149 lines
5.6 KiB
Text
149 lines
5.6 KiB
Text
-----BEGIN PGP SIGNED MESSAGE-----
|
|
Hash: SHA512
|
|
|
|
=============================================================================
|
|
FreeBSD-EN-16:09.freebsd-update Errata Notice
|
|
The FreeBSD Project
|
|
|
|
Topic: freebsd-update(8) support of FreeBSD 11.0 release distribution
|
|
|
|
Category: core
|
|
Module: freebsd-update
|
|
Announced: 2016-07-25
|
|
Affects: All supported versions of FreeBSD.
|
|
Corrected: 2016-07-11 04:50:32 UTC (stable/11, 11.0-BETA2)
|
|
2016-07-11 04:50:32 UTC (stable/11, 11.0-BETA1-p1)
|
|
2016-07-11 04:11:33 UTC (stable/10, 10.3-STABLE)
|
|
2016-07-25 15:04:17 UTC (releng/10.3, 10.3-RELEASE-p6)
|
|
2016-07-25 15:04:17 UTC (releng/10.2, 10.2-RELEASE-p20)
|
|
2016-07-25 15:04:17 UTC (releng/10.1, 10.1-RELEASE-p37)
|
|
2016-07-11 04:12:15 UTC (stable/9, 9.3-STABLE)
|
|
2016-07-25 15:04:17 UTC (releng/9.3, 9.3-RELEASE-p45)
|
|
|
|
For general information regarding FreeBSD Errata Notices and Security
|
|
Advisories, including descriptions of the fields above, security
|
|
branches, and the following sections, please visit
|
|
<URL:https://security.FreeBSD.org/>.
|
|
|
|
I. Background
|
|
|
|
The freebsd-update(8) utility is used to apply binary patches to FreeBSD
|
|
systems installed from official release images, as an alternative to
|
|
rebuilding from source.
|
|
|
|
II. Problem Description
|
|
|
|
The recent development of FreeBSD has introduced additional release
|
|
distribution names, which would fail with the existing freebsd-update(8)
|
|
sanity checks.
|
|
|
|
III. Impact
|
|
|
|
Upgrading to FreeBSD 11.x from existing FreeBSD releases is not possible
|
|
due failing sanity checks.
|
|
|
|
IV. Workaround
|
|
|
|
No workaround is available other than patching the freebsd-update(8)
|
|
utility, but systems that do not use FreeBSD-provided binary updates
|
|
to upgrade are not affected.
|
|
|
|
V. Solution
|
|
|
|
Perform one of the following:
|
|
|
|
1) Upgrade your system to a supported FreeBSD stable or release / security
|
|
branch (releng) dated after the correction date.
|
|
|
|
A reboot is not required.
|
|
|
|
2) To update your system via a binary patch:
|
|
|
|
Systems running a RELEASE version of FreeBSD on the i386 or amd64
|
|
platforms can be updated via the freebsd-update(8) utility:
|
|
|
|
# freebsd-update fetch
|
|
# freebsd-update install
|
|
|
|
A reboot is not required.
|
|
|
|
Please note that for FreeBSD 11.0-BETA1, the freebsd-update utility needs
|
|
to be patched manually.
|
|
|
|
# fetch http://update.freebsd.org/11.0-BETA1/i386/f/6b42aa5e560601bbf30c0b7a6ceed274796c955e6254f7a2fcd393376fe21c55.gz
|
|
# gunzip -c < 6b42aa5e560601bbf30c0b7a6ceed274796c955e6254f7a2fcd393376fe21c55.gz > NEW
|
|
# sha256 -q NEW
|
|
|
|
Verify that the output is:
|
|
|
|
6b42aa5e560601bbf30c0b7a6ceed274796c955e6254f7a2fcd393376fe21c55
|
|
|
|
# install -m 555 NEW /usr/sbin/freebsd-update
|
|
|
|
3) To update your system via a source code patch:
|
|
|
|
The following patches have been verified to apply to the applicable
|
|
FreeBSD release branches.
|
|
|
|
a) Download the relevant patch from the location below, and verify the
|
|
detached PGP signature using your PGP utility.
|
|
|
|
# fetch https://security.FreeBSD.org/patches/EN-16:09/freebsd-update.patch
|
|
# fetch https://security.FreeBSD.org/patches/EN-16:09/freebsd-update.patch.asc
|
|
# gpg --verify freebsd-update.patch.asc
|
|
|
|
b) Apply the patch. Execute the following commands as root:
|
|
|
|
# cd /usr/src
|
|
# patch < /path/to/patch
|
|
|
|
c) Recompile the operating system using buildworld and installworld as
|
|
described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.
|
|
|
|
VI. Correction details
|
|
|
|
The following list contains the correction revision numbers for each
|
|
affected branch.
|
|
|
|
Branch/path Revision
|
|
- -------------------------------------------------------------------------
|
|
stable/9/ r302537
|
|
releng/9.3/ r303304
|
|
stable/10/ r302536
|
|
releng/10.1/ r303304
|
|
releng/10.2/ r303304
|
|
releng/10.3/ r303304
|
|
stable/11/ r302539
|
|
- -------------------------------------------------------------------------
|
|
|
|
To see which files were modified by a particular revision, run the
|
|
following command, replacing NNNNNN with the revision number, on a
|
|
machine with Subversion installed:
|
|
|
|
# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
|
|
|
|
Or visit the following URL, replacing NNNNNN with the revision number:
|
|
|
|
<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>
|
|
|
|
VII. References
|
|
|
|
The latest revision of this advisory is available at
|
|
<URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-16:09.freebsd-update.asc>
|
|
-----BEGIN PGP SIGNATURE-----
|
|
Version: GnuPG v2.1.13 (FreeBSD)
|
|
|
|
iQIcBAEBCgAGBQJXliskAAoJEO1n7NZdz2rngvEP/iP/SI7ot9+oiV+BfV5QWUki
|
|
e5ZV9K780kMPfDOxJh7jR9/CJbzHz0Sp/KLLq0vgfpq3hiwdDGnrRGWK0k+Wb0QQ
|
|
QtXftMl5DSSfbaICK03jVjrBszytFpoKIlSqCdT2BB5vGIT9rCO7m2d320MfIQXK
|
|
M1vVxOt67FRVRPbG4nOFwhdExllKk4jt0Tp5AqSkO3WlNC0qVyK6IECwKnpMn3YO
|
|
o0upyQaJCNxZgDzg8X+paCHMYLeliafJhugJjH7V/QtYJI5RMFY7FWaCOtD+uFux
|
|
RkVqsRGxDm7kzlvXMW+sh6jcbP1jk83Nv6LZjNYyZlqYILUoRclubtLXN9aI7Tfa
|
|
Z6Qr33IBX+nRNDFSIy6awm+hiwC9Gm6ODz5aQSMkEd0uzpO11I6BXxUaj7QmEl1u
|
|
NnmmKbdoZvI6k0g4tWMgXZtwFFjij8d7RlyG57Sa058nnHr/0uehgc2g4wU59qXa
|
|
au5USIuyyBzZpyznT2/UFH7GzYlJ10Pq2iog+1U/5NJMgIGMrDQ7xwx8Xwwthdxg
|
|
5fk3dmGWYsnTS/bB567tGuqAwk55lOSLgxYoPUrK9AqGgmZwaMK5yAxbfUl4D9Z1
|
|
6ED1Nmb2EEJSDA7HupECEZOszmmGy8ydSiKzXuSqZ0DLX+LqBBP6YTvCH4w4vyh6
|
|
7KZWLEr7uRQ9/fTqlGFf
|
|
=WJIj
|
|
-----END PGP SIGNATURE-----
|