From nobody Mon Jul 15 20:33:01 2024 X-Original-To: freebsd-stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WNDRc2mQ0z5Rc4J for ; Mon, 15 Jul 2024 20:33:16 +0000 (UTC) (envelope-from asomers@gmail.com) Received: from mail-vk1-f170.google.com (mail-vk1-f170.google.com [209.85.221.170]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4WNDRb43l8z4h3D for ; Mon, 15 Jul 2024 20:33:15 +0000 (UTC) (envelope-from asomers@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=freebsd.org (policy=none); spf=pass (mx1.freebsd.org: domain of asomers@gmail.com designates 209.85.221.170 as permitted sender) smtp.mailfrom=asomers@gmail.com Received: by mail-vk1-f170.google.com with SMTP id 71dfb90a1353d-4ef33a09a3aso1368163e0c.2 for ; Mon, 15 Jul 2024 13:33:15 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1721075594; x=1721680394; h=content-transfer-encoding:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=HMU1jzpan0yDgLu85agcsyIoaYyP4GANMnGtGKKB2vI=; b=wQe8v2TM9xqBoNg7rPCijUXorNgLD+pZvx8sO7xonQblyOKzjuGVj1VwBLTnH74zqZ wmoXfD6tdE84GazidPxULZULTxmDNxUNVy34qCosuCw6Nk4Bg8gI7x8dVJmsw5e7s07E 6wKcAm3hL9aNL+ED9XuIWt0ZXhiMyjMx9kk6K61T9cPrm6O/hHO1kfPZI1NIC1H29vDp /09b3KIBHdRknbPoW0K8sDdHGF3nZroPq+2mVTIT2L6vQkKrKexLR7U066xJu3x4Hzz9 Iu4rrQHl3oQlDdOkd6CCFa7RkFMkm40Er62VleJJd/qb9UCyFWWzd2sUdyORKiezbEJz 9FsA== X-Gm-Message-State: AOJu0Yx+/6/0EPxhw8E9vHPImPPsDfSfuHtWv/mGt7qOka9xneyOjdD+ vQ62oqwQTerW2n9ttWf18Ye9ivEOPL+8sZF+m/H/zM8tdI2KLK8sNVMhPqzRPAG1iKl/dPBB24q PtekrhCSH6jVrFyp7h7LhEqXKGiIZLw== X-Google-Smtp-Source: AGHT+IEYrakYgdr9p3PDGl1Qis6XByyniz+j2xpVrzbmrlhhhZVsFuQGpEUd8cKIX2sF4L1Ocij9aMrk68h22KAVR0g= X-Received: by 2002:a05:6122:3124:b0:4d4:21cc:5f4f with SMTP id 71dfb90a1353d-4f4d08636femr103955e0c.11.1721075593749; Mon, 15 Jul 2024 13:33:13 -0700 (PDT) List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-stable@freebsd.org Sender: owner-freebsd-stable@FreeBSD.org MIME-Version: 1.0 References: <20231205221600.4AC2514E38@freefall.freebsd.org> In-Reply-To: <20231205221600.4AC2514E38@freefall.freebsd.org> From: Alan Somers Date: Mon, 15 Jul 2024 14:33:01 -0600 Message-ID: Subject: Re: FreeBSD Errata Notice FreeBSD-EN-23:21.tty To: freebsd-stable@freebsd.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spamd-Bar: -- X-Spamd-Result: default: False [-2.63 / 15.00]; NEURAL_HAM_LONG(-1.00)[-0.998]; NEURAL_HAM_MEDIUM(-0.96)[-0.957]; NEURAL_HAM_SHORT(-0.77)[-0.773]; FORGED_SENDER(0.30)[asomers@freebsd.org,asomers@gmail.com]; R_SPF_ALLOW(-0.20)[+ip4:209.85.128.0/17:c]; MIME_GOOD(-0.10)[text/plain]; DMARC_POLICY_SOFTFAIL(0.10)[freebsd.org : SPF not aligned (relaxed), No valid DKIM,none]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; MISSING_XM_UA(0.00)[]; MIME_TRACE(0.00)[0:+]; ARC_NA(0.00)[]; RCVD_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US]; FREEMAIL_ENVFROM(0.00)[gmail.com]; PREVIOUSLY_DELIVERED(0.00)[freebsd-stable@freebsd.org]; TO_DN_NONE(0.00)[]; FROM_NEQ_ENVFROM(0.00)[asomers@freebsd.org,asomers@gmail.com]; FREEFALL_USER(0.00)[asomers]; MLMMJ_DEST(0.00)[freebsd-stable@freebsd.org]; TO_DOM_EQ_FROM_DOM(0.00)[]; R_DKIM_NA(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[209.85.221.170:from]; RCVD_IN_DNSWL_NONE(0.00)[209.85.221.170:from] X-Rspamd-Queue-Id: 4WNDRb43l8z4h3D What exactly does the "Announced: 2023-11-24" date refer to? It isn't the date that the patch got applied to the main or stable branch, nor the date that the email alert was sent out, nor the date that anything changed in Bugzilla. On Tue, Dec 5, 2023 at 3:23=E2=80=AFPM FreeBSD Errata Notices wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D > FreeBSD-EN-23:21.tty Errata No= tice > The FreeBSD Pro= ject > > Topic: tty(4) IUTF8 causes a kernel panic > > Category: core > Module: tty > Announced: 2023-11-24 > Affects: FreeBSD 14.0 > Corrected: 2023-11-20 16:54:54 UTC (stable/14, 14.0-STABLE) > 2023-12-05 18:27:38 UTC (releng/14.0, 14.0-RELEASE-p2) > 2023-11-20 16:57:49 UTC (stable/13, 13.2-STABLE) > > For general information regarding FreeBSD Errata Notices and Security > Advisories, including descriptions of the fields above, security > branches, and the following sections, please visit > . > > Note: This issue does not affect 13.2-RELEASE, as the bug was introduced = into > the stable/13 branch after the 13.2 release. > > I. Background > > The IUTF8 flag was added to the tty(4) subsystem in order to add proper > backspace handling for UTF-8 characters. Without this flag, tty(4) treat= s > all characters as single-byte-wide characters and so, in the case of a UT= F-8 > character two bytes in size or larger, tty(4) deletes only one byte durin= g a > backspace event, instead of all bytes, which results in the tty buffer > containing garbage. > > II. Problem Description > > The implementation of backspace handling failed to check whether the TTY > buffer was empty, in which case the kernel could panic. > > III. Impact > > An unprivileged user may be able to trigger a kernel panic. > > IV. Workaround > > No workaround is available. > > V. Solution > > Upgrade your system to a supported FreeBSD stable or release / security b= ranch > (releng) dated after the correction date, and reboot. > > Perform one of the following: > > 1) To update your system via a binary patch: > > Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platfo= rms, > or the i386 platfrom on FreeBSD 13 and earlier, can be updated via > the freebsd-update(8) utility: > > # freebsd-update fetch > # freebsd-update install > # shutdown -r +10min "Rebooting for a security update" > > 2) To update your system via a source code patch: > > The following patches have been verified to apply to the applicable > FreeBSD release branches. > > a) Download the relevant patch from the location below, and verify the > detached PGP signature using your PGP utility. > > # fetch https://security.FreeBSD.org/patches/EN-23:21/tty.patch > # fetch https://security.FreeBSD.org/patches/EN-23:21/tty.patch.asc > # gpg --verify tty.patch.asc > > b) Apply the patch. Execute the following commands as root: > > # cd /usr/src > # patch < /path/to/patch > > c) Recompile your kernel as described in > and reboot the > system. > > VI. Correction details > > This issue is corrected as of the corresponding Git commit hash or Subver= sion > revision number in the following stable and release branches: > > Branch/path Hash Revision > - -----------------------------------------------------------------------= -- > stable/14/ ae8387cc818a stable/14-n265760 > releng/14.0/ 31f6cfca851f releng/14.0-n265392 > stable/13/ 8647fe60b8c3 stable/13-n256709 > - -----------------------------------------------------------------------= -- > > Run the following command to see which files were modified by a > particular commit: > > # git show --stat > > Or visit the following URL, replacing NNNNNN with the hash: > > > > To determine the commit count in a working tree (for comparison against > nNNNNNN in the table above), run: > > # git rev-list --count --first-parent HEAD > > VII. References > > > > The latest revision of this advisory is available at > > -----BEGIN PGP SIGNATURE----- > > iQIzBAEBCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmVvmWcACgkQbljekB8A > Gu+WfxAA4+u5wXTSy1UcpO17JzFuo0JjhQUcOEh3uWRCPdgpokEkv7xnjJQz8W3u > 0c1GtigtKLOvJx6gF4ilFQhVbxtFNj5a73ODPqcy0K0x7YPw/5Rbrl+jk7389NXT > A5H7kT7bscF6x9D7YfAkA2/JSgSS3opx6KJhOP8x8DvNuNpl/v2ja1LAcIVjytu6 > YYBz/GaODjX4iOw8dYzQetmbeEOiKZX660Eq5Sm2UySRz/BpJpT3y1Ncl84dWC+H > otBihg1iezD5Ju4TIbGz6/N2oSf6mEQ2jx+ahNPGHj/A4fUeBajZWJZrge4Birii > c45EIcPUzyt8Q4Xjcn4qCKJ3MHGCR65/39oK5DbOXD62t3l/vbLSbHToYjeJWyTN > Fl/hOtVSrF7Om0qhlrNOfS2jXIcTQDBQJ/vgjC+m+FTDtnyiSSAZfYXQz4Ckkqfw > KMPc3N9YI7aoifyTQxj508WN1dma7eRwyupLabwfOij03vmN/4tAI89v6EEefhpM > wTUPTgebQWgHJjjUi7Mo8EXSzWxtPbdt2UX8XtVw3EpjQOqqc0vv+VJxkCAdMdDO > fE8614WWcHppswXi7dlWgKUcMEEdtZ48+QjM1h+fA8DeNk6FSLBJXLUQnll1QPEW > VDj9oKnoXquQyuxWB8MwbiUfrLlAhAXhfC8nG+Ci75sts0E4jQE=3D > =3Dwp8X > -----END PGP SIGNATURE----- >