1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta name="generator" content="HTML Tidy, see www.w3.org" />
<title>FreeBSD 9.1-RELEASE Errata</title>
<meta name="GENERATOR" content="Modular DocBook HTML Stylesheet Version 1.79" />
<link rel="STYLESHEET" type="text/css" href="docbook.css" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
</head>
<body class="article" bgcolor="#FFFFFF" text="#000000" link="#0000FF" vlink="#840084"
alink="#0000FF">
<div class="ARTICLE">
<div class="TITLEPAGE">
<h1 class="title"><a id="AEN2" name="AEN2">FreeBSD 9.1-RELEASE Errata</a></h1>
<h3 class="corpauthor"> The FreeBSD Project</h3>
<p class="copyright">Copyright © 2012 The FreeBSD Documentation Project</p>
<p class="pubdate">$FreeBSD: stable/9/release/doc/en_US.ISO8859-1/errata/article.xml
244671 2012-12-25 06:07:34Z hrs $<br />
</p>
<div class="legalnotice"><a id="trademarks" name="trademarks"></a>
<p>FreeBSD is a registered trademark of the FreeBSD Foundation.</p>
<p>Intel, Celeron, EtherExpress, i386, i486, Itanium, Pentium, and Xeon are trademarks or
registered trademarks of Intel Corporation or its subsidiaries in the United States and
other countries.</p>
<p>SPARC, SPARC64, SPARCengine, and UltraSPARC are trademarks of SPARC International, Inc
in the United States and other countries. SPARC International, Inc owns all of the SPARC
trademarks and under licensing agreements allows the proper use of these trademarks by
its members.</p>
<p>Many of the designations used by manufacturers and sellers to distinguish their
products are claimed as trademarks. Where those designations appear in this document, and
the FreeBSD Project was aware of the trademark claim, the designations have been followed
by the “™” or the “®” symbol.</p>
</div>
<hr />
</div>
<blockquote class="ABSTRACT">
<div class="abstract"><a id="AEN16" name="AEN16"></a>
<p>This document lists errata items for FreeBSD 9.1-RELEASE, containing significant
information discovered after the release or too late in the release cycle to be otherwise
included in the release documentation. This information includes security advisories, as
well as news relating to the software or documentation that could affect its operation or
usability. An up-to-date version of this document should always be consulted before
installing this version of FreeBSD.</p>
<p>This errata document for FreeBSD 9.1-RELEASE will be maintained until the release of
FreeBSD 9.2-RELEASE.</p>
</div>
</blockquote>
<div class="sect1">
<hr />
<h2 class="sect1"><a id="intro" name="intro">1 Introduction</a></h2>
<p>This errata document contains “late-breaking news” about FreeBSD
9.1-RELEASE. Before installing this version, it is important to consult this document to
learn about any post-release discoveries or problems that may already have been found and
fixed.</p>
<p>Any version of this errata document actually distributed with the release (for
example, on a CDROM distribution) will be out of date by definition, but other copies are
kept updated on the Internet and should be consulted as the “current errata”
for this release. These other copies of the errata are located at <a
href="http://www.FreeBSD.org/releases/"
target="_top">http://www.FreeBSD.org/releases/</a>, plus any sites which keep up-to-date
mirrors of this location.</p>
<p>Source and binary snapshots of FreeBSD 9.1-STABLE also contain up-to-date copies of
this document (as of the time of the snapshot).</p>
<p>For a list of all FreeBSD CERT security advisories, see <a
href="http://www.FreeBSD.org/security/"
target="_top">http://www.FreeBSD.org/security/</a> or <a
href="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/"
target="_top">ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/</a>.</p>
</div>
<div class="sect1">
<hr />
<h2 class="sect1"><a id="security" name="security">2 Security Advisories</a></h2>
<p>Problems described in the following security advisories have been fixed in
9.1-RELEASE. For more information, consult the individual advisories available from <a
href="http://security.FreeBSD.org/" target="_top">http://security.FreeBSD.org/</a>.</p>
<div class="informaltable"><a id="AEN34" name="AEN34"></a>
<table border="0" frame="void" width="100%" class="CALSTABLE">
<col width="20%" />
<col width="20%" />
<col width="60%" />
<thead>
<tr>
<th>Advisory</th>
<th>Date</th>
<th>Topic</th>
</tr>
</thead>
<tbody>
<tr>
<td><a href="http://security.freebsd.org/advisories/FreeBSD-SA-12:01.openssl.asc"
target="_top">SA-12:01.openssl</a></td>
<td>3 May 2012</td>
<td>
<p>OpenSSL multiple vulnerabilities</p>
</td>
</tr>
<tr>
<td><a href="http://security.freebsd.org/advisories/FreeBSD-SA-12:02.crypt.asc"
target="_top">SA-12:02.crypt</a></td>
<td>30 May 2012</td>
<td>
<p>Incorrect <code class="function">crypt()</code> hashing</p>
</td>
</tr>
<tr>
<td><a href="http://security.freebsd.org/advisories/FreeBSD-SA-12:03.bind.asc"
target="_top">SA-12:03.bind</a></td>
<td>12 June 2012</td>
<td>
<p>Incorrect handling of zero-length RDATA fields in <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=named&sektion=8&manpath=FreeBSD+9.1-RELEASE">
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span></a></p>
</td>
</tr>
<tr>
<td><a href="http://security.freebsd.org/advisories/FreeBSD-SA-12:04.sysret.asc"
target="_top">SA-12:04.sysret</a></td>
<td>12 June 2012</td>
<td>
<p>Privilege escalation when returning from kernel</p>
</td>
</tr>
<tr>
<td><a href="http://security.freebsd.org/advisories/FreeBSD-SA-12:05.bind.asc"
target="_top">SA-12:05.bind</a></td>
<td>6 August 2012</td>
<td>
<p><a
href="http://www.FreeBSD.org/cgi/man.cgi?query=named&sektion=8&manpath=FreeBSD+9.1-RELEASE">
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span></a> DNSSEC
validation Denial of Service</p>
</td>
</tr>
<tr>
<td><a href="http://security.freebsd.org/advisories/FreeBSD-SA-12:06.bind.asc"
target="_top">SA-12:06.bind</a></td>
<td>22 November 2012</td>
<td>
<p>Multiple Denial of Service vulnerabilities with <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=named&sektion=8&manpath=FreeBSD+9.1-RELEASE">
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span></a></p>
</td>
</tr>
<tr>
<td><a href="http://security.freebsd.org/advisories/FreeBSD-SA-12:07.hostapd.asc"
target="_top">SA-12:07.hostapd</a></td>
<td>22 November 2012</td>
<td>
<p>Insufficient message length validation for EAP-TLS messages</p>
</td>
</tr>
<tr>
<td><a href="http://security.freebsd.org/advisories/FreeBSD-SA-12:08.linux.asc"
target="_top">SA-12:08.linux</a></td>
<td>22 November 2012</td>
<td>
<p>Linux compatibility layer input validation error</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="sect1">
<hr />
<h2 class="sect1"><a id="late-news" name="late-news">3 Late-Breaking News</a></h2>
<p>[November 2, 2012] The current <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=mfi&sektion=4&manpath=FreeBSD+9.1-RELEASE">
<span class="citerefentry"><span class="refentrytitle">mfi</span>(4)</span></a> driver
has an overflow bug when handling disks larger than 2^32 sectors in SYSPD volumes, also
known as JBODs, which will cause data corruption. This bug has been fixed on this
FreeBSD-CURRENT but was too late for inclusion in this release. An Errata Notice for
9.1-RELEASE is planned.</p>
<p>[December 25, 2012] The Installtion Instructions had the following wrong information
about upgrading procedure. All of them have been fixed in the online version.</p>
<ul>
<li>
<p>The link URL of “upgrading section in the Release 	 Notes”, branch
names where upcoming Security 	 Advisories or Errata Notices will be applied, and a
	 command line argument of <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=freebsd-update&sektion=8&manpath=FreeBSD+9.1-RELEASE">
<span class="citerefentry"><span
class="refentrytitle">freebsd-update</span>(8)</span></a> were ones 	 for
9.0-RELEASE, not for 9.1-RELEASE.</p>
</li>
<li>
<p>The list of releases supported by <a
href="http://www.FreeBSD.org/cgi/man.cgi?query=freebsd-update&sektion=8&manpath=FreeBSD+9.1-RELEASE">
<span class="citerefentry"><span
class="refentrytitle">freebsd-update</span>(8)</span></a> 	 utility were incorrect.
For 9.X, The following versions are 	 supported: <tt
class="literal">9.0-RELEASE</tt>, 	 <tt class="literal">9.1-BETA1</tt>, and 	 <tt
class="literal">9.1-RC[123]</tt>.</p>
</li>
</ul>
</div>
</div>
<hr />
<p align="center"><small>This file, and other release-related documents, can be
downloaded from <a
href="http://www.FreeBSD.org/releases/">http://www.FreeBSD.org/releases/</a>.</small></p>
<p align="center"><small>For questions about FreeBSD, read the <a
href="http://www.FreeBSD.org/docs.html">documentation</a> before contacting <<a
href="mailto:questions@FreeBSD.org">questions@FreeBSD.org</a>>.</small></p>
<p align="center"><small>All users of FreeBSD 9.1-STABLE should subscribe to the <<a
href="mailto:stable@FreeBSD.org">stable@FreeBSD.org</a>> mailing list.</small></p>
<p align="center"><small>For questions about this documentation, e-mail <<a
href="mailto:doc@FreeBSD.org">doc@FreeBSD.org</a>>.</small></p>
</body>
</html>
|
