This errata document contains “late-breaking news” about FreeBSD 8.4-RELEASE Before installing this version, it is important to consult this document to learn about any post-release discoveries or problems @@ -38,7 +38,48 @@ the snapshot).
For a list of all FreeBSD CERT security advisories, see http://www.FreeBSD.org/security/ or ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/.
Problems described in the following security advisories have
been fixed in 8.4-RELEASE. For more information, consult
the individual advisories available from
- http://security.FreeBSD.org/.
| Advisory | Date | Topic |
|---|---|---|
| SA-12:01.openssl | 03 May 2012 | OpenSSL multiple vulnerabilities |
| SA-12:02.crypt | 30 May 2012 | Incorrect |
| SA-12:03.bind | 12 June 2012 | Incorrect handling of zero-length RDATA fields in named(8) |
| SA-12:04.sysret | 12 June 2012 | Privilege escalation when returning from kernel |
| SA-12:05.bind | 6 August 2012 | named(8) DNSSEC validation Denial of Service |
| SA-12:06.bind | 22 November 2012 | Multiple Denial of Service vulnerabilities with named(8) |
| SA-12:07.hostapd | 22 November 2012 | Insufficient message length validation for EAP-TLS messages |
| SA-12:08.linux | 22 November 2012 | Linux compatibility layer input validation error |
| SA-13:02.libc | 19 February 2013 | glob(3) related resource exhaustion |
| SA-13:03.openssl | 02 April 2013 | OpenSSL multiple vulnerabilities |
| SA-13:04.bind | 02 April 2013 | BIND remote denial of service |
| SA-13:05.nfsserver | 29 April 2013 | Insufficient input validation in the NFS server |
[20130613] The vtnet(4) network interface driver
+ http://security.FreeBSD.org/.
| Advisory | Date | Topic |
|---|---|---|
| FreeBSD-SA-13:07.bind | 26 July 2013 | Denial of Service vulnerability in + named(8) |
| FreeBSD-SA-13:09.ip_multicast | 21 August 2013 | Integer overflow in computing the size of + a temporary buffer can result in a buffer which is too + small for the requested operation |
| FreeBSD-SA-13:10.sctp | 21 August 2013 | Fix a bug that could lead to kernel memory + disclosure with SCTP state cookie |
| FreeBSD-SA-13:12.ifioctl | 10 September 2013 | In IPv6 and NetATM, stop
+ |
| FreeBSD-SA-13:13.nullfs | 10 September 2013 | Prevent cross-mount hardlinks between different + nullfs mounts of the same underlying + filesystem |
| FreeBSD-SA-14:01.bsnmpd | 14 January 2014 | bsnmpd remote denial of service + vulnerability |
| FreeBSD-SA-14:02.ntpd | 14 January 2014 | ntpd distributed reflection Denial of Service + vulnerability |
| FreeBSD-SA-14:04.bind | 14 January 2014 | BIND remote denial of service + vulnerability |
| FreeBSD-SA-14:05.nfsserver | 8 April 2014 | NFS deadlock vulnerability |
| FreeBSD-SA-14:06.openssl | 8 April 2014 | ECDSA Cache Side-channel Attack in + OpenSSL |
| FreeBSD-SA-14:08.tcp | 30 April 2014 | TCP reassembly vulnerability |
| FreeBSD-SA-14:11.sendmail | 5 June 2014 | sendmail improper close-on-exec flag + handling |
| FreeBSD-SA-14:12.ktrace | 5 June 2014 | ktrace memory disclosure |
| FreeBSD-SA-14:14.openssl | 5 June 2014 | OpenSSL multiple vulnerabilities |
| FreeBSD-SA-14:16.file | 5 June 2014 | Multiple vulnerabilities in file(1) and + libmagic(3) |
| FreeBSD-SA-14:17.kmem | 8 July 2014 | kernel memory disclosure in control message and + SCTP notifications |
| FreeBSD-SA-14:18.openssl | 9 September 2014 | Multiple vulnerabilities in + OpenSSL |
| FreeBSD-SA-14:19.tcp | 16 September 2014 | Denial of Service in TCP packet + processing |
| FreeBSD-SA-14:21.routed | 21 October 2014 | routed(8) denial of service + vulnerability |
| FreeBSD-SA-14:23.openssl | 21 October 2014 | Multiple vulnerabilities in + OpenSSL |
| FreeBSD-SA-14:25.setlogin | 4 November 2014 | kernel stack disclosure in setlogin(2) and + getlogin(2) |
| FreeBSD-SA-14:26.ftp | 4 November 2014 | Remote command execution in + ftp(1) |
| FreeBSD-SA-14:28.file | 10 December 2014 | Multiple vulnerabilities in file(1) and + libmagic(3) |
| FreeBSD-SA-14:29.bind | 10 December 2014 | BIND remote denial of service + vulnerability |
| FreeBSD-SA-14:31.ntp | 23 December 2014 | Multiple vulnerabilities in NTP + suite |
| FreeBSD-SA-15:01.ntp | 14 January 2015 | Multiple vulnerabilities in + OpenSSL |
| FreeBSD-SA-15:02.kmem | 27 January 2015 | Fix SCTP SCTP_SS_VALUE kernel memory corruption + and disclosure vulnerability |
| FreeBSD-SA-15:03.sctp | 27 January 2015 | Fix SCTP stream reset + vulnerability |
| Errata | Date | Topic |
|---|---|---|
| FreeBSD-EN-13:01.fxp | 28 June 2013 | Fixed a problem where dhclient(8) would + infinitely try to intialize fxp(4) |
| FreeBSD-EN-13:02.vtnet | 28 June 2013 | Fixed a problem frames sent to additional MAC + addresses are not forwarded to the vtnet(4) + interface |
| FreeBSD-EN-13:04.freebsd-update | 26 October 2013 | Multiple fixes |
| FreeBSD-EN-13:05.freebsd-update | 28 November 2013 | Fix INDEX generation |
| FreeBSD-EN-14:01.random | 14 January 2014 | Disable hardware RNGs by default |
| FreeBSD-EN-14:02.mmap | 14 January 2014 | Fix incorrect coalescing of stack + entry |
| FreeBSD-EN-14:03.pkg | 15 May 2014 | Add pkg bootstrapping, configuration and public + keys |
| FreeBSD-EN-14:04.kldxref | 15 May 2014 | Improve build repeatability for + kldxref(8) |
| FreeBSD-EN-14:06.exec | 3 June 2014 | Fix triple-fault when executing from a threaded + process |
| FreeBSD-EN-14:08.heimdal | 24 June 2014 | Fix |
| FreeBSD-EN-14:09.jail | 8 July 2014 | Fix jail fails to start if + WITHOUT_INET/WITHOUT_INET6 is use |
| FreeBSD-EN-14:10.tzdata | 21 October 2014 | Time zone data file update |
| FreeBSD-EN-14:12.zfs | 4 November 2014 | Fix NFSv4 and ZFS cache consistency + issue |
| FreeBSD-EN-14:13.freebsd-update | 23 December 2014 | Fix directory deletion issue |
[20130613] The vtnet(4) network interface driver displays the following message upon configuration when using QEMU 1.4.1 and later:
vtnet0: error setting host MAC filter table
This message is harmless when the interface has only one MAC address. The patch for this issue is filed to a PR kern/178955.
[20130609] There is incompatibility in jail(8) @@ -94,7 +135,7 @@ allow.socket_af
[20130608] FreeBSD 8.4-RELEASE no longer supports FreeBS the dhclient(8) utility keeps trying to initialize the network interface forever.
kernel: fxp0: link state changed to UP kernel: fxp0: link state changed to DOWN
A patch to fix this issue will be released as an Errata - Notice.
[20130606] As described in FreeBSD 8.4-RELEASE Release Notes, + Notice.
[20130606] As described in FreeBSD 8.4-RELEASE Release Notes,
FreeBSD ZFS subsystem has been updated to support feature flags for
ZFS pools. However, the default version number of a newly
created ZFS pool is still 28.
This is because FreeBSD 9.0 and 9.1 do not support the feature