diff --git a/release/doc/en_US.ISO8859-1/errata/article.sgml b/release/doc/en_US.ISO8859-1/errata/article.sgml index f375ce813fa5..331e8a890e0c 100644 --- a/release/doc/en_US.ISO8859-1/errata/article.sgml +++ b/release/doc/en_US.ISO8859-1/errata/article.sgml @@ -233,6 +233,20 @@ system password file. Users are strongly urged to upgrade to version 3.1.4_1 of this port/package. + (21 Jan 2004) Some bugs in the IPsec implementation imported + from the KAME Project can result in memory objects being freed + before all references to them were removed. Reported symptoms + include erratic behavior or kernel panics after flushing the + Security Policy Database (SPD). Some of these problems have + been fixed in &os; &release.current; in rev. 1.31 of + src/sys/netinet6/ipsec.c, rev. 1.136 of + src/sys/netinet/in_pcb.c, and revs. 1.63 + and 1.64 of src/sys/netkey/key.c. More + information about these problems has been posted to the + &a.current;, in particular the thread entitled + [PATCH] IPSec fixes. + ]]>