Messages

We may list CVEs for other vendors, but only if no better reference exists. The FreeBSD advisory is clearly better than the CVE information. It's not even public yet:

All I'm asking is for you to even just mention the CVE number in the release notes; it makes it much easier to verify with certainty that a specific issue is patched in a release. Like so:

src: arbitrary file overwrite via the KTLS receive path (CVE-2026-45257, FreeBSD-SA-26:26.ktls)[8]

26.1.10 is being released later this afternoon.

Hi Franco,

CVE-2026-45257 is not mentioned anywhere in the release notes for 26.1.10, nor in the numbered footnotes 1 through 24 inclusive.

Can you please confirm that the patch made it into 26.1.10? If so, why is it not mentioned?

Thanks in advance!

----

EDIT to add: It seems to be referred to using its FreeBSD advisory in footnote 8, but not the CVE. IMHO the CVE should ALWAYS be included in the patch notes in addition to vendor-specific references!

Code Select Expand


-----BEGIN PRIVATE KEY-----
MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQC4KZ76AUrcCCTl
[---8<---]
g5wIHmFhEye+z7hW2BRr/2pVe3Sy7g==
-----END PRIVATE KEY-----


Please don't do that. Someone will turn around and copy-paste it and use it. :(

I second this -- including the software probe as a package in OPNsense would surely help the RIPE Atlas project greatly.

@franco If you were to reach out to RIPE (atlas at ripe net) they might be willing to sponsor the work required.

https://atlas.ripe.net/docs/howtos/software-probes.html

Hello,

On OPNsense 22.7.7_1:

Code Select Expand

opnsense-code ports
cd /usr/ports/devel/pcsc-lite
make install

This works, and drops the expected file at /usr/local/etc/rc.d/pcscd.

However, despite the following:

Code Select Expand

# Add the following lines to /etc/rc.conf.local or /etc/rc.conf
# to enable this service:
#
# pcscd_enable="YES"

Adding a tunable pcscd_enable with value YES is not starting the daemon at boot, even though it starts (and works) if I execute pcscd at the command line.

Any guidance would be most appreciated.

Thanks in advance!