From Report to Patch, the OpenBSD Errata Process
Summary
This article discusses the OpenBSD errata process, detailing how vulnerabilities are reported and patched in the OpenBSD operating system.
Similar Articles
An AI audit of FreeBSD
An AI-assisted security audit of FreeBSD uncovered 15 kernel vulnerabilities, including privilege escalations and a VM escape, and details the collaborative process of reporting and patching bugs with the FreeBSD team.
score by collisions, patch by panic
The article proposes a new severity model for vulnerability reporting based on collision counts and the presence of working exploits, arguing that the current disclosure model is broken and that patches should be prioritized when multiple researchers find the same bug or exploits are public.
Linux Compromises, Broken Embargoes, and the Shrinking Patch Window
A report on three serious Linux local privilege escalation vulnerabilities discovered in May 2026, highlighting breakdowns in the disclosure model and implications for production environments.
FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 1 of 2)
This article describes how researchers at Praetorian used Claude Opus (via Claude Code) to discover and exploit vulnerabilities in the FreeBSD kernel, including a stack overflow (CVE-2026-3038) that allows escape from FreeBSD jails. Part one focuses on methodology for finding bugs.
OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root (CVE-2026-57589)
A use-after-free vulnerability in OpenBSD through version 7.9 allows local attackers to escalate privileges to root. The flaw exists in sysv_sem.c and is identified as CVE-2026-57589.