xref: /freebsd-10-stable/release/doc/en_US.ISO8859-1/errata/article.xml

<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
        "http://www.FreeBSD.org/XML/share/xml/freebsd50.dtd" [
<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN"
        "http://www.FreeBSD.org/release/XML/release.ent">
%release;
]>

<article xmlns="http://docbook.org/ns/docbook"
	 xmlns:xlink="http://www.w3.org/1999/xlink"
	 version="5.0">
  <info>
    <title>&os; &release.prev; Errata </title>

    <author><orgname>The &os; Project</orgname></author>

    <pubdate>$FreeBSD: stable/10/release/doc/en_US.ISO8859-1/errata/article.xml 260832 2014-01-17 21:37:55Z delphij $</pubdate>

    <copyright>
      <year>2014</year>

      <holder role="mailto:doc@FreeBSD.org">The &os; Documentation Project</holder>
    </copyright>

    <legalnotice xml:id="trademarks" role="trademarks">
      &tm-attrib.freebsd;
      &tm-attrib.intel;
      &tm-attrib.sparc;
      &tm-attrib.general;
    </legalnotice>

    <abstract>
      <para>This document lists errata items for &os; &release.prev;,
	containing significant information discovered after the release
	or too late in the release cycle to be otherwise included in the
	release documentation.
	This information includes security advisories, as well as news
	relating to the software or documentation that could affect its
	operation or usability.  An up-to-date version of this document
	should always be consulted before installing this version of
	&os;.</para>

      <para>This errata document for &os; &release.prev;
	will be maintained until the release of &os; &release.next;.</para>
    </abstract>
  </info>

  <sect1 xml:id="intro">
    <title>Introduction</title>

    <para>This errata document contains <quote>late-breaking news</quote>
      about &os; &release.prev;
      Before installing this version, it is important to consult this
      document to learn about any post-release discoveries or problems
      that may already have been found and fixed.</para>

    <para>Any version of this errata document actually distributed
      with the release (for example, on a CDROM distribution) will be
      out of date by definition, but other copies are kept updated on
      the Internet and should be consulted as the <quote>current
      errata</quote> for this release.  These other copies of the
      errata are located at
      <link xlink:href="http://www.FreeBSD.org/releases/" />,
      plus any sites
      which keep up-to-date mirrors of this location.</para>

    <para>Source and binary snapshots of &os; &release.branch; also
      contain up-to-date copies of this document (as of the time of
      the snapshot).</para>

    <para>For a list of all &os; CERT security advisories, see
      <link xlink:href="http://www.FreeBSD.org/security/" />
      or <link xlink:href="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/" />.</para>
  </sect1>

  <sect1 xml:id="security">
    <title>Security Advisories</title>

    <informaltable frame="none" pgwide="0">
      <tgroup cols="3">
	<colspec colwidth="1*" />
	<colspec colwidth="1*" />
	<colspec colwidth="3*" />
	<thead>
	  <row>
	    <entry>Advisory</entry>
	    <entry>Date</entry>
	    <entry>Topic</entry>
	  </row>
	</thead>

	<tbody>
	  <row>
	    <entry><link xlink:href="http://www.freebsd.org/security/advisories/FreeBSD-SA-13:14.openssh.asc"
	      >SA-13:14.openssh</link></entry>

	    <entry>19&nbsp;November&nbsp;2013</entry>

	    <entry><para>OpenSSH AES-GCM memory corruption
		vulnerability</para></entry>
	  </row>

	  <row>
	    <entry><link xlink:href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:01.bsnmpd.asc"
	      >SA-14:01.bsnmpd</link></entry>

	    <entry>14&nbsp;January&nbsp;2014</entry>

	    <entry><para>bsnmpd remote denial of service vulnerability</para></entry>
	  </row>

	  <row>
	    <entry><link xlink:href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:02.ntpd.asc"
	      >SA-14:02.ntpd</link></entry>

	    <entry>14&nbsp;January&nbsp;2014</entry>

	    <entry><para>ntpd distributed reflection Denial of Service vulnerability</para></entry>
	  </row>

	  <row>
	    <entry><link xlink:href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:03.openssl.asc"
	      >SA-14:03.openssl</link></entry>

	    <entry>14&nbsp;January&nbsp;2014</entry>

	    <entry><para>OpenSSL multiple vulnerabilities</para></entry>
	  </row>

	  <row>
	    <entry><link xlink:href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:04.bind.asc"
	      >SA-14:04.bind</link></entry>

	    <entry>14&nbsp;January&nbsp;2014</entry>

	    <entry><para>BIND remote denial of service vulnerability</para></entry>
	  </row>
	</tbody>
      </tgroup>
    </informaltable>
  </sect1>

  <sect1 xml:id="open-issues">
    <title>Open Issues</title>

    <itemizedlist>
      <listitem>
	<para>&os;/&arch.i386; &release.prev; running as a guest
	  operating system on <application>VirtualBox</application>
	  can have a problem with disk I/O access.  It depends on some
	  specific hardware configuration and does not depend on a
	  specific version of <application>VirtualBox</application> or
	  host operating system.</para>

	<para>It causes various errors and makes &os; quite unstable.
	  Although the cause is still unclear, disabling unmapped I/O
	  works as a workaround.  To disable it, choose <literal>Escape to
	    loader prompt</literal> in the boot menu and enter the following
	  lines from &man.loader.8; prompt, after
	  an <literal>OK</literal>:</para>

	<screen>set vfs.unmapped_buf_allowed=0
boot</screen>

	<para>Note that the following line has to be added to
	  <filename>/boot/loader.conf</filename> after a boot.
          It disables unmapped I/O at every boot:</para>

	<programlisting>vfs.unmapped_buf_allowed=0</programlisting>
      </listitem>

      <listitem>
	<para>A bug in <application>Heimdal</application> (an
	  implementation of <application>Kerberos</application>
	  authentication in &os; base system) has been fixed.  It
	  could cause an interoperability issue between
	  <application>Heimdal</application> and the other
	  implementations including <application>MIT
	  Kerberos</application>.  However, due to this fix,
	  <application>Heimdal</application> and some applications
	  which depend on it in the previous &os; releases do not work
	  with one in &release.prev; in certain cases.  Errata Notice
	  for the supported releases to fix it will be
	  released.</para>
      </listitem>

      <listitem>
	<para>A bug in &man.killall.1; has been discovered.  It
	  makes <userinput>killall -INT</userinput> to deliver
	  <literal>SIGTERM</literal> rather than the desired
	  <literal>SIGINT</literal>, and may cause blocking
	  behavior for scripts that uses it, as <literal>-I</literal>
	  means <quote>interactive</quote>.  A workaround of this
	  would be to use <literal>-SIGINT</literal> instead.
	  This bug has been fixed on &os;-CURRENT and will be fixed
	  in &os;-STABLE.</para>
      </listitem>
    </itemizedlist>
  </sect1>

  <sect1 xml:id="late-news">
    <title>Late-Breaking News</title>

    <para>No news.</para>
  </sect1>
</article>