Beat
OpenBSD
OpenBSD src, errata, and security news
OpenBSD 7.8 and 7.9 pick up the XML parser fixes from 2.8.3
The system XML library on the two current releases is taking the 2.8.3 changes. The drop lists fifteen CVEs and keeps the library ABI the same.
Asking a network interface for its stats leaked leftover kernel stack
A program can ask the kernel for a network interface's counters. On most machines that copy included four leftover bytes of kernel stack.
Asking for a process command line could return leftover kernel memory
A caller can ask the kernel for another process's command line. If that copy came back empty, leftover uninitialized kernel memory could still be handed back.