lGvtJ~OxlbYg(-id8S# ƚ<7\JTBO@t; }DFM41fo]OXdIBꕂAԧ(Zp]m{!K^(8J^.$p<MN+<o˄wMAWթ>C?rXmEv0Gr[;OxW}kRW纯> jjEFI3|{z_@ٻ_)s-(]vs :>cy6]\FMWn`3J O#vwsv= s%? -ŀ }fx^Oo0B{h[8UiP@8nȱ' +8p!(SrW6REHd8Pإ4F&YE``Ye\4?njJ""~g$uw@!?-e0y}{}ԝ%Fx  kpbL)kRֳ˱T JDٱznӧ gDM %"2R'l[/\۲Vtwp,=Q;a& Bg8p_0uDgc"vEX~铓itO.wK)R#xJ|zqH6=ӏ_lpEG:];ks'fx^mMS0 Wh8qlَ (ʵuCHʿLIVG7n|LԴ/ `<_<,'ace%P3ki{n{xkFz ^ˈa:>n.p`0|,JUՂEfW$i|*֥<ڄdj` o@R?d4BȎ9(z3Q֨"$zeR= >sKKD7eVe_E#@:6&R01z?~8 NYK6~tZ2FБ.P{r*vZZT6v~{3 ʛ~"WQGpޖphE))M7{'0%l]jS|'7zEo9sdrݎ*XԎkbzqr@UQfux^e0ۧ6lQp3bᶚ8±<o‹aeA"qF2 ʝedrouջ~wh8 =F inr+Xhj>$(8v !ľWf-O+tKyp+S" mo}y6~] 0d .3o8Ri,Ns&m:jؖ;V֬lxC׾zHC~V4^u ԿEiQq1&d!S#q Yj읤RlIj4橐PSN: /,D2*.k-$s:%s1E*t.d⎀I.Lp]~zMTcyx]n\rۚ0wSc)*Q*E=㾿+݉ am[sRA&<>?FNBSq2 Oo[ހb|FPv@xQ> bSx^Ms0 _lNrꩇd-SPc+l>fC9IBzJ^ u4z -0Bv&%hTaIh[TqJ#a֗,5ZO?ȏ湔bS/OI'C{dA4a)'dƁSϚ^1`l;E#!أ ICqW&]9غqy}Psq "=fBl}tVe@3wc-j|ꇿϔ3ߌZ؉,go%tV180vNF j15(K^[ ~"zCI$+(hi_>:hep