os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Add latest errata notice:

Browse source 
Fix error in patch for FreeBSD-EN-13:04.freebsd-update [EN-13:05].
This commit is contained in:
Xin LI 2013-11-29 01:02:00 +00:00
parent 1f5d44e807
commit a5b8f65bdb
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/head/; revision=43263
4 changed files with 191 additions and 0 deletions

146
share/security/advisories/FreeBSD-EN-13:05.freebsd-update.asc Normal file
View file

@ -0,0 +1,146 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
=============================================================================
FreeBSD-EN-13:05.freebsd-update Errata Notice
The FreeBSD Project
Topic: Error in patch for FreeBSD-EN-13:04.freebsd-update
Category: base
Module: freebsd-update
Announced: 2013-11-28
Affects: All supported FreeBSD releases
Corrected: 2013-11-28 22:06:37 UTC (stable/10, 10.0-STABLE)
2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA3-p2)
2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA2-p2)
2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA1-p3)
2013-11-28 22:08:41 UTC (stable/9, 9.2-STABLE)
2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RELEASE-p2)
2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RC4-p2)
2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RC3-p3)
2013-11-28 22:12:48 UTC (releng/9.1, 9.1-RELEASE-p9)
2013-11-28 22:08:41 UTC (stable/8, 8.4-STABLE)
2013-11-28 22:12:48 UTC (releng/8.4, 8.4-RELEASE-p6)
2013-11-28 22:12:48 UTC (releng/8.3, 8.3-RELEASE-p13)
For general information regarding FreeBSD Errata Notices and Security
Advisories, including descriptions of the fields above, security
branches, and the following sections, please visit
<URL:http://security.freebsd.org/>.
I. Background
The freebsd-update(8) utility is used to download and apply binary diffs
for security and errata patches on systems installed from official FreeBSD
release CDs and DVDs. It can also be used to upgrade such systems to new
FreeBSD releases.
In the preceding Errata Notice (FreeBSD-EN-13:04.freebsd-update), a change
was made to freebsd-update(8) to cause it to create directories appearing
in a new release before creating other filesystem objects; and to delete
directories which no longer appeared after other filesystem objects had
been removed.
II. Problem Description
An typographical error caused the directories needing to be deleted to be
incorrectly enumerated. In particular, the /var/empty directory was being
removed when upgrading from earlier releases to FreeBSD 10.0-BETA3.
III. Impact
After upgrading to FreeBSD 10.0-BETA3 some daemons, including sshd(8),
will not start.
IV. Workaround
To manually recreate the /var/empty directory on systems where it was
inadvertently removed, run the following commands:
# mkdir /var/empty
# chflags schg /var/empty
V. Solution
Perform one of the following:
1) Upgrade your system to a supported FreeBSD stable or release / security
branch (releng) dated after the correction date.
2) To update your present system via a source code patch:
The following patches have been verified to apply to the applicable
FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.
# fetch http://security.FreeBSD.org/patches/EN-13:05/freebsd-update.patch
# fetch http://security.FreeBSD.org/patches/EN-13:05/freebsd-update.patch.asc
# gpg --verify freebsd-update.patch.asc
b) Apply the patch.
# cd /usr/src
# patch < /path/to/patch
c) Reinstall freebsd-update.
# cd /usr/src/usr.sbin/freebsd-update
# make install -DWITHOUT_MAN
3) To update your system via a binary patch:
Systems running a RELEASE version of FreeBSD on the i386 or amd64
platforms can be updated via the freebsd-update(8) utility:
# freebsd-update fetch
# freebsd-update install
VI. Correction details
The following list contains the revision numbers of each file that was
corrected in FreeBSD.
Branch/path Revision
- -------------------------------------------------------------------------
stable/8/ r258724
releng/8.3/ r258725
releng/8.4/ r258725
stable/9/ r258724
releng/9.1/ r258725
releng/9.2/ r258725
stable/10/ r258723
- -------------------------------------------------------------------------
To see which files were modified by a particular revision, run the
following command, replacing NNNNNN with the revision number, on a
machine with Subversion installed:
# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
Or visit the following URL, replacing NNNNNN with the revision number:
<URL:http://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>
VII. References
The latest revision of this Errata Notice is available at
http://security.FreeBSD.org/advisories/FreeBSD-EN-13:05.freebsd-update.asc
-----BEGIN PGP SIGNATURE-----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=XRsr
-----END PGP SIGNATURE-----

17
share/security/patches/EN-13:05/freebsd-update.patch Normal file
View file

@ -0,0 +1,17 @@
Index: usr.sbin/freebsd-update/freebsd-update.sh
===================================================================
--- usr.sbin/freebsd-update/freebsd-update.sh (revision 257878)
+++ usr.sbin/freebsd-update/freebsd-update.sh (revision 257879)
@@ -2884,10 +2884,10 @@
install_delete INDEX-OLD INDEX-NEW || return 1
# Remove old directories
+ grep -vE '^/boot/' $1/INDEX-NEW |
+ grep -E '^[^|]+\|d\|' > INDEX-NEW
grep -vE '^/boot/' $1/INDEX-OLD |
grep -E '^[^|]+\|d\|' > INDEX-OLD
- grep -vE '^/boot/' $1/INDEX-OLD |
- grep -E '^[^|]+\|d\|' > INDEX-OLD
install_delete INDEX-OLD INDEX-NEW || return 1
# Remove temporary files

16
share/security/patches/EN-13:05/freebsd-update.patch.asc Normal file
View file

@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----
iQIcBAABCgAGBQJSl+S/AAoJEO1n7NZdz2rn83kP/i3z33vMVlyCJ+ECx6sl6Ph6
waNo+sp32vqnth+HWM20uUSBx1AHuizl/R2Vn8np8yoN4kM75snYbDm65+1ukFTH
V/5jOFCGPLrgz/jFHyUKfxfk/AoVDUsX06seqyKANR1ohTz2qU9TAPt6otWHp5qz
+ia4w0oRF9us5Trb0TEHWiLhDlkL2Sflzk9nP4uRTCWkaoCiFIvGL0g0v7NTj66o
wbzT93qtF1OBdPIB7opZo2+OZNt9mvDeEBy8AtWemctZBSqtxDSK4vqDXwWUJdat
CNULqzlO9C5EhylGpJa/tPZXo8RfaZnIsYZPgywH/UJeaGHh9izlQYpYFXwcp4PY
uo+CT/ljRlVPdq7Z72ncleuBhA9UGxCTe+R+hT3Muhr9LzUoCq12ruARSa+Z7+Wx
dHiAwt+mu7Hi3Sg/TnxKpbtCKh5w8JW9jbA2sR6SYNhwgI1rc361Pnk41wR4GkrS
jA6EaQhuMK5mefRhkqcJeP7LHX7bRyQkv1avgZjTLUef3fVfBMQpxaGQcsKwouyG
CiD8uMtQhERijEbcP4jmis/67kYwZ6IK+QxsIhETVs79sNILy8YOk+7ZNPhgeUUj
8qb89Ar5p3oVuWJdJ6SrCXSweCou7sajESsIuCaurzzMrUUTL5QPAZdfWjL+yw0j
cChdU0yXPbmnlHk/Hgsd
=RdmK
-----END PGP SIGNATURE-----

12
share/xml/notices.xml
View file

@ -7,6 +7,18 @@
<year>
<name>2013</name>
<month>
<name>11</name>
<day>
<name>28</name>
<notice>
<name>FreeBSD-EN-13:05.freebsd-update</name>
</notice>
</day>
</month>
<month>
<name>10</name>