diff options
Diffstat (limited to 'website/content/en/releases/12.0R/errata.adoc')
| -rw-r--r-- | website/content/en/releases/12.0R/errata.adoc | 124 |
1 files changed, 124 insertions, 0 deletions
diff --git a/website/content/en/releases/12.0R/errata.adoc b/website/content/en/releases/12.0R/errata.adoc new file mode 100644 index 0000000000..05facbd773 --- /dev/null +++ b/website/content/en/releases/12.0R/errata.adoc @@ -0,0 +1,124 @@ +--- +title: "FreeBSD 12.0-RELEASE Errata" +sidenav: download +--- + +:release: "12.0-RELEASE" +:releaseNext: "13.0-RELEASE" +:releaseBranch: "12-STABLE" + += FreeBSD {release} Errata + +== Abstract + +This document lists errata items for FreeBSD {release}, containing significant information discovered after the release or too late in the release cycle to be otherwise included in the release documentation. This information includes security advisories, as well as news relating to the software or documentation that could affect its operation or usability. An up-to-date version of this document should always be consulted before installing this version of FreeBSD. + +This errata document for FreeBSD {release} will be maintained until the release of FreeBSD {releaseNext}. + +== Table of Contents + +* <<intro,Introduction>> +* <<security,Security Advisories>> +* <<errata,Errata Notices>> +* <<open-issues,Open Issues>> +* <<late-news,Late-Breaking News>> + +[[intro]] +== Introduction + +This errata document contains "late-breaking news" about FreeBSD {release} Before installing this version, it is important to consult this document to learn about any post-release discoveries or problems that may already have been found and fixed. + +Any version of this errata document actually distributed with the release (for example, on a CDROM distribution) will be out of date by definition, but other copies are kept updated on the Internet and should be consulted as the "current errata" for this release. These other copies of the errata are located at https://www.FreeBSD.org/releases/, plus any sites which keep up-to-date mirrors of this location. + +Source and binary snapshots of FreeBSD {releaseBranch} also contain up-to-date copies of this document (as of the time of the snapshot). + +For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/security/. + +[[security]] +== Security Advisories + +[width="100%",cols="40%,30%,30%",options="header",] +|=== +|Advisory |Date |Topic +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-18:15.bootpd.asc[FreeBSD-SA-18:15.bootpd] |19 December 2018 |Buffer overflow +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:01.syscall.asc[FreeBSD-SA-19:01.syscall] |5 February 2019 |Kernel data register leak +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:02.fd.asc[FreeBSD-SA-19:02.fd] |5 February 2019 |File description reference count leak +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:03.wpa.asc[FreeBSD-SA-19:03.wpa] |14 May 2019 |Multiple vulnerabilities +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:04.ntp.asc[FreeBSD-SA-19:04.ntp] |14 May 2019 |Authenticated denial of service in {{< manpage "ntpd" "8">}} +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:05.pf.asc[FreeBSD-SA-19:05.pf] |14 May 2019 |IPv6 fragment reassembly panic in {{< manpage "pf" "3">}} +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:06.pf.asc[FreeBSD-SA-19:06.pf] |14 May 2019 |ICMP/ICMP6 packet filter bypass in {{< manpage "pf" "3">}} +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:07.mds.asc[FreeBSD-SA-19:07.mds] |14 May 2019 |Microarchitectural Data Sampling +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:08.rack.asc[FreeBSD-SA-19:08.rack] |19 June 2019 |Resource exhaustion in non-default RACK TCP stack +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:09.iconv.asc[FreeBSD-SA-19:09.iconv] |2 July 2019 |{{< manpage "iconv" "3">}} buffer overflow +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:10.ufs.asc[FreeBSD-SA-19:10.ufs] |2 July 2019 |Kernel stack disclosure +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:11.cd_ioctl.asc[FreeBSD-SA-19:11.cd_ioctl] |2 July 2019 |Privilege escalation in {{< manpage "cd" "4">}} +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:12.telnet.asc[FreeBSD-SA-19:12.telnet] |24 July 2019 |Multiple vulnerabilities +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:13.pts.asc[FreeBSD-SA-19:13.pts] |24 July 2019 |Write-after-free vulnerability +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:15.mqueuefs.asc[FreeBSD-SA-19:15.mqueuefs] |24 July 2019 |Reference count overflow +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:16.bhyve.asc[FreeBSD-SA-19:16.bhyve] |24 July 2019 |{{< manpage "xhci" "4">}} out-of-bounds read +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:17.fd.asc[FreeBSD-SA-19:17.fd] |24 July 2019 |Reference count leak +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:18.bzip2.asc[FreeBSD-SA-19:18.bzip2] |6 August 2019 |Multiple vulnerabilities +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:19.mldv2.asc[FreeBSD-SA-19:19.mldv2] |6 August 2019 |Out-of-bounds memory access +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:20.bsnmp.asc[FreeBSD-SA-19:20.bsnmp] |6 August 2019 |Insufficient message length validation +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:21.bhyve.asc[FreeBSD-SA-19:21.bhyve] |6 August 2019 |Insufficient validation of guest-supplied data +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:22.mbuf.asc[FreeBSD-SA-19:22.mbuf] |20 August 2019 |IPv6 remove denial-of-service +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:23.midi.asc[FreeBSD-SA-19:23.midi] |20 August 2019 |Kernel memory disclosure +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:24.mqueuefs.asc[FreeBSD-SA-19:24.mqueuefs] |20 August 2019 |Reference count overflow +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:25.mcepsc.asc[FreeBSD-SA-19:25.mcepce] |12 November 2019 |Machine Check Exception on Page Size Change +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-19:26.mcu.asc[FreeBSD-SA-19:26.mcu] |12 November 2019 |Intel CPU Microcode Update +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-20:01.libfetch.asc[FreeBSD-SA-20:01.libfetch] |28 January 2020 |{{< manpage "fetch" "3">}} buffer overflow +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-20:02.ipsec.asc[FreeBSD-SA-20:02.ipsec] |28 January 2020 |Missing anti-replay window check +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-SA-20:03.thrmisc.asc[FreeBSD-SA-20:03.thrmisc] |28 January 2020 |Kernel stack data disclosure +|=== + +[[errata]] +== Errata Notices + +[width="100%",cols="40%,30%,30%",options="header",] +|=== +|Errata |Date |Topic +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:01.cc_cubic.asc[FreeBSD-EN-19:01.cc_cubic] |9 January 2019 |Connection stalls with CUBIC congestion control +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:02.tcp.asc[FreeBSD-EN-19:02.tcp] |9 January 2019 |TCP connections may stall and eventually fail in case of packet loss +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:03.sqlite.asc[FreeBSD-EN-19:03.sqlite] |9 January 2019 |sqlite update +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:04.tzdata.asc[FreeBSD-EN-19:04.tzdata] |9 January 2019 |Timezone database information update +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:06.dtrace.asc[FreeBSD-EN-19:06.dtrace] |5 February 2019 |DTrace incompatibility with SMAP-enabled systems +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:07.lle.asc[FreeBSD-EN-19:07.lle] |5 February 2019 |LLE table lookup code race condition +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:08.tzdata.asc[FreeBSD-EN-19:08.tzdata] |14 May 2019 |Timezone database information update +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:09.xinstall.asc[FreeBSD-EN-19:09.xinstall] |14 May 2019 |{{< manpage "install" "1">}} broken with partially matching relative paths +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:10.scp.asc[FreeBSD-EN-19:10.scp] |14 May 2019 |Insufficient filename validation in {{< manpage "scp" "1">}} client +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:11.net.asc[FreeBSD-EN-19:11.net] |19 June 2019 |Incorrect locking in networking stack +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:12.tzdata.asc[FreeBSD-EN-19:12.tzdata] |2 July 2019 |Timezone database information update +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:13.mds.asc[FreeBSD-EN-19:13.mds] |24 July 2019 |System crash from Intel CPU vulnerability mitigation +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:14.epoch.asc[FreeBSD-EN-19:14.epoch] |6 August 2019 |Incorrect locking +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:15.libunwind.asc[FreeBSD-EN-19:15.libunwind] |6 August 2019 |Incorrect exception handling +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:16.bhyve.asc[FreeBSD-EN-19:16.bhyve] |20 August 2019 |Instruction emulation improvements +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:17.ipfw.asc[FreeBSD-EN-19:17.ipfw] |20 August 2019 |"jail" keyword fix +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:18.tzdata.asc[FreeBSD-EN-19:18.tzdata] |23 October 2019 |Timezone database information update +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-19:19.loader.asc[FreeBSD-EN-19:19.loader] |12 November 2019 |UEFI Loader Memory Fragmentation +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-20:01.ssp.asc[FreeBSD-EN-20:01.ssp] |28 January 2020 |Imprecise orderring of canary initialization +|link:https://www.FreeBSD.org/security/advisories/FreeBSD-EN-20:02.nmount.asc[FreeBSD-EN-20:02.nmount] |28 January 2020 |Invalid pointer dereference +|=== + +[[open-issues]] +== Open Issues + +* [2018-12-11] Some Intel(R) J1900 systems may hang on boot in UEFI mode. An observed workaround is to set `kern.vty=sc` at the {{< manpage "loader" "8">}} prompt. To have the setting persist after {{< manpage "reboot" "8">}}, add `kern.vty=sc` to {{< manpage "loader" "5">}}. ++ +See PR https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=230172[230172] for more information. + +* [2018-12-11] OpenSSL version 1.1.1 disables use of hardware cryptography accelerator cards provided by {{< manpage "crypto" "4">}} by default. Systems that have cryptography devices such as {{< manpage "hifn" "4">}}, {{< manpage "padlock" "4">}}, {{< manpage "safe" "4">}}, and {{< manpage "ubsec" "4">}} currently will not take advantage of hardware cryptography offloading. ++ +It is currently unclear if an Errata Notice will be issued to re-enable use of {{< manpage "crypto" "4">}}. + +* [2018-12-13] Due to the size of the base system of FreeBSD 12.0, the disc1.iso images for amd64 and i386 do not fit onto a 700 MB CD-ROM. As of FreeBSD 12.0-RELEASE, however, disc1.iso for these architectures can be written to a flash drive, or to a DVD. ++ +See PR https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233989[233989] for more information. + +* [2018-12-13] Some users have reported FreeBSD 12.0-RELEASE boot messages do not report CPUs other than `CPU0`. This is expected behavior introduced in `r333334`, and results in boot-time reduction. + +* [2018-12-13] The FreeBSD 12.0 release notes mention use of [.filename]`graphics/drm-stable-kmod` and [.filename]`graphics/drm-legacy-kmod` for modern graphics cards. These ports have been changed to a "meta port" in the Ports Collection, and will be renamed in the `2019Q1` quarterly branch, after which [.filename]`graphics/drm-kmod` should be used instead. + +[[late-news]] +== Late-Breaking News + +No news. |