211 lines
10 KiB
HTML
211 lines
10 KiB
HTML
<?xml version="1.0" encoding="iso-8859-1"?>
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<meta name="generator" content="HTML Tidy, see www.w3.org" />
|
|
<title>FreeBSD 4.9-RELEASE Errata</title>
|
|
<meta name="GENERATOR" content="Modular DocBook HTML Stylesheet Version 1.7" />
|
|
<link rel="STYLESHEET" type="text/css" href="docbook.css" />
|
|
</head>
|
|
<body class="ARTICLE" bgcolor="#FFFFFF" text="#000000" link="#0000FF" vlink="#840084"
|
|
alink="#0000FF">
|
|
<div class="ARTICLE">
|
|
<div class="TITLEPAGE">
|
|
<h1 class="TITLE"><a id="AEN2" name="AEN2">FreeBSD 4.9-RELEASE Errata</a></h1>
|
|
|
|
<h3 class="CORPAUTHOR">The FreeBSD Project</h3>
|
|
|
|
<p class="COPYRIGHT">Copyright © 2000, 2001, 2002, 2003 The FreeBSD Documentation
|
|
Project</p>
|
|
|
|
<p class="PUBDATE">$FreeBSD: src/release/doc/en_US.ISO8859-1/errata/article.sgml,v
|
|
1.1.2.122 2004/03/30 18:18:34 kensmith Exp $<br />
|
|
</p>
|
|
|
|
<div class="LEGALNOTICE"><a id="TRADEMARKS" name="TRADEMARKS"></a>
|
|
<p>FreeBSD is a registered trademark of Wind River Systems, Inc. This is expected to
|
|
change soon.</p>
|
|
|
|
<p>Intel, Celeron, EtherExpress, i386, i486, Itanium, Pentium, and Xeon are trademarks or
|
|
registered trademarks of Intel Corporation or its subsidiaries in the United States and
|
|
other countries.</p>
|
|
|
|
<p>Many of the designations used by manufacturers and sellers to distinguish their
|
|
products are claimed as trademarks. Where those designations appear in this document, and
|
|
the FreeBSD Project was aware of the trademark claim, the designations have been followed
|
|
by the ``™'' or the ``®'' symbol.</p>
|
|
</div>
|
|
|
|
<hr />
|
|
</div>
|
|
|
|
<blockquote class="ABSTRACT">
|
|
<div class="ABSTRACT"><a id="AEN18" name="AEN18"></a>
|
|
<p>This document lists errata items for FreeBSD 4.9-RELEASE, containing significant
|
|
information discovered after the release or too late in the release cycle to be otherwise
|
|
included in the release documentation. This information includes security advisories, as
|
|
well as news relating to the software or documentation that could affect its operation or
|
|
usability. An up-to-date version of this document should always be consulted before
|
|
installing this version of FreeBSD.</p>
|
|
|
|
<p>This errata document for FreeBSD 4.9-RELEASE will be maintained until the release of
|
|
FreeBSD 4.10-RELEASE.</p>
|
|
</div>
|
|
</blockquote>
|
|
|
|
<div class="SECT1">
|
|
<hr />
|
|
<h2 class="SECT1"><a id="AEN21" name="AEN21">1 Introduction</a></h2>
|
|
|
|
<p>This errata document contains ``late-breaking news'' about FreeBSD 4.9-RELEASE. Before
|
|
installing this version, it is important to consult this document to learn about any
|
|
post-release discoveries or problems that may already have been found and fixed.</p>
|
|
|
|
<p>Any version of this errata document actually distributed with the release (for
|
|
example, on a CDROM distribution) will be out of date by definition, but other copies are
|
|
kept updated on the Internet and should be consulted as the ``current errata'' for this
|
|
release. These other copies of the errata are located at <a
|
|
href="http://www.FreeBSD.org/releases/"
|
|
target="_top">http://www.FreeBSD.org/releases/</a>, plus any sites which keep up-to-date
|
|
mirrors of this location.</p>
|
|
|
|
<p>Source and binary snapshots of FreeBSD 4-STABLE also contain up-to-date copies of this
|
|
document (as of the time of the snapshot).</p>
|
|
|
|
<p>For a list of all FreeBSD CERT security advisories, see <a
|
|
href="http://www.FreeBSD.org/security/"
|
|
target="_top">http://www.FreeBSD.org/security/</a> or <a
|
|
href="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/"
|
|
target="_top">ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/</a>.</p>
|
|
</div>
|
|
|
|
<div class="SECT1">
|
|
<hr />
|
|
<h2 class="SECT1"><a id="AEN32" name="AEN32">2 Security Advisories</a></h2>
|
|
|
|
<p>(5 Dec 2003) <b class="APPLICATION">BIND</b> contains the potential for a
|
|
denial-of-service attack. This vulnerability has been addressed by a vendor patch on the
|
|
4.9-RELEASE security fix branch and by the import of a new version to the 4-STABLE
|
|
development branch. For more information, see <a
|
|
href="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:19.bind.asc"
|
|
target="_top">FreeBSD-SA-03:19</a>.</p>
|
|
|
|
<p>(8 Feb 2004) A bug with the System V Shared Memory interface (specifically the <a
|
|
href="http://www.FreeBSD.org/cgi/man.cgi?query=shmat&sektion=2&manpath=FreeBSD+4.8-stable">
|
|
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">shmat</span>(2)</span></a> system
|
|
call) can cause a shared memory segment to reference unallocated kernel memory. In turn,
|
|
this can permit a local attacker to gain unauthorized access to parts of kernel memory,
|
|
possibly resulting in disclosure of sensitive information, bypass of access control
|
|
mechanisms, or privilege escalation. More details, including bugfix and workaround
|
|
information, can be found in security advisory <a
|
|
href="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:02.shmat.asc"
|
|
target="_top">FreeBSD-SA-04:02</a>.</p>
|
|
|
|
<p>(4 Mar 2004) It is possible for a remote attacker to conduct a low-bandwidth
|
|
denial-of-service attack against a machine providing TCP-based services, filling up the
|
|
target's memory buffers and potentially leading to a system crash. This vulnerability has
|
|
been addressed on the FreeBSD 4.9-RELEASE security fix branch. Security advisory <a
|
|
href="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:04.tcp.asc"
|
|
target="_top">FreeBSD-SA-04:04</a> contains more details, as well as information on
|
|
patching existing systems.</p>
|
|
|
|
<p>(17 Mar 2004) By performing a specially crafted SSL/TLS handshake with an application
|
|
that uses OpenSSL a null pointer may be dereferenced. This may in turn cause the
|
|
application to crash, resulting in a denial of service attack. For more information see
|
|
the Security Advisory <a
|
|
href="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc"
|
|
target="_top">FreeBSD-SA-04:05</a> which contains more details and instructions on how to
|
|
patch existing systems.</p>
|
|
</div>
|
|
|
|
<div class="SECT1">
|
|
<hr />
|
|
<h2 class="SECT1"><a id="AEN46" name="AEN46">3 Late-Breaking News</a></h2>
|
|
|
|
<p>(28 Oct 2003) Very late in the release cycle, a change was made to the HyperThreading
|
|
(HTT) support on <span class="TRADEMARK">Intel</span>® processors. HTT support is now
|
|
enabled by default on SMP-capable kernels; as a result, the <var
|
|
class="LITERAL">HTT</var> kernel option is unnecessary and has been removed. The extra
|
|
logical CPUs are always started so that they can handle interrupts, but are prevented
|
|
from executing user processes by default. To enable the logical CPUs, change the value of
|
|
the <var class="VARNAME">machdep.hlt_logical_cpus</var> <a
|
|
href="http://www.FreeBSD.org/cgi/man.cgi?query=sysctl&sektion=8&manpath=FreeBSD+4.8-stable">
|
|
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">sysctl</span>(8)</span></a>
|
|
variable from <var class="LITERAL">1</var> to <var class="LITERAL">0</var>. This value
|
|
can also be set from the loader as a tunable of the same name. This behavior is now
|
|
identical to FreeBSD 5.<var class="REPLACEABLE">X</var>.</p>
|
|
|
|
<p>(29 Oct 2003) Some of the packages contained in the first CD-ROM depend on different
|
|
versions of the <b class="APPLICATION">OpenLDAP</b> packages, which cannot co-exist on
|
|
the same host. One manifestation of this problem is that it is not possible to install
|
|
both the <a href="http://www.FreeBSD.org/cgi/url.cgi?ports/x11/gnome2/pkg-descr"><tt
|
|
class="FILENAME">x11/gnome2</tt></a> and <a
|
|
href="http://www.FreeBSD.org/cgi/url.cgi?ports/x11/kde3/pkg-descr"><tt
|
|
class="FILENAME">x11/kde3</tt></a> packages.</p>
|
|
|
|
<p>(30 Oct 2003) It appears that the <tt class="FILENAME">crypto</tt> distribution is
|
|
required for correct functioning of the FreeBSD base system. At the very least, the
|
|
libraries contained in the <tt class="FILENAME">crypto</tt> distribution are required for
|
|
<a
|
|
href="http://www.FreeBSD.org/cgi/man.cgi?query=pkg_add&sektion=1&manpath=FreeBSD+4.8-stable">
|
|
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">pkg_add</span>(1)</span></a>.</p>
|
|
|
|
<p>(30 Oct 2003) There are known cases of fairly-recent i386 machines with BIOSes that do
|
|
not support booting from emulation mode El Torito CDROMs. This prevents booting from the
|
|
FreeBSD 4.9-STABLE CDROMs. As a workaround, download the floppy disk images, use them to
|
|
boot the machine into <a
|
|
href="http://www.FreeBSD.org/cgi/man.cgi?query=sysinstall&sektion=8&manpath=FreeBSD+4.8-stable">
|
|
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">sysinstall</span>(8)</span></a>,
|
|
and then do a CDROM install. This problem does not seem to be wide-spread as of this
|
|
writing.</p>
|
|
|
|
<div class="NOTE">
|
|
<blockquote class="NOTE">
|
|
<p><b>Note:</b> FreeBSD 5.<var class="REPLACEABLE">X</var> uses non-emulation El Torito
|
|
booting on its CDROM releases by default. These, of course, cannot be booted on very old
|
|
i386 machines that only support emulation mode.</p>
|
|
</blockquote>
|
|
</div>
|
|
|
|
<br />
|
|
<br />
|
|
<p>(10 Nov 2003) An update was made to the <var class="LITERAL">xterm</var> entry in the
|
|
<a
|
|
href="http://www.FreeBSD.org/cgi/man.cgi?query=termcap&sektion=5&manpath=FreeBSD+4.8-stable">
|
|
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">termcap</span>(5)</span></a>
|
|
database which, among other things, removed the (already deprecated) <var
|
|
class="LITERAL">bs</var> backspacing capability. The <a
|
|
href="http://www.FreeBSD.org/cgi/man.cgi?query=hack&sektion=6&manpath=FreeBSD+4.8-stable">
|
|
<span class="CITEREFENTRY"><span class="REFENTRYTITLE">hack</span>(6)</span></a> game
|
|
appears to depend on this capability and hence fails when run from inside a window with a
|
|
terminal type of <var class="LITERAL">xterm</var>.</p>
|
|
|
|
<p>(10 Nov 2003) Tagged queueing in the <a
|
|
href="http://www.FreeBSD.org/cgi/man.cgi?query=ata&sektion=4&manpath=FreeBSD+4.8-stable"><span
|
|
class="CITEREFENTRY"><span class="REFENTRYTITLE">ata</span>(4)</span></a> driver is
|
|
broken and appears to cause kernel panics.</p>
|
|
</div>
|
|
</div>
|
|
|
|
<hr />
|
|
<p align="center"><small>This file, and other release-related documents, can be
|
|
downloaded from <a
|
|
href="http://snapshots.jp.FreeBSD.org/">http://snapshots.jp.FreeBSD.org/</a>.</small></p>
|
|
|
|
<p align="center"><small>For questions about FreeBSD, read the <a
|
|
href="http://www.FreeBSD.org/docs.html">documentation</a> before contacting <<a
|
|
href="mailto:questions@FreeBSD.org">questions@FreeBSD.org</a>>.</small></p>
|
|
|
|
<p align="center"><small><small>All users of FreeBSD 4-STABLE should subscribe to the
|
|
<<a href="mailto:stable@FreeBSD.org">stable@FreeBSD.org</a>> mailing
|
|
list.</small></small></p>
|
|
|
|
<p align="center">For questions about this documentation, e-mail <<a
|
|
href="mailto:doc@FreeBSD.org">doc@FreeBSD.org</a>>.</p>
|
|
|
|
<br />
|
|
<br />
|
|
</body>
|
|
</html>
|
|
|