From nobody Wed Feb 14 08:55:23 2024
X-Original-To: freebsd-security@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4TZX8h6ds0z5BS92
	for <freebsd-security@mlmmj.nyi.freebsd.org>; Wed, 14 Feb 2024 08:55:32 +0000 (UTC)
	(envelope-from ml@netfence.it)
Received: from soth.netfence.it (mailserver.netfence.it [78.134.96.152])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
	 client-signature RSA-PSS (2048 bits) client-digest SHA256)
	(Client CN "mailserver.netfence.it", Issuer "R3" (verified OK))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4TZX8h39WLz47Bg
	for <freebsd-security@freebsd.org>; Wed, 14 Feb 2024 08:55:32 +0000 (UTC)
	(envelope-from ml@netfence.it)
Authentication-Results: mx1.freebsd.org;
	none
Received: from [10.1.2.18] (alamar.local.netfence.it [10.1.2.18])
	(authenticated bits=0)
	by soth.netfence.it (8.17.2/8.17.1) with ESMTPSA id 41E8tNaU094792
	(version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NO)
	for <freebsd-security@freebsd.org>; Wed, 14 Feb 2024 09:55:24 +0100 (CET)
	(envelope-from ml@netfence.it)
X-Authentication-Warning: soth.netfence.it: Host alamar.local.netfence.it [10.1.2.18] claimed to be [10.1.2.18]
Message-ID: <40f75ef7-78d6-481e-967f-c5f258830596@netfence.it>
Date: Wed, 14 Feb 2024 09:55:23 +0100
List-Id: Security issues <freebsd-security.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-security
List-Help: <mailto:freebsd-security+help@freebsd.org>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Subscribe: <mailto:freebsd-security+subscribe@freebsd.org>
List-Unsubscribe: <mailto:freebsd-security+unsubscribe@freebsd.org>
Sender: owner-freebsd-security@freebsd.org
X-BeenThere: freebsd-security@freebsd.org
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-24:02.tty
Content-Language: en-US
To: freebsd-security@freebsd.org
References: <20240214070711.3259126676@freefall.freebsd.org>
From: Andrea Venturoli <ml@netfence.it>
In-Reply-To: <20240214070711.3259126676@freefall.freebsd.org>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:35612, ipnet:78.134.0.0/17, country:IT]
X-Rspamd-Queue-Id: 4TZX8h39WLz47Bg
X-Spamd-Bar: ----
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated

On 2/14/24 08:07, FreeBSD Security Advisories wrote:
> =============================================================================
> FreeBSD-SA-24:02.tty                                        Security Advisory
>                                                            The FreeBSD Project
> 
> Topic:          jail(2) information leak
> 
> Category:       core
> Module:         jail
> Announced:      2024-02-14
> Credits:        Pawel Jakub Dawidek
> Affects:        All supported versions of FreeBSD.
> Corrected:      2024-02-12 16:25:54 UTC (stable/14, 14.0-STABLE)
>                  2024-02-14 06:05:46 UTC (releng/14.0, 14.0-RELEASE-p5)
>                  2024-02-12 16:27:37 UTC (stable/13, 13.2-STABLE)
>                  2024-02-14 06:06:01 UTC (releng/13.2, 13.2-RELEASE-p10)
> CVE Name:       CVE-2024-25941

Hello.

Sorry for my dumbness, but I fail to understand the severity of this 
problem.
Is it like drop-everything-and-patch-yesterday or 
take-it-easy-and-do-it-when-you-can?

How could the extracted info (tty list) be used?

  bye & Thanks
	av.