Project

General

Profile

Bug #41772

Add patch to address FreeBSD-SA-18:10.ip

Added by Alexander Motin 9 months ago. Updated 9 months ago.

Status:
Done
Priority:
No priority
Assignee:
Alexander Motin
Category:
OS
Target version:
11.1-U6
Seen in:
11.2-BETA2
Severity:
Med High
Reason for Closing:
Reason for Blocked:
Needs QA:
No
Needs Doc:
No
Needs Merging:
No
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

FreeBSD announced two issues, potentially affecting FreeNAS and TrueNAS users:
https://security.freebsd.org/advisories/FreeBSD-SA-18:09.l1tf.asc
https://security.freebsd.org/advisories/FreeBSD-SA-18:10.ip.asc

Related issues

Copied to FreeNAS - Bug #41838: Patch FreeBSD-SA-18:09.l1tf and FreeBSD-SA-18:10.ipDone

Associated revisions

Revision 80859128 (diff)
Added by Dru Lavigne 9 months ago

Mention patches for recent vulnerabilities.
Ticket: #41028
Ticket: #41385
Ticket: #41772

History

#1 Updated by Alexander Motin 9 months ago

  • Status changed from Unscreened to Ready for Testing

PR to freenas/11-stable: https://github.com/freenas/os/pull/138

The fact of merge can be checked by presence of sysctls:
hw.vmm.vmx.l1d_flush
net.inet.ip.maxfrags
net.inet6.ip6.maxfragbucketsize

Would be nice to check bhyve still working, and ideally its performance not being too much worse.

#2 Updated by Alexander Motin 9 months ago

Patches for FreeBSD-SA-18:09.l1tf.asc do not apply clean to FreeNAS 11.1, so I am going to skip them. FreeNAS users should soon get 11.2, while on TrueNAS we do not use bhyve.

PR for freenas/11.1-stable: https://github.com/freenas/os/pull/139

#3 Updated by Dru Lavigne 9 months ago

  • Target version changed from 11.2-BETA3 to 11.1-U6

#4 Updated by Dru Lavigne 9 months ago

  • Status changed from Ready for Testing to In Progress

#5 Updated by Alexander Motin 9 months ago

  • Status changed from In Progress to Ready for Testing

#6 Updated by Dru Lavigne 9 months ago

  • Copied to Bug #41838: Patch FreeBSD-SA-18:09.l1tf and FreeBSD-SA-18:10.ip added

#7 Updated by Dru Lavigne 9 months ago

  • Subject changed from Patch FreeBSD-SA-18:09.l1tf FreeBSD-SA-18:10.ip to Patch FreeBSD-SA-18:10.ip

#9 Updated by Bonnie Follweiler 9 months ago

  • Status changed from Ready for Testing to Passed Testing
  • Needs QA changed from Yes to No

Passed Test in FreeNAS 11,1-U6 Internal5

#10 Updated by Dru Lavigne 9 months ago

  • Subject changed from Patch FreeBSD-SA-18:10.ip to Add patch to address FreeBSD-SA-18:10.ip
  • Needs Merging changed from Yes to No

#11 Updated by Dru Lavigne 9 months ago

  • Status changed from Passed Testing to Done
  • Needs Doc changed from Yes to No

Also available in: Atom PDF