Vulnerability in FreeBSDs memory management
reddit / BSD

----------------------------------------------------------------------
exscape · 2010-07-13 19:30

> The developers recommend that users update to the 7-STABLE or
8-STABLE **production versions**. The RELENG_8_1, RELENG_8_0,
RELENG_7_3, and RELENG_7_1 **developer versions** have since been
updated.

Uhh, what? -STABLE is a development tree, from which stable releases
are "cut". Stuff comes there from -CURRENT, the bleeding edge tree
("merge from current", MFC, usually a few days to weeks after being
entered into -CURRENT). The RELENG releases are, as the name suggests,
releases (RELENG_7_3 or in svn releng/7.3 is FreeBSD 7.3) that are
kept up-to-date with regard to security as long as that release is
supported.

... Am I missing something or is the above spot on?

----------------------------------------------------------------------
cjg_ · 2010-07-13 21:02

Spot on,
the advisory says

> Perform one of the following:
>
> 1) Upgrade your vulnerable system to 7-STABLE or 8-STABLE, or to the
RELENG_8_1, RELENG_8_0, RELENG_7_3, or RELENG_7_1 security branch
dated after the correction date.
>
> 2) To update your vulnerable system via a source code patch:
>     ...
> 3) To update your vulnerable system via a binary patch:
>     ...

http://security.freebsd.org/advisories/FreeBSD-SA-10:07.mbuf.asc