From nobody Wed Jun 17 15:16:58 2026 X-Original-To: dev-commits-doc-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4ggSBl59KLz6hVrQ for ; Wed, 17 Jun 2026 15:17:03 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4ggSBl4h3Vz45ct for ; Wed, 17 Jun 2026 15:17:03 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1781709423; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=p3M2j1BPJDs5zTfGJSKY7S1mYq5jI0xY4bhen023ak0=; b=W3ayWJeVDSxn/FRiTbe14Dmdw27RnKMLZ0cuAbQYE6trN2GsuLu10UU10Ui7IE5Hng93bO 3Vt6/Cnu/F1E27dF2GSGEfyjIHlPhClCI/MfEa/uNI5Rk2ZXwhx1N1HAddJ2oOcL0Xt/V/ mLEkoX4E5dX1LFUGM39ISjpFQzCGx87TfvyIO8rsaMNlwdgdnl06oyHZ9fajJAriyUGoq4 NDpypPgp9lA0fdhQZL+FiET3qvUe9Hi/CG+3jJ1m4spsdEq9pAfI9ox/Tzqy5QpbuQ3R4J wcmtU3DO3B875TLrbv+Y6lJs/Fx3REhDzpJVL8R1vj7cZPOpQY0KBwmLEp5NlA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1781709423; a=rsa-sha256; cv=none; b=qNOAdQ5nlS3nLJoelFaYvIKnDkUKO2gU55ISNWHJ7BbvU43q3U7/KWsdPSQdE29d962mj+ y9LStszwQwgYzV+d0QYbGEvvTKLyJV3Ei+7j1+HuX5ru6W9fbGhls7YDtGO9BPBJHMcTsa ZuyEGvdfvqQFR6+U99po9UHLMYjqd7EGe++/SBRw2Voxa6Uik9SY5W1Qnpf+f/LiUWU0Q+ KVdBIQK9jmzW+EDBG03fkWRkt28NnPulbBNKivBfxVxSYoHkBGhs/fJH8pgBQrWfWUvO83 r5xneWWp5DjkYX7Iwssl6ZhId7bwn4V7hdIFLrW5OfG05NTPKMXDuY8L2z3+sg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1781709423; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=p3M2j1BPJDs5zTfGJSKY7S1mYq5jI0xY4bhen023ak0=; b=IqeZWFXJvpIksVQHIj69meVUTmUv0fJHQoqs/HmHcOB/jQDK4xwt40DozN+NalsLwv0R/v J0vC0Llx/oazkUjCSxJVOtzuKqeAY9lrwMQLMw646mruuN6zy5u8MI+M/WlkZefN89vUVD 7K2ci/ra9UaogQiVUlKifvEz6Jerz4Rwr37Ol4PLGwGqf545TO/0P/FPkW5/rNIA7yx1im /tJm3xFYw7nKVyypS3jboBrExJfUbhYGLJeo/1vSRK8TWCdU1PpBjiWD/MwDRCce6zFzMl OhqmTnyn9Av1rwMyXZ1bksPatCArUc4/PQTVHmD1YFofDnViwEulICe9Pu86DQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4ggSBl3r34z2Dv for ; Wed, 17 Jun 2026 15:17:03 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 3fb24 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Wed, 17 Jun 2026 15:16:58 +0000 To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org From: Gordon Tetlow Subject: git: 0c8278440e - main - Update SA-26:26.ktls with appropriate workaround. List-Id: Commit messages for all branches of the doc repository List-Archive: https://lists.freebsd.org/archives/dev-commits-doc-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-doc-all@freebsd.org Sender: owner-dev-commits-doc-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: gordon X-Git-Repository: doc X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 0c8278440e903d2dfcf22c433f0db86ca887ee2d Auto-Submitted: auto-generated Date: Wed, 17 Jun 2026 15:16:58 +0000 Message-Id: <6a32ba6a.3fb24.49c39eea@gitrepo.freebsd.org> The branch main has been updated by gordon: URL: https://cgit.FreeBSD.org/doc/commit/?id=0c8278440e903d2dfcf22c433f0db86ca887ee2d commit 0c8278440e903d2dfcf22c433f0db86ca887ee2d Author: Gordon Tetlow AuthorDate: 2026-06-17 15:16:34 +0000 Commit: Gordon Tetlow CommitDate: 2026-06-17 15:16:34 +0000 Update SA-26:26.ktls with appropriate workaround. Approved by: so --- .../security/advisories/FreeBSD-SA-26:26.ktls.asc | 35 ++++++++++++---------- 1 file changed, 20 insertions(+), 15 deletions(-) diff --git a/website/static/security/advisories/FreeBSD-SA-26:26.ktls.asc b/website/static/security/advisories/FreeBSD-SA-26:26.ktls.asc index 65c2adcd14..7efd809a33 100644 --- a/website/static/security/advisories/FreeBSD-SA-26:26.ktls.asc +++ b/website/static/security/advisories/FreeBSD-SA-26:26.ktls.asc @@ -24,6 +24,11 @@ For general information regarding FreeBSD Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit . +0. Revision History + +v1.0 -- Initial revision +v1.1 -- Update workaround section + I. Background Kernel TLS (KTLS) moves Transport Layer Security (TLS) record processing @@ -57,7 +62,7 @@ control of the affected system. IV. Workaround -No workaround is available. +Set sysctl kern.ipc.tls.enable=0 to disable KTLS entirely. V. Solution @@ -144,18 +149,18 @@ The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE----- -iQJPBAEBCgA5FiEEthUnfoEIffdcgYM7bljekB8AGu8FAmooiUwbFIAAAAAABAAO -bWFudTIsMi41KzEuMTIsMCwzAAoJEG5Y3pAfABrv6hQP/3x8lGHZpLeT8PjB5NMF -xCfwzKQlu5vlkOqSv+9uEGsh3FQa9gHE/68SwZYa01waeFbTSKpBvrf1X4kRKGnE -r3z8DSAPnVqSRzp4k0PNTxPLtF09FfWiMEBA+PIedL91WkG24gQ63k3fORVjkSvs -a/uY1DQnmypV2mdV/S/hWmrtVCmi5itZKsVedZFoZHZ04GKwIObMoqXgtbUxdfhJ -XvjSCqGgvpsUPVpE72nKYAbbL81w344tNOGtjoC07utitkLoHtMlYqMTfXCv0dY7 -Oo3RZ408afAl1CalUdZ64KXJWqjCZt3FWxtn4ugZkewLc3cDyO5Y2ZUDMAb71P/V -Sdq6+GRIC5wMOmd2C2Wb4C72FODhh4o4+n/E7qeIojT5jozWNFAFN0ugzNcqzuM9 -b8ekwLWK9MbtjZWF1A0OhsLqQoYuBcwX4RymVJCfpEnlPEDwaf0fv/Sx/OyU9MBx -zbT/Thqa9cB++4U6Obodcj55mXM9p23b9OpEnSD5FKlhxXPxCYW5gc2mK4k+yoKd -5ZCzzcdzbMoNgqyHnvrBgFGMsPggXJxaidsRFtVSb9E1GWQUweyN9hR10Gr8wX5j -QL18EHe3Lcgg2Z+mi8NQ8lrqPoGpTIjZ8enEYHLrILe/p8JMjNU5fe+YqQTE0tyD -pWQqqx8AYbHJsnCDELTeqt96 -=lD4w +iQJPBAEBCgA5FiEEthUnfoEIffdcgYM7bljekB8AGu8FAmoyuewbFIAAAAAABAAO +bWFudTIsMi41KzEuMTIsMCwzAAoJEG5Y3pAfABrvze8P/RRvp3TUprrxMgg4prj6 +Mv7sglMFvwyVPGJstM0zBV2k+seMm8S5QmJtO+m8N5NHAIyJWL6PzvMFE9klI/IC +g8Jov8lcEcAml0G+xJFCPeeG0fYszqtE8/gxGNdatDv01AnMoFnVMUyy4y1QpSyo +kJzymPs49LysxggffSmPgmX446hEo7pZ6iQLBuEc0XKNN/7LYmiYq6kcVLzTpkRa +kfYwsJphWZkfdR2AVzCSxMiMb9D/NQ7WN96B3o+xYX8XoHgrsQmvZ2YrvRf9nyRs +lgAm9QxlkTcWlwPrNoacg2sN/jZFb3k01GRJAFbcKbDP1t3lkFygD+UHNnlStO+s +hb5fKHgQgrUpX7atsD2UQ2W+irca0ejLhflxxvgY7pRTLnnmJ20fXDhDn2sWb7zs +cPxir+4bJk4IZvomK0raFH5eMeJ434/rfkMjfE87WOEryFHabnGsiH9xO2u6+ADT +UhMl4iBY+wOoaHTTqfpOQpAk2/gO7UUvXtbOkEa8SYZjSQAxMAz7nqyL7Lucix9n +7ES4hLmic87cr7+q+8iwvASvcNjlDxqyGYRoLa2+TECsTmKqVbwEEANcufNKemb+ +aPoRFi5apShhwe1kl7/vVCDGPtCssRRYZ+ejwpQY6m4PpRKY9soNFUt2WjOGVmaB +iQR9r08fcX9SuW2dTuTzXLEi +=wfi1 -----END PGP SIGNATURE-----