From f5687a43d2e5aa8b0a937a63fe0251eed4218805 Mon Sep 17 00:00:00 2001 From: "Bruce A. Mah" Date: Sat, 28 Feb 2004 22:49:15 +0000 Subject: [PATCH] Added errata items: SA-04:03, __FreeBSD_version glitch in porters-handbook for 5.2.1 docset. Made this document apply to 5.2.1-RELEASE as well by noting this in the abstract and noting errata items that were fixed/addressed in 5.2.1. --- .../doc/en_US.ISO8859-1/errata/article.sgml | 66 ++++++++++++++----- 1 file changed, 50 insertions(+), 16 deletions(-) diff --git a/release/doc/en_US.ISO8859-1/errata/article.sgml b/release/doc/en_US.ISO8859-1/errata/article.sgml index 68e362fb6270..999f30ab40e1 100644 --- a/release/doc/en_US.ISO8859-1/errata/article.sgml +++ b/release/doc/en_US.ISO8859-1/errata/article.sgml @@ -23,6 +23,8 @@ %release; %misc; + + ]>
@@ -76,6 +78,12 @@ should always be consulted before installing this version of &os;. + This document also contains errata for &os; + &release.bugfix;, a point release made about one + month after &os; &release.prev;. Unless otherwise noted, all + errata items in this document apply to both &release.prev; + and &release.bugfix;. + This errata document for &os; (30 Jan 2004) A bug in &man.mksnap.ffs.8; causes the creation of a + (30 Jan 2004, updated 28 Feb 2004) A bug in &man.mksnap.ffs.8; causes the creation of a filesystem snapshot to reset the flags on the filesystem to their default values. The possible consequences depend on local usage, but can include disabling extended access control lists @@ -139,20 +147,32 @@ that &man.mksnap.ffs.8; is normally only available to the superuser and members of the operator group. This bug has been fixed on the &os; &release.current; - security fix branch. For more information, see security advisory FreeBSD-SA-04:01. - (8 Feb 2004) A bug with the System V Shared Memory interface + (8 Feb 2004, updated 28 Feb 2004) A bug with the System V Shared Memory interface (specifically the &man.shmat.2; system call) can cause a shared memory segment to reference unallocated kernel memory. In turn, this can permit a local attacker to gain unauthorized access to parts of kernel memory, possibly resulting in disclosure of sensitive information, bypass of access control mechanisms, or privilege escalation. + This bug has been fixed on the &os; &release.current; + security fix branch and in &os; &release.bugfix;. More details, including bugfix and workaround information, can be found in security advisory FreeBSD-SA-04:02. + (28 Feb 2004) It is possible, under some circumstances, for + a processor with superuser privileges inside a &man.jail.8; + environment to change its root directory to a different jail, + giving it read and write access to the files and directories + within. This vulnerability has been closed on the &os; + &release.current; security fix branch and in &os; + &release.bugfix;. Information on the bug fix can be found in + security advisory FreeBSD-SA-04:03. + ]]> @@ -184,7 +204,7 @@ output of &man.dmesg.8; and &man.acpidump.8; to the &a.current; may help diagnose the problem. - (9 Jan 2004) In some cases, ATA devices may behave + (9 Jan 2004, updated 28 Feb 2004) In some cases, ATA devices may behave erratically, particularly SATA devices. Reported symptoms include command timeouts or missing interrupts. These problems appear to be timing-dependent, making them rather difficult to @@ -211,6 +231,10 @@ + Some of these problems were addressed in &os; + &release.bugfix; with the import of a newer &man.ata.4; from + &release.current;. + (9 Jan 2004) Installing over NFS when using the install floppies requires that the nfsclient.ko module be manually loaded from the third floppy disk. This can @@ -230,19 +254,21 @@ hint.apic.0.disabled loader tunable. Note that disabling APIC is not compatible with SMP systems. - (10 Jan 2004) The NFSv4 client may panic when attempting an + (10 Jan 2004, updated 28 Feb 2004) The NFSv4 client may panic when attempting an NFSv4 operation against an NFSv3/NFSv2-only server. This problem has been fixed with revision 1.4 of src/sys/rpc/rpcclnt.c in &os; - &release.current;. + &release.current;. It was also fixed in &os; + &release.bugfix;. - (11 Jan 2004) Some problems have been encountered when using + (11 Jan 2004, updated 28 Feb 2004) Some problems have been encountered when using third-party NSS modules, such as nss_ldap, and groups with large membership lists. These have been fixed with revision 1.2 of src/include/nss.h and revision 1.2 of src/lib/libc/net/nss_compat.c in &os; - &release.current;. + &release.current;; this fix was backported to &os; + &release.bugfix;. (13 Jan 2004) The &os; &release.current; release notes incorrectly stated that GCC was a @@ -250,14 +276,16 @@ GCC was a pre-release GCC 3.3.3 snapshot. - (13 Jan 2004) The (13 Jan 2004, updated 28 Feb 2004) The sysutils/kdeadmin3 port/package has a bug in the KUser component that can cause deletion of the root user from the system password file. Users are strongly urged to upgrade to - version 3.1.4_1 of this port/package. + version 3.1.4_1 of this port/package. The package set included + with &os; &release.bugfix; contains the fixed version of this + package. - (21 Jan 2004) Some bugs in the IPsec implementation imported + (21 Jan 2004, updated 28 Feb 2004) Some bugs in the IPsec implementation imported from the KAME Project can result in memory objects being freed before all references to them were removed. Reported symptoms include erratic behavior or kernel panics after flushing the @@ -265,12 +293,18 @@ been fixed in &os; &release.current; in rev. 1.31 of src/sys/netinet6/ipsec.c, rev. 1.136 of src/sys/netinet/in_pcb.c, and revs. 1.63 - and 1.64 of src/sys/netkey/key.c. More + and 1.64 of src/sys/netkey/key.c. These + bugfixes were backported to &os; &release.bugfix;. More information about these problems has been posted to the &a.current;, in particular the thread entitled [PATCH] IPSec fixes. + (28 Feb 2004) The edition of the Porters Handbook included + with &os; &release.bugfix; contained an incorrect value for + &release.bugfix;'s __FreeBSD_version. The + correct value is 502010. + ]]> @@ -284,7 +318,7 @@ (10 Jan 2004) The TCP implementation in &os; now includes + (10 Jan 2004, updated 28 Feb 2004) The TCP implementation in &os; now includes protection against a certain class of TCP MSS resource exhaustion attacks, in the form of limits on the size and rate of TCP segments. The first limit sets the minimum allowed @@ -299,9 +333,9 @@ Because this feature was added late in the &release.prev; release cycle, connection rate limiting is disabled by default, but can be enabled manually by assigning a non-zero value to - net.inet.tcp.minmssoverload (the default - value in &release.current; at the time of this writing is - 1000 packets per second). + net.inet.tcp.minmssoverload. This feature + was added to &os; &release.prev; too late for inclusion in its + release notes. ]]>