aboutsummaryrefslogtreecommitdiff
path: root/share/security/advisories/FreeBSD-EN-13:05.freebsd-update.asc
blob: f743611bd57e40ac1423d13a5d04fb64648329ec (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

=============================================================================
FreeBSD-EN-13:05.freebsd-update                                 Errata Notice
                                                          The FreeBSD Project

Topic:          Error in patch for FreeBSD-EN-13:04.freebsd-update

Category:       base
Module:         freebsd-update
Announced:      2013-11-28
Affects:        All supported FreeBSD releases
Corrected:      2013-11-28 22:06:37 UTC (stable/10, 10.0-STABLE)
                2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA3-p2)
                2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA2-p2)
                2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA1-p3)
                2013-11-28 22:08:41 UTC (stable/9, 9.2-STABLE)
                2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RELEASE-p2)
                2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RC4-p2)
                2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RC3-p3)
                2013-11-28 22:12:48 UTC (releng/9.1, 9.1-RELEASE-p9)
                2013-11-28 22:08:41 UTC (stable/8, 8.4-STABLE)
                2013-11-28 22:12:48 UTC (releng/8.4, 8.4-RELEASE-p6)
                2013-11-28 22:12:48 UTC (releng/8.3, 8.3-RELEASE-p13)

For general information regarding FreeBSD Errata Notices and Security
Advisories, including descriptions of the fields above, security
branches, and the following sections, please visit
<URL:http://security.freebsd.org/>.

I.   Background

The freebsd-update(8) utility is used to download and apply binary diffs
for security and errata patches on systems installed from official FreeBSD
release CDs and DVDs.  It can also be used to upgrade such systems to new
FreeBSD releases.

In the preceding Errata Notice (FreeBSD-EN-13:04.freebsd-update), a change
was made to freebsd-update(8) to cause it to create directories appearing
in a new release before creating other filesystem objects; and to delete
directories which no longer appeared after other filesystem objects had
been removed.

II.  Problem Description

An typographical error caused the directories needing to be deleted to be
incorrectly enumerated.  In particular, the /var/empty directory was being
removed when upgrading from earlier releases to FreeBSD 10.0-BETA3.

III. Impact

After upgrading to FreeBSD 10.0-BETA3 some daemons, including sshd(8),
will not start.

IV.  Workaround

To manually recreate the /var/empty directory on systems where it was
inadvertently removed, run the following commands:

# mkdir /var/empty
# chflags schg /var/empty

V.   Solution

Perform one of the following:

1) Upgrade your system to a supported FreeBSD stable or release / security
branch (releng) dated after the correction date.

2) To update your present system via a source code patch:

The following patches have been verified to apply to the applicable
FreeBSD release branches.

a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.

# fetch http://security.FreeBSD.org/patches/EN-13:05/freebsd-update.patch
# fetch http://security.FreeBSD.org/patches/EN-13:05/freebsd-update.patch.asc
# gpg --verify freebsd-update.patch.asc

b) Apply the patch.

# cd /usr/src
# patch < /path/to/patch

c) Reinstall freebsd-update.

# cd /usr/src/usr.sbin/freebsd-update
# make install -DWITHOUT_MAN

3) To update your system via a binary patch:

Systems running a RELEASE version of FreeBSD on the i386 or amd64
platforms can be updated via the freebsd-update(8) utility:

# freebsd-update fetch
# freebsd-update install

VI.  Correction details

The following list contains the revision numbers of each file that was
corrected in FreeBSD.

Branch/path                                                      Revision
- -------------------------------------------------------------------------
stable/8/                                                         r258724
releng/8.3/                                                       r258725
releng/8.4/                                                       r258725
stable/9/                                                         r258724
releng/9.1/                                                       r258725
releng/9.2/                                                       r258725
stable/10/                                                        r258723
- -------------------------------------------------------------------------

To see which files were modified by a particular revision, run the
following command, replacing NNNNNN with the revision number, on a
machine with Subversion installed:

# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

Or visit the following URL, replacing NNNNNN with the revision number:

<URL:http://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>

VII. References

The latest revision of this Errata Notice is available at
http://security.FreeBSD.org/advisories/FreeBSD-EN-13:05.freebsd-update.asc
-----BEGIN PGP SIGNATURE-----
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=XRsr
-----END PGP SIGNATURE-----