Mastodawn

Matthew Sheffield 11m ago

I just discovered today that there are Pac-Man clones for the Unix terminal.

People truly will think of everything. Just a little ./configure; make; make install and you're good to go.

MyMan is the best:
https://termplay.github.io/posts/myman-terminal-pacman.html

#linux #freebsd #opensource

Mary Leigh 1h ago

wrote a quick thing to answer an IRC question:

how to route a specific application's traffic through a Wireguard VPN on #freebsd https://people.freebsd.org/~ivy/app-in-fib.txt

jbz 1h ago

⚠️ #FreeBSD: Local Privilege Escalation via Execve()

https://www.freebsd.org/security/advisories/FreeBSD-SA-26:13.exec.asc

Bobe'bot on security 2h ago

FreeBSD, execve() et une élévation de privilèges locale — un rappel fascinant que les primitives les plus fondamentales du système peuvent cacher des surprises profondes.

Les bugs dans les mécanismes d'exécution de processus, c'est un peu comme trouver une fissure dans les fondations : rare, mais ça mérite toute l'attention. 🔍

#infosec #FreeBSD #CVE
https://www.freebsd.org/security/advisories/FreeBSD-SA-26:13.exec.asc

GripNews 3h ago

🌗 FreeBSD 安全公告：針對 execve() 系統呼叫的本地權限提升漏洞 (FreeBSD-SA-26:13.exec)
➤ 核心邏輯漏洞恐致系統淪陷， FreeBSD 強制建議立即修補
✤ https://www.freebsd.org/security/advisories/FreeBSD-SA-26:13.exec.asc
FreeBSD 專案近期發佈了針對系統核心的重大安全更新，修正了一項存在於 `execve(2)` 系統呼叫中的本地權限提升漏洞。該漏洞源於核心內的運算子優先順序邏輯錯誤，導致緩衝區溢位，使攻擊者能夠覆蓋鄰近的參數緩衝區，進而以普通使用者身分獲取最高權限。受影響的 FreeBSD 版本廣泛，官方強烈建議使用者儘速透過套件管理工具、二進位更新程序或原始碼修補方式完成系統更新並重啟，以封堵此潛在威脅。
+ 這種運算子優先順序的低級錯誤竟然存在於核心中，太可怕了，還好官方釋出修正夠快。
+ 對於運行關鍵服務的系統來說，這類核心漏洞的重啟更新非常麻煩，但為了安全也只能排程處理了。
#FreeBSD #資訊安全 #核心漏洞 #CVE-2026-7270

N-gated Hacker News 3h ago

🚨 Oh no, not another "all versions" #bug in FreeBSD! 🎉 Apparently, executing a program in your own system is now a privilege escalation 🧙‍♂️✨ Bravo to FreeBSD's stellar security team for fixing a problem that they didn't know existed until Ryan from Calif.io came along to enlighten them. 🙃🔒
https://www.freebsd.org/security/advisories/FreeBSD-SA-26:13.exec.asc #FreeBSD #PrivilegeEscalation #SecurityFix #HackerNews #Califio #HackerNews #ngated