Path: blob/main/website/static/security/errata-template.txt
18086 views
=============================================================================1FreeBSD-EN-XX_ERRATA_TEMPLATE Errata Notice2The FreeBSD Project34Topic: XX56Category: <XX core | contrib >7Module: <XX module name>8Announced: 2026-XX-XX9Credits: XX10Affects: <XX affected versions>11<e.g., "All supported versions of FreeBSD.", "FreeBSD1214.3 and later.", "FreeBSD 14.x", or "FreeBSD 14.4">13Corrected: 2026-XX-XX XX:XX:XX UTC (stable/15, 15.1-STABLE)142026-XX-XX XX:XX:XX UTC (releng/15.0, 15.0-RELEASE-pXX)152026-XX-XX XX:XX:XX UTC (stable/14, 14.4-STABLE)162026-XX-XX XX:XX:XX UTC (releng/14.4, 14.4-RELEASE-pXX)172026-XX-XX XX:XX:XX UTC (releng/14.3, 14.3-RELEASE-pXX)1819For general information regarding FreeBSD Errata Notices and Security20Advisories, including descriptions of the fields above, security21branches, and the following sections, please visit22<URL:https://security.FreeBSD.org/>.2324I. Background2526<XX brief description of what the affected bits are supposed to do>2728II. Problem Description2930<XX detailed description of the problem>3132III. Impact3334<XX description as to why the above problem is bad>3536IV. Workaround3738<XX If no workaround exists:>39No workaround is available.4041<XX ... but some systems are unaffected:>42No workaround is available. <insert simple description of some43systems that are not vulnerable>4445<XX If a workaround exists:>46<XX insert workaround here>4748V. Solution4950<XX insert solution here>5152Upgrade your system to a supported FreeBSD stable or release / security53branch (releng) dated after the correction date.54[XX Needs reboot? Mention please]5556Perform one of the following:57581) To update your system installed from base system packages:5960Systems running a 15.0-RELEASE version of FreeBSD on the amd64 or arm6461platforms, which were installed using base system packages, can be updated62via the pkg(8) utility:6364# pkg upgrade -r FreeBSD-base65[XX Needs reboot? Mention please]66672) To update your system installed from binary distribution sets:6869Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms70which were not installed using base system packages can be updated via the71freebsd-update(8) utility:7273# freebsd-update fetch74# freebsd-update install75[XX Needs reboot? Mention please]76773) To update your system via a source code patch:7879The following patches have been verified to apply to the applicable80FreeBSD release branches.8182a) Download the relevant patch from the location below, and verify the83detached PGP signature using your PGP utility.8485[FreeBSD XX]86# fetch https://security.FreeBSD.org/patches/EN-XX:XX/XXXX.patch87# fetch https://security.FreeBSD.org/patches/EN-XX:XX/XXXX.patch.asc88# gpg --verify XXXX.patch.asc8990b) Apply the patch. Execute the following commands as root:9192# cd /usr/src93# patch < /path/to/patch9495<XX for a userland utility:>9697c) Recompile the operating system using buildworld and installworld as98described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.99100<XX for a daemons>101102c) Recompile the operating system using buildworld and installworld as103described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.104105Restart the applicable daemons, or reboot the system.106107<XX for a common library>108109c) Recompile the operating system using buildworld and installworld as110described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.111112Restart all daemons that use the library, or reboot the system.113114<XX for a kernel bug:>115116c) Recompile your kernel as described in117<URL:https://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the118system.119120VI. Correction details121122This issue is corrected as of the corresponding Git commit hash in the123following stable and release branches:124125Branch/path Hash Revision126-------------------------------------------------------------------------127stable/15/ XXXXXXXXXXXX stable/15-nXXXXXX128releng/15.0/ XXXXXXXXXXXX releng/15.0-nXXXXXX129stable/14/ XXXXXXXXXXXX stable/14-nXXXXXX130releng/14.4/ XXXXXXXXXXXX releng/14.4-nXXXXXX131releng/14.3/ XXXXXXXXXXXX releng/14.3-nXXXXXX132-------------------------------------------------------------------------133134Run the following command to see which files were modified by a135particular commit:136137# git show --stat <commit hash>138139Or visit the following URL, replacing NNNNNN with the hash:140141<URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>142143To determine the commit count in a working tree (for comparison against144nNNNNNN in the table above), run:145146# git rev-list --count --first-parent HEAD147148VII. References149150<XX other info on the problem>151152<URL:https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=XXXXXX>153154The latest revision of this advisory is available at155<URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-XX:XX.XXXXX.asc>156157158