diff --git a/website/content/en/where.adoc b/website/content/en/where.adoc index 9d01f4ca38..0fbb9612ca 100644 --- a/website/content/en/where.adoc +++ b/website/content/en/where.adoc @@ -1,292 +1,292 @@ --- title: "Get FreeBSD" sidenav: download --- :url-rel: https://download.FreeBSD.org/releases :url-snapshot: https://download.freebsd.org/snapshots include::shared/releases.adoc[] include::shared/en/urls.adoc[] = Get FreeBSD For general information about past, present and future releases, see link:../releases/[Release Information]. [[choose-version]] [[choose-arch]] == Choosing an Architecture Most users of FreeBSD will have hardware for **amd64** or **aarch64**. These architectures are well-supported. Most modern PCs, including those with Intel(R) processors, use **amd64**. Embedded devices and single-board computers (SBCs) such as the Raspberry Pi 3 and 4, ESPRESSObin, as well as many Allwinner and Rockchip boards, use **aarch64**. For all other architectures, please see the link:../platforms/#_supported_platforms[table of supported platforms]. [[choose-image]] == Choosing an Image For the FreeBSD installer: formats include DVD (disc1, dvd1), and network install (bootonly) sized ISO, plus regular and mini USB memory sticks. For virtual machines: virtual disk images have FreeBSD preinstalled. For embedded platforms: SD card images are available. [[download]] == Production Quality `RELEASE` versions of FreeBSD are the end result of _release engineering_ and are recommended for most users. [[download-rel141]] === FreeBSD {rel141-current}-RELEASE [.tblbasic] [.tblDownload] [width="100%",cols="25%,25%,25%,25%",options="header",] |=== |Installer |VM |SD Card |Documentation a| * link:{url-rel}/amd64/amd64/ISO-IMAGES/{rel141-current}/[amd64] * link:{url-rel}/i386/i386/ISO-IMAGES/{rel141-current}/[i386] * link:{url-rel}/powerpc/powerpc/ISO-IMAGES/{rel141-current}/[powerpc] * link:{url-rel}/powerpc/powerpc64/ISO-IMAGES/{rel141-current}/[powerpc64] * link:{url-rel}/powerpc/powerpc64le/ISO-IMAGES/{rel141-current}/[powerpc64le] * link:{url-rel}/powerpc/powerpcspe/ISO-IMAGES/{rel141-current}/[powerpcspe] * link:{url-rel}/arm/armv7/ISO-IMAGES/{rel141-current}/[armv7] * link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel141-current}/[aarch64] * link:{url-rel}/riscv/riscv64/ISO-IMAGES/{rel141-current}/[riscv64] a| * link:{url-rel}/VM-IMAGES/README.txt[README] * link:{url-rel}/VM-IMAGES/{rel141-current}-RELEASE/amd64/Latest/[amd64] * link:{url-rel}/VM-IMAGES/{rel141-current}-RELEASE/i386/Latest/[i386] * link:{url-rel}/VM-IMAGES/{rel141-current}-RELEASE/aarch64/Latest/[aarch64] * link:{url-rel}/VM-IMAGES/{rel141-current}-RELEASE/riscv64/Latest/[riscv64] * link:{url-rel}/CI-IMAGES/{rel141-current}-RELEASE/amd64/Latest/[amd64] (BASIC-CI) a| * aarch64 * {blank} ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel141-current}/[PINE64] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel141-current}/[PINE64-LTS] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel141-current}/[ROCK64] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel141-current}/[ROCKPRO64] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel141-current}/[RPI] (3/4) * armv7 * {blank} ** link:{url-rel}/arm/armv7/ISO-IMAGES/{rel141-current}/[GENERICSD] * riscv64 * {blank} ** link:{url-rel}/riscv/riscv64/ISO-IMAGES/{rel141-current}/[GENERICSD] a| * {blank} * link:../releases/#current[Released]: {rel141-current-date} * link:{u-rel141-notes}[Release Notes] * link:{u-rel141-readme}[Readme] * link:{u-rel141-hardware}[Hardware Compatibility List] * link:{u-rel141-installation}[Installation Instructions] * link:{u-rel141-errata}[Errata] * link:{u-rel141-signatures}[Signed Checksums] |=== == Production Quality (legacy) Some FreeBSD `RELEASEs` are supported but are older or built from older `STABLE` branches; these are considered "legacy" and are probably only of interest to people maintaining existing systems on FreeBSD. [[download-rel134]] === FreeBSD {rel134-current}-RELEASE [.tblbasic] [.tblDownload] [width="100%",cols="25%,25%,25%,25%",options="header",] |=== |Installer |VM |SD Card |Documentation a| * link:{url-rel}/amd64/amd64/ISO-IMAGES/{rel134-current}/[amd64] * link:{url-rel}/i386/i386/ISO-IMAGES/{rel134-current}/[i386] * link:{url-rel}/powerpc/powerpc/ISO-IMAGES/{rel134-current}/[powerpc] * link:{url-rel}/powerpc/powerpc64/ISO-IMAGES/{rel134-current}/[powerpc64] * link:{url-rel}/powerpc/powerpc64le/ISO-IMAGES/{rel134-current}/[powerpc64le] * link:{url-rel}/powerpc/powerpcspe/ISO-IMAGES/{rel134-current}/[powerpcspe] * link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel134-current}/[aarch64] * link:{url-rel}/riscv/riscv64/ISO-IMAGES/{rel134-current}/[riscv64] a| * link:{url-rel}/VM-IMAGES/README.txt[README] * link:{url-rel}/VM-IMAGES/{rel134-current}-RELEASE/amd64/Latest/[amd64] * link:{url-rel}/VM-IMAGES/{rel134-current}-RELEASE/i386/Latest/[i386] * link:{url-rel}/VM-IMAGES/{rel134-current}-RELEASE/aarch64/Latest/[aarch64] * link:{url-rel}/VM-IMAGES/{rel134-current}-RELEASE/riscv64/Latest/[riscv64] * link:{url-rel}/CI-IMAGES/{rel134-current}-RELEASE/amd64/Latest/[amd64] (BASIC-CI) * link:{url-rel}/CI-IMAGES/{rel134-current}-RELEASE/aarch64/Latest/[aarch64] (BASIC-CI) a| * aarch64 * {blank} ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel134-current}/[PINE64] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel134-current}/[PINE64-LTS] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel134-current}/[PINEBOOK] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel134-current}/[ROCK64] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel134-current}/[ROCKPRO64] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel134-current}/[RPI] (3/4) * armv6/armv7 * {blank} ** link:{url-rel}/arm/armv7/ISO-IMAGES/{rel134-current}/[GENERICSD] ** link:{url-rel}/arm/armv6/ISO-IMAGES/{rel134-current}/[RPI-B] * riscv64 * {blank} ** link:{url-rel}/riscv/riscv64/ISO-IMAGES/{rel134-current}/[GENERICSD] a| * link:../releases/#current[Released]: {rel134-current-date} * link:{u-rel134-notes}[Release Notes] * link:{u-rel134-readme}[Readme] * link:{u-rel134-hardware}[Hardware Compatibility List] * link:{u-rel134-installation}[Installation Instructions] * link:{u-rel134-errata}[Errata] * link:{u-rel134-signatures}[Signed Checksums] |=== [[download-rel133]] === FreeBSD {rel133-current}-RELEASE [.tblbasic] [.tblDownload] [width="100%",cols="25%,25%,25%,25%",options="header",] |=== |Installer |VM |SD Card |Documentation a| * link:{url-rel}/amd64/amd64/ISO-IMAGES/{rel133-current}/[amd64] * link:{url-rel}/i386/i386/ISO-IMAGES/{rel133-current}/[i386] * link:{url-rel}/powerpc/powerpc/ISO-IMAGES/{rel133-current}/[powerpc] * link:{url-rel}/powerpc/powerpc64/ISO-IMAGES/{rel133-current}/[powerpc64] * link:{url-rel}/powerpc/powerpc64le/ISO-IMAGES/{rel133-current}/[powerpc64le] * link:{url-rel}/powerpc/powerpcspe/ISO-IMAGES/{rel133-current}/[powerpcspe] * link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel133-current}/[aarch64] * link:{url-rel}/riscv/riscv64/ISO-IMAGES/{rel133-current}/[riscv64] a| * link:{url-rel}/VM-IMAGES/README.txt[README] * link:{url-rel}/VM-IMAGES/{rel133-current}-RELEASE/amd64/Latest/[amd64] * link:{url-rel}/VM-IMAGES/{rel133-current}-RELEASE/i386/Latest/[i386] * link:{url-rel}/VM-IMAGES/{rel133-current}-RELEASE/aarch64/Latest/[aarch64] * link:{url-rel}/VM-IMAGES/{rel133-current}-RELEASE/riscv64/Latest/[riscv64] * link:{url-rel}/CI-IMAGES/{rel133-current}-RELEASE/amd64/Latest/[amd64] (BASIC-CI) a| * aarch64 * {blank} ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel133-current}/[PINE64] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel133-current}/[PINE64-LTS] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel133-current}/[PINEBOOK] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel133-current}/[ROCK64] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel133-current}/[ROCKPRO64] ** link:{url-rel}/arm64/aarch64/ISO-IMAGES/{rel133-current}/[RPI] (3/4) * armv6/armv7 * {blank} ** link:{url-rel}/arm/armv7/ISO-IMAGES/{rel133-current}/[GENERICSD] ** link:{url-rel}/arm/armv6/ISO-IMAGES/{rel133-current}/[RPI-B] * riscv64 * {blank} ** link:{url-rel}/riscv/riscv64/ISO-IMAGES/{rel133-current}/[GENERICSD] a| * link:../releases/#current[Released]: {rel133-current-date} * link:{u-rel133-notes}[Release Notes] * link:{u-rel133-readme}[Readme] * link:{u-rel133-hardware}[Hardware Compatibility List] * link:{u-rel133-installation}[Installation Instructions] * link:{u-rel133-errata}[Errata] * link:{u-rel133-signatures}[Signed Checksums] |=== [[helptest]] == Development and Testing Pre-`RELEASE` versions of FreeBSD, not intended for use in production environments: * `CURRENT` – the main branch, the core of development * `STABLE` – branched from `CURRENT`, long-term preparations for release engineering * release engineering – `ALPHA`, `BETA`, release candidates (`RC`) – branched from `STABLE`. Uppercase has special meaning. For example: * a first _beta release_ is not a (production) `RELEASE`. The word `CURRENT` is sometimes a source of confusion: * if you are looking for the _current version_ of FreeBSD, you most likely want a `RELEASE` version (see above) – **not** `CURRENT` – `CURRENT` has special meaning in the development process. [[download-snapshots]] === Development Snapshots See link:../snapshots/[FreeBSD Snapshot Releases]. === FreeBSD {rel-head}-CURRENT Installer and SD card images are available for link:{url-snapshot}/amd64/amd64/ISO-IMAGES/{rel-head}/[amd64], link:{url-snapshot}/i386/i386/ISO-IMAGES/{rel-head}/[i386], link:{url-snapshot}/powerpc/powerpc/ISO-IMAGES/{rel-head}/[powerpc], link:{url-snapshot}/powerpc/powerpc64/ISO-IMAGES/{rel-head}/[powerpc64], link:{url-snapshot}/powerpc/powerpc64le/ISO-IMAGES/{rel-head}/[powerpc64le], link:{url-snapshot}/powerpc/powerpcspe/ISO-IMAGES/{rel-head}/[powerpcspe], link:{url-snapshot}/arm/armv7/ISO-IMAGES/{rel-head}/[armv7], link:{url-snapshot}/arm64/aarch64/ISO-IMAGES/{rel-head}/[aarch64], and link:{url-snapshot}/riscv/riscv64/ISO-IMAGES/{rel-head}/[riscv64]. VM images are available for link:{url-snapshot}/VM-IMAGES/{rel-head}-CURRENT/amd64/Latest/[amd64], link:{url-snapshot}/VM-IMAGES/{rel-head}-CURRENT/i386/Latest/[i386], link:{url-snapshot}/VM-IMAGES/{rel-head}-CURRENT/aarch64/Latest/[aarch64], and link:{url-snapshot}/VM-IMAGES/{rel-head}-CURRENT/riscv64/Latest/[riscv64]. -=== FreeBSD {rel141-current}-STABLE +=== FreeBSD {rel142-current}-STABLE -Installer and SD card images are available for link:{url-snapshot}/amd64/amd64/ISO-IMAGES/{rel141-current}/[amd64], link:{url-snapshot}/i386/i386/ISO-IMAGES/{rel141-current}/[i386], link:{url-snapshot}/powerpc/powerpc/ISO-IMAGES/{rel141-current}/[powerpc], link:{url-snapshot}/powerpc/powerpc64/ISO-IMAGES/{rel141-current}/[powerpc64], link:{url-snapshot}/powerpc/powerpc64le/ISO-IMAGES/{rel141-current}/[powerpc64le], link:{url-snapshot}/powerpc/powerpcspe/ISO-IMAGES/{rel141-current}/[powerpcspe], link:{url-snapshot}/arm/armv7/ISO-IMAGES/{rel141-current}/[armv7], link:{url-snapshot}/arm64/aarch64/ISO-IMAGES/{rel141-current}/[aarch64], and link:{url-snapshot}/riscv/riscv64/ISO-IMAGES/{rel141-current}/[riscv64]. +Installer and SD card images are available for link:{url-snapshot}/amd64/amd64/ISO-IMAGES/{rel142-current}/[amd64], link:{url-snapshot}/i386/i386/ISO-IMAGES/{rel142-current}/[i386], link:{url-snapshot}/powerpc/powerpc/ISO-IMAGES/{rel142-current}/[powerpc], link:{url-snapshot}/powerpc/powerpc64/ISO-IMAGES/{rel142-current}/[powerpc64], link:{url-snapshot}/powerpc/powerpc64le/ISO-IMAGES/{rel142-current}/[powerpc64le], link:{url-snapshot}/powerpc/powerpcspe/ISO-IMAGES/{rel142-current}/[powerpcspe], link:{url-snapshot}/arm/armv7/ISO-IMAGES/{rel142-current}/[armv7], link:{url-snapshot}/arm64/aarch64/ISO-IMAGES/{rel142-current}/[aarch64], and link:{url-snapshot}/riscv/riscv64/ISO-IMAGES/{rel142-current}/[riscv64]. -VM images are available for link:{url-snapshot}/VM-IMAGES/{rel141-current}-STABLE/amd64/Latest/[amd64], link:{url-snapshot}/VM-IMAGES/{rel141-current}-STABLE/i386/Latest/[i386], link:{url-snapshot}/VM-IMAGES/{rel141-current}-STABLE/aarch64/Latest/[aarch64], and link:{url-snapshot}/VM-IMAGES/{rel141-current}-STABLE/riscv64/Latest/[riscv64]. +VM images are available for link:{url-snapshot}/VM-IMAGES/{rel142-current}-STABLE/amd64/Latest/[amd64], link:{url-snapshot}/VM-IMAGES/{rel142-current}-STABLE/i386/Latest/[i386], link:{url-snapshot}/VM-IMAGES/{rel142-current}-STABLE/aarch64/Latest/[aarch64], and link:{url-snapshot}/VM-IMAGES/{rel142-current}-STABLE/riscv64/Latest/[riscv64]. === FreeBSD {rel134-current}-STABLE Installer and SD card images are available for link:{url-snapshot}/amd64/amd64/ISO-IMAGES/{rel134-current}/[amd64], link:{url-snapshot}/i386/i386/ISO-IMAGES/{rel134-current}/[i386], link:{url-snapshot}/powerpc/powerpc/ISO-IMAGES/{rel134-current}/[powerpc], link:{url-snapshot}/powerpc/powerpc64/ISO-IMAGES/{rel134-current}/[powerpc64], link:{url-snapshot}/powerpc/powerpc64le/ISO-IMAGES/{rel134-current}/[powerpc64le], link:{url-snapshot}/powerpc/powerpcspe/ISO-IMAGES/{rel134-current}/[powerpcspe], link:{url-snapshot}/arm/armv6/ISO-IMAGES/{rel134-current}/[armv6], link:{url-snapshot}/arm/armv7/ISO-IMAGES/{rel134-current}/[armv7], link:{url-snapshot}/arm64/aarch64/ISO-IMAGES/{rel134-current}/[aarch64], and link:{url-snapshot}/riscv/riscv64/ISO-IMAGES/{rel134-current}/[riscv64]. VM images are available for link:{url-snapshot}/VM-IMAGES/{rel134-current}-STABLE/amd64/Latest/[amd64], link:{url-snapshot}/VM-IMAGES/{rel134-current}-STABLE/i386/Latest/[i386], link:{url-snapshot}/VM-IMAGES/{rel134-current}-STABLE/aarch64/Latest/[aarch64], and link:{url-snapshot}/VM-IMAGES/{rel134-current}-STABLE/riscv64/Latest/[riscv64]. [[install]] == Installation Options include: * images * direct download (anonymous FTP, and HTTPS). Before downloading an entire distribution, please read the link:{handbook}bsdinstall/[installation guide]. If you plan to get FreeBSD via FTP or HTTPS, check the FreeBSD Handbook for link:{handbook}mirrors/#mirrors[suitable mirrors] for your region. [[distribution]] == Purchase FreeBSD Media FreeBSD can be acquired on DVD from https://www.freebsdmall.com/[FreeBSD Mall], and other link:{handbook}mirrors/#mirrors-disc[DVD publishers]. [[apps]] == Applications and Utility Software === The Ports Collection A diverse collection of utility and application software that has been _ported_ to FreeBSD. * link:../ports/[About FreeBSD Ports] * https://www.freshports.org/[FreshPorts - a more advanced web interface to the Collection] * link:{handbook}ports/[Installing Applications: Packages and Ports] in the FreeBSD Handbook * Browse the Collection: https://cgit.freebsd.org/ports/tree/[FreeBSD ports Git repository] | https://download.freebsd.org/ports/[web]. For information about how _you_ can contribute _your_ favorite piece of software to the Collection, have a look at _link:{porters-handbook}[The Porter's Handbook]_ and _link:{contributing}[Contributing to FreeBSD]_. [[derived]] == FreeBSD-derived Operating System Distributions FreeBSD is widely used as a building block for other commercial and open-source operating systems. The projects below are of particular interest. * https://www.truenas.com/[TrueNAS] is network attached storage (NAS) software that shares and protects data from modern-day threats like ransomware and malware. TrueNAS makes it easy for users and client devices to access shared data through virtually any sharing protocol. * https://www.ghostbsd.org[GhostBSD] is derived from FreeBSD, and uses the GTK environment to provide a beautiful look and a comfortable experience on a modern BSD platform offering a natural and native UNIX(R)-like work environment. * https://www.midnightbsd.org[MidnightBSD] was forked from FreeBSD 6.1 beta, and continues to use parts of more recent FreeBSD code bases. Developed with desktop users in mind, MidnightBSD includes everything that you would expect for your daily tasks: mail, web browsing, word processing, gaming, and much more. * https://www.nomadbsd.org[NomadBSD] is a persistent live system for USB flash drives, based on FreeBSD. Together with automatic hardware detection and setup, it is configured to be used as a desktop system that works out of the box, but can also be used for data recovery, for educational purposes, or to test FreeBSD hardware compatibility. * https://www.pfsense.org/[pfSense] is a FreeBSD-based customized distribution tailored for use as a firewall and router. [[past]] == Archives http://ftp-archive.FreeBSD.org/pub/FreeBSD-Archive/old-releases/[Past releases] of FreeBSD. diff --git a/website/static/security/advisory-template.txt b/website/static/security/advisory-template.txt index 17adcd5d20..6d522d2f64 100644 --- a/website/static/security/advisory-template.txt +++ b/website/static/security/advisory-template.txt @@ -1,147 +1,147 @@ ============================================================================= FreeBSD-SA-ADVISORY_TEMPLATE Security Advisory The FreeBSD Project Topic: Category: < core | contrib > Module: Announced: 2024-XX-XX Credits: Affects: -Corrected: 2024-XX-XX XX:XX:XX UTC (stable/14, 14.1-STABLE) +Corrected: 2024-XX-XX XX:XX:XX UTC (stable/14, 14.2-STABLE) 2024-XX-XX XX:XX:XX UTC (releng/14.1, 14.1-RELEASE-pXX) 2024-XX-XX XX:XX:XX UTC (stable/13, 13.4-STABLE) 2024-XX-XX XX:XX:XX UTC (releng/13.4, 13.4-RELEASE-pXX) 2024-XX-XX XX:XX:XX UTC (releng/13.3, 13.3-RELEASE-pXX) CVE Name: CVE-XXXX-XXXX For general information regarding FreeBSD Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit . I. Background II. Problem Description III. Impact IV. Workaround No workaround is available. <... but some systems are unaffected:> No workaround is available. V. Solution Upgrade your vulnerable system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date. [XX Needs reboot? Mention please] Perform one of the following: 1) To update your vulnerable system via a binary patch: Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms, or the i386 platform on FreeBSD 13, can be updated via the freebsd-update(8) utility: # freebsd-update fetch # freebsd-update install # shutdown -r +10min "Rebooting for a security update" 2) To update your vulnerable system via a source code patch: The following patches have been verified to apply to the applicable FreeBSD release branches. a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility. [FreeBSD 13.3] # fetch https://security.FreeBSD.org/patches/SA-XX:XX/XXXX.patch # fetch https://security.FreeBSD.org/patches/SA-XX:XX/XXXX.patch.asc # gpg --verify XXXX.patch.asc b) Apply the patch. Execute the following commands as root: # cd /usr/src # patch < /path/to/patch c) Recompile the operating system using buildworld and installworld as described in . c) Recompile the operating system using buildworld and installworld as described in . Restart the applicable daemons, or reboot the system. c) Recompile the operating system using buildworld and installworld as described in . Restart all daemons that use the library, or reboot the system. c) Recompile your kernel as described in and reboot the system. VI. Correction details This issue is corrected as of the corresponding Git commit hash in the following stable and release branches: Branch/path Hash Revision ------------------------------------------------------------------------- stable/14/ XXXXXXXXXXXX stable/14-nXXXXXX releng/14.1/ XXXXXXXXXXXX releng/14.1-nXXXXXX stable/13/ XXXXXXXXXXXX stable/13-nXXXXXX releng/13.4/ XXXXXXXXXXXX releng/13.4-nXXXXXX releng/13.3/ XXXXXXXXXXXX releng/13.3-nXXXXXX ------------------------------------------------------------------------- Run the following command to see which files were modified by a particular commit: # git show --stat Or visit the following URL, replacing NNNNNN with the hash: To determine the commit count in a working tree (for comparison against nNNNNNN in the table above), run: # git rev-list --count --first-parent HEAD VII. References The latest revision of this advisory is available at diff --git a/website/static/security/errata-template.txt b/website/static/security/errata-template.txt index 111b89d5ca..e73cbc8241 100644 --- a/website/static/security/errata-template.txt +++ b/website/static/security/errata-template.txt @@ -1,147 +1,147 @@ ============================================================================= FreeBSD-EN-ERRATA_TEMPLATE Errata Notice The FreeBSD Project Topic: Category: < core | contrib > Module: Announced: 2024-XX-XX Credits: Affects: -Corrected: 2024-XX-XX XX:XX:XX UTC (stable/14, 14.1-STABLE) +Corrected: 2024-XX-XX XX:XX:XX UTC (stable/14, 14.2-STABLE) 2024-XX-XX XX:XX:XX UTC (releng/14.1, 14.1-RELEASE-pXX) 2024-XX-XX XX:XX:XX UTC (stable/13, 13.4-STABLE) 2024-XX-XX XX:XX:XX UTC (releng/13.4, 13.4-RELEASE-pXX) 2024-XX-XX XX:XX:XX UTC (releng/13.3, 13.3-RELEASE-pXX) For general information regarding FreeBSD Errata Notices and Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit . I. Background II. Problem Description III. Impact IV. Workaround No workaround is available. <... but some systems are unaffected:> No workaround is available. V. Solution Upgrade your system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date. [XX Needs reboot? Mention please] Perform one of the following: 1) To update your system via a binary patch: Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms, or the i386 platform on FreeBSD 13, can be updated via the freebsd-update(8) utility: # freebsd-update fetch # freebsd-update install [XX Needs reboot? Mention please] 2) To update your system via a source code patch: The following patches have been verified to apply to the applicable FreeBSD release branches. a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility. [FreeBSD 13.3] # fetch https://security.FreeBSD.org/patches/EN-XX:XX/XXXX.patch # fetch https://security.FreeBSD.org/patches/EN-XX:XX/XXXX.patch.asc # gpg --verify XXXX.patch.asc b) Apply the patch. Execute the following commands as root: # cd /usr/src # patch < /path/to/patch c) Recompile the operating system using buildworld and installworld as described in . c) Recompile the operating system using buildworld and installworld as described in . Restart the applicable daemons, or reboot the system. c) Recompile the operating system using buildworld and installworld as described in . Restart all daemons that use the library, or reboot the system. c) Recompile your kernel as described in and reboot the system. VI. Correction details This issue is corrected as of the corresponding Git commit hash in the following stable and release branches: Branch/path Hash Revision ------------------------------------------------------------------------- stable/14/ XXXXXXXXXXXX stable/14-nXXXXXX releng/14.1/ XXXXXXXXXXXX releng/14.1-nXXXXXX stable/13/ XXXXXXXXXXXX stable/13-nXXXXXX releng/13.4/ XXXXXXXXXXXX releng/13.4-nXXXXXX releng/13.3/ XXXXXXXXXXXX releng/13.3-nXXXXXX ------------------------------------------------------------------------- Run the following command to see which files were modified by a particular commit: # git show --stat Or visit the following URL, replacing NNNNNN with the hash: To determine the commit count in a working tree (for comparison against nNNNNNN in the table above), run: # git rev-list --count --first-parent HEAD VII. References The latest revision of this advisory is available at