head	1.2;
access;
symbols
	RELENG_9_1_0_RELEASE:1.1.4.4
	RELENG_8:1.1.0.6
	RELENG_9_1:1.1.0.4
	RELENG_9:1.1.0.2;
locks; strict;
comment	@# @;


1.2
date	2012.11.17.01.50.13;	author svnexp;	state Exp;
branches;
next	1.1;

1.1
date	2012.10.01.11.26.49;	author gabor;	state Exp;
branches
	1.1.2.1
	1.1.4.1
	1.1.6.1;
next	;

1.1.2.1
date	2012.10.02.06.37.46;	author gabor;	state dead;
branches;
next	1.1.2.2;

1.1.2.2
date	2012.10.02.06.37.46;	author gabor;	state Exp;
branches;
next	1.1.2.3;

1.1.2.3
date	2012.11.17.11.36.29;	author svnexp;	state Exp;
branches;
next	1.1.2.4;

1.1.2.4
date	2012.12.18.06.57.20;	author svnexp;	state Exp;
branches;
next	1.1.2.5;

1.1.2.5
date	2012.12.25.06.11.18;	author svnexp;	state Exp;
branches;
next	;

1.1.4.1
date	2012.10.11.15.49.42;	author gabor;	state dead;
branches;
next	1.1.4.2;

1.1.4.2
date	2012.10.11.15.49.42;	author gabor;	state Exp;
branches;
next	1.1.4.3;

1.1.4.3
date	2012.11.17.08.47.19;	author svnexp;	state Exp;
branches;
next	1.1.4.4;

1.1.4.4
date	2012.11.30.16.19.18;	author svnexp;	state dead;
branches;
next	;

1.1.6.1
date	2012.10.19.03.01.25;	author gjb;	state dead;
branches;
next	1.1.6.2;

1.1.6.2
date	2012.10.19.03.01.25;	author gjb;	state Exp;
branches;
next	1.1.6.3;

1.1.6.3
date	2012.11.17.10.36.13;	author svnexp;	state Exp;
branches;
next	;


desc
@@


1.2
log
@Switching exporter and resync
@
text
@<?xml version="1.0" encoding="iso-8859-1" standalone="no"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V4.2-Based Extension//EN" [
<!ENTITY % entities PUBLIC "-//FreeBSD//ENTITIES DocBook FreeBSD Entity Set//EN">
%entities;

<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN">
%release;

<![ %release.type.current [
<!ENTITY release "&release.current;">
]]>
<![ %release.type.snapshot [
<!ENTITY release "&release.prev;">
]]>
<![ %release.type.release [
<!ENTITY release "&release.current;">
]]>
]>

<!--
	FreeBSD errata document.  Unlike some of the other RELNOTESng
	files, this file should remain as a single SGML file, so that
	the dollar FreeBSD dollar header has a meaningful modification
	time.  This file is all but useless without a datestamp on it,
	so we'll take some extra care to make sure it has one.

	(If we didn't do this, then the file with the datestamp might
	not be the one that received the last change in the document.)

-->

<article>
  <articleinfo>
    <title>&os; &release; Errata </title>

    <corpauthor>
    The &os; Project
    </corpauthor>

    <pubdate>$FreeBSD: head/release/doc/en_US.ISO8859-1/errata/article.xml 241096 2012-10-01 11:26:49Z gabor $</pubdate>

    <copyright>
      <year>2000</year>
      <year>2001</year>
      <year>2002</year>
      <year>2003</year>
      <year>2004</year>
      <year>2005</year>
      <holder role="mailto:doc@@FreeBSD.org">The &os; Documentation Project</holder>
    </copyright>

    <legalnotice id="trademarks" role="trademarks">
      &tm-attrib.freebsd;
      &tm-attrib.intel;
      &tm-attrib.sparc;
      &tm-attrib.general;
    </legalnotice>
  </articleinfo>

  <abstract>
    <para>This document lists errata items for &os;
<![ %release.type.current [
      &release.current;,
]]>
<![ %release.type.snapshot [
      &release.prev;,
]]>
<![ %release.type.release [
      &release.current;,
]]>
      containing significant information discovered after the release
      or too late in the release cycle to be otherwise included in the
      release documentation.
      This information includes security advisories, as well as news
      relating to the software or documentation that could affect its
      operation or usability.  An up-to-date version of this document
      should always be consulted before installing this version of
      &os;.</para>

    <para>This errata document for &os;
<![ %release.type.current [
      &release.current;
]]>
<![ %release.type.snapshot [
      &release.prev;
]]>
<![ %release.type.release [
      &release.current;
]]>
      will be maintained until the release of &os; &release.next;.</para>
  </abstract>

  <sect1 id="intro">
    <title>Introduction</title>

    <para>This errata document contains <quote>late-breaking news</quote>
      about &os;
<![ %release.type.current [
      &release.current;.
]]>
<![ %release.type.snapshot [
      &release.prev;.
]]>
<![ %release.type.release [
      &release.current;.
]]>
      Before installing this version, it is important to consult this
      document to learn about any post-release discoveries or problems
      that may already have been found and fixed.</para>

    <para>Any version of this errata document actually distributed
      with the release (for example, on a CDROM distribution) will be
      out of date by definition, but other copies are kept updated on
      the Internet and should be consulted as the <quote>current
      errata</quote> for this release.  These other copies of the
      errata are located at <ulink
      url="http://www.FreeBSD.org/releases/"></ulink>, plus any sites
      which keep up-to-date mirrors of this location.</para>

    <para>Source and binary snapshots of &os; &release.branch; also
      contain up-to-date copies of this document (as of the time of
      the snapshot).</para>

    <para>For a list of all &os; CERT security advisories, see <ulink
      url="http://www.FreeBSD.org/security/"></ulink> or <ulink
      url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/"></ulink>.</para>

  </sect1>

  <sect1 id="security">
    <title>Security Advisories</title>

<![ %release.type.release [
    <para>No advisories.</para>
]]>

<![ %release.type.current [
    <para>No advisories.</para>
]]>

<![ %release.type.snapshot [
    <para>No advisories.</para>
]]>

  </sect1>

  <sect1 id="open-issues">
    <title>Open Issues</title>

<![ %release.type.current [
    <para>No open issues.</para>
]]>

<![ %release.type.release [
    <para>No open issues.</para>
]]>

<![ %release.type.snapshot [
    <para>No open issues.</para>
]]>

  </sect1>

  <sect1 id="late-news">
    <title>Late-Breaking News</title>

<![ %release.type.current [
    <para>No news.</para>
]]>

<![ %release.type.release [
    <para>No news.</para>
]]>

<![ %release.type.snapshot [
    <para>No news.</para>
]]>
  </sect1>

</article>
@


1.1
log
@SVN rev 241096 on 2012-10-01 11:26:49Z by gabor

- Rename .sgml files to .xml to track the recent doc changes

MFC after:	1 day
@
text
@d40 1
a40 1
    <pubdate>$FreeBSD$</pubdate>
@


1.1.6.1
log
@file article.xml was added on branch RELENG_8 on 2012-10-19 03:02:13 +0000
@
text
@d1 180
@


1.1.6.2
log
@SVN rev 241718 on 2012-10-19 03:01:25Z by gjb

- Rename .sgml files to .xml to track the recent doc changes.
- Fix Makefiles and entities where necessary to get build to
  complete without errors.

*** NOTE: This is _NOT_ an MFC, but direct commit to stable/8. ***

Hat:		doceng
@
text
@a0 179
<?xml version="1.0" encoding="iso-8859-1" standalone="no"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V4.2-Based Extension//EN" [
<!ENTITY % entities PUBLIC "-//FreeBSD//ENTITIES DocBook FreeBSD Entity Set//EN">
%entities;

<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN">
%release;

<![ %release.type.current [
<!ENTITY release "&release.current;">
]]>
<![ %release.type.snapshot [
<!ENTITY release "&release.prev;">
]]>
<![ %release.type.release [
<!ENTITY release "&release.current;">
<!ENTITY release.bugfix "8.2-RELEASE">
]]>
]>

<!--
	FreeBSD errata document.  Unlike some of the other RELNOTESng
	files, this file should remain as a single SGML file, so that
	the dollar FreeBSD dollar header has a meaningful modification
	time.  This file is all but useless without a datestamp on it,
	so we'll take some extra care to make sure it has one.

	(If we didn't do this, then the file with the datestamp might
	not be the one that received the last change in the document.)

-->

<article>
  <articleinfo>
    <title>&os; &release; Errata </title>

    <corpauthor>
    The &os; Project
    </corpauthor>

    <pubdate>$FreeBSD$</pubdate>

    <copyright>
      <year>2011</year>
      <holder role="mailto:doc@@FreeBSD.org">The &os; Documentation Project</holder>
    </copyright>

    <legalnotice id="trademarks" role="trademarks">
      &tm-attrib.freebsd;
      &tm-attrib.intel;
      &tm-attrib.sparc;
      &tm-attrib.general;
    </legalnotice>
  </articleinfo>

  <abstract>
    <para>This document lists errata items for &os;
<![ %release.type.current [
      &release.current;,
]]>
<![ %release.type.snapshot [
      &release.prev;,
]]>
<![ %release.type.release [
      &release.current;,
]]>
      containing significant information discovered after the release
      or too late in the release cycle to be otherwise included in the
      release documentation.
      This information includes security advisories, as well as news
      relating to the software or documentation that could affect its
      operation or usability.  An up-to-date version of this document
      should always be consulted before installing this version of
      &os;.</para>

    <para>This errata document for &os;
<![ %release.type.current [
      &release.current;
]]>
<![ %release.type.snapshot [
      &release.prev;
]]>
<![ %release.type.release [
      &release.current;
]]>
      will be maintained until the release of &os; &release.next;.</para>
  </abstract>

  <sect1 id="intro">
    <title>Introduction</title>

    <para>This errata document contains <quote>late-breaking news</quote>
      about &os;
<![ %release.type.current [
      &release.current;.
]]>
<![ %release.type.snapshot [
      &release.prev;.
]]>
<![ %release.type.release [
      &release.current;.
]]>
      Before installing this version, it is important to consult this
      document to learn about any post-release discoveries or problems
      that may already have been found and fixed.</para>

    <para>Any version of this errata document actually distributed
      with the release (for example, on a CDROM distribution) will be
      out of date by definition, but other copies are kept updated on
      the Internet and should be consulted as the <quote>current
      errata</quote> for this release.  These other copies of the
      errata are located at <ulink
      url="http://www.FreeBSD.org/releases/"></ulink>, plus any sites
      which keep up-to-date mirrors of this location.</para>

    <para>Source and binary snapshots of &os; &release.branch; also
      contain up-to-date copies of this document (as of the time of
      the snapshot).</para>

    <para>For a list of all &os; CERT security advisories, see <ulink
      url="http://www.FreeBSD.org/security/"></ulink> or <ulink
      url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/"></ulink>.</para>
  </sect1>

  <sect1 id="security">
    <title>Security Advisories</title>

    <para>No advisory.</para>

<!--
    <para>The following security advisories pertain to &os; &release.bugfix;.
      For more information, consult the individual advisories available from
      <ulink url="http://security.FreeBSD.org/"></ulink>.</para>

    <informaltable frame="none" pgwide="1">
      <tgroup cols="3">
	<colspec colwidth="1*"/>
	<colspec colwidth="1*"/>
	<colspec colwidth="3*"/>
	<thead>
	  <row>
	    <entry>Advisory</entry>
	    <entry>Date</entry>
	    <entry>Topic</entry>
	  </row>
	</thead>

	<tbody>
	      <row>
		<entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-09:15.ssl.asc"
			      >SA-09:15.ssl</ulink></entry>
		<entry>3&nbsp;Dec&nbsp;2009</entry>
		<entry><para>SSL protocol flaw</para></entry>
	      </row>
	</tbody>
      </tgroup>
    </informaltable>
-->
  </sect1>

  <sect1 id="open-issues">
    <title>Open Issues</title>

    <para>No open issue.</para>
  </sect1>

  <sect1 id="late-news">
    <title>Late-Breaking News and Corrections</title>

    <para>A bug in <application>OpenSSL</application> that could cause
      it to parse past the end of the message was found at the late
      stage of &release.bugfix; release process.  The &release.bugfix;
      includes a fix for this issue by importing relevant parts from
      the OpenSSL CVS.  This could be triggered by an incorrectly
      formatted ClientHello SSL/TLS handshake messages.  The details
      can be found at <ulink
      url="http://www.openssl.org/news/secadv_20110208.txt"></ulink>.</para>
  </sect1>
</article>
@


1.1.6.3
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242909
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242909 | dim | 2012-11-12 07:47:19 +0000 (Mon, 12 Nov 2012) | 20 lines
## SVN ##
## SVN ## MFC r242625:
## SVN ##
## SVN ## Remove duplicate const specifiers in many drivers (I hope I got all of
## SVN ## them, please let me know if not).  Most of these are of the form:
## SVN ##
## SVN ## static const struct bzzt_type {
## SVN ##       [...list of members...]
## SVN ## } const bzzt_devs[] = {
## SVN ##       [...list of initializers...]
## SVN ## };
## SVN ##
## SVN ## The second const is unnecessary, as arrays cannot be modified anyway,
## SVN ## and if the elements are const, the whole thing is const automatically
## SVN ## (e.g. it is placed in .rodata).
## SVN ##
## SVN ## I have verified this does not change the binary output of a full kernel
## SVN ## build (except for build timestamps embedded in the object files).
## SVN ##
## SVN ## Reviewed by:	yongari, marius
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d41 1
a41 1
    <pubdate>$FreeBSD: stable/8/release/doc/en_US.ISO8859-1/errata/article.xml 241718 2012-10-19 03:01:25Z gjb $</pubdate>
@


1.1.4.1
log
@file article.xml was added on branch RELENG_9_1 on 2012-10-11 22:24:09 +0000
@
text
@d1 180
@


1.1.4.2
log
@SVN rev 241445 on 2012-10-11 15:49:42Z by gabor

MFC r241096:
  - Rename files to track the XML migration in the doc tree and make the
    release notes build again

Approved by:	re (hrs)
@
text
@a0 339
<?xml version="1.0" encoding="iso-8859-1" standalone="no"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V4.2-Based Extension//EN" [
<!ENTITY % entities PUBLIC "-//FreeBSD//ENTITIES DocBook FreeBSD Entity Set//EN">
%entities;

<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN">
%release;

<![ %release.type.current [
<!ENTITY release "&release.current;">
]]>
<![ %release.type.snapshot [
<!ENTITY release "&release.prev;">
]]>
<![ %release.type.release [
<!ENTITY release "&release.current;">
]]>
]>

<!--
	FreeBSD errata document.  Unlike some of the other RELNOTESng
	files, this file should remain as a single SGML file, so that
	the dollar FreeBSD dollar header has a meaningful modification
	time.  This file is all but useless without a datestamp on it,
	so we'll take some extra care to make sure it has one.

	(If we didn't do this, then the file with the datestamp might
	not be the one that received the last change in the document.)

-->

<article>
  <articleinfo>
    <title>&os; &release; Errata </title>

    <corpauthor>
    The &os; Project
    </corpauthor>

    <pubdate>$FreeBSD$</pubdate>

    <copyright>
      <year>2012</year>
      <holder role="mailto:doc@@FreeBSD.org">The &os; Documentation Project</holder>
    </copyright>

    <legalnotice id="trademarks" role="trademarks">
      &tm-attrib.freebsd;
      &tm-attrib.intel;
      &tm-attrib.sparc;
      &tm-attrib.general;
    </legalnotice>
  </articleinfo>

  <abstract>
    <para>This document lists errata items for &os;
<![ %release.type.current [
      &release.current;,
]]>
<![ %release.type.snapshot [
      &release.prev;,
]]>
<![ %release.type.release [
      &release.current;,
]]>
      containing significant information discovered after the release
      or too late in the release cycle to be otherwise included in the
      release documentation.
      This information includes security advisories, as well as news
      relating to the software or documentation that could affect its
      operation or usability.  An up-to-date version of this document
      should always be consulted before installing this version of
      &os;.</para>

    <para>This errata document for &os;
<![ %release.type.current [
      &release.current;
]]>
<![ %release.type.snapshot [
      &release.prev;
]]>
<![ %release.type.release [
      &release.current;
]]>
      will be maintained until the release of &os; &release.next;.</para>
  </abstract>

  <sect1 id="intro">
    <title>Introduction</title>

    <para>This errata document contains <quote>late-breaking news</quote>
      about &os;
<![ %release.type.current [
      &release.current;.
]]>
<![ %release.type.snapshot [
      &release.prev;.
]]>
<![ %release.type.release [
      &release.current;.
]]>
      Before installing this version, it is important to consult this
      document to learn about any post-release discoveries or problems
      that may already have been found and fixed.</para>

    <para>Any version of this errata document actually distributed
      with the release (for example, on a CDROM distribution) will be
      out of date by definition, but other copies are kept updated on
      the Internet and should be consulted as the <quote>current
      errata</quote> for this release.  These other copies of the
      errata are located at <ulink
      url="http://www.FreeBSD.org/releases/"></ulink>, plus any sites
      which keep up-to-date mirrors of this location.</para>

    <para>Source and binary snapshots of &os; &release.branch; also
      contain up-to-date copies of this document (as of the time of
      the snapshot).</para>

    <para>For a list of all &os; CERT security advisories, see <ulink
      url="http://www.FreeBSD.org/security/"></ulink> or <ulink
      url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/"></ulink>.</para>

  </sect1>

  <sect1 id="security">
    <title>Security Advisories</title>

    <para>Problems described in the following security advisories have
      been fixed in &release.current;.  For more information, consult
      the individual advisories available from <ulink
	url="http://security.FreeBSD.org/"></ulink>.</para>

    <informaltable frame="none" pgwide="1">
      <tgroup cols="3">
      <colspec colwidth="1*"/>
      <colspec colwidth="1*"/>
      <colspec colwidth="3*"/>

      <thead>
	  <row>
	    <entry>Advisory</entry>
	    <entry>Date</entry>
	    <entry>Topic</entry>
	  </row>
	</thead>

	<tbody>
	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:01.mountd.asc"
		>SA-11:01.mountd</ulink></entry>
	    <entry>20&nbsp;April&nbsp;2011</entry>
	    <entry><para>Network ACL mishandling in &man.mountd.8;</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:02.bind.asc"
		>SA-11:02.bind</ulink></entry>
	    <entry>28&nbsp;May&nbsp;2011</entry>
	    <entry><para>BIND remote DoS with large RRSIG RRsets and negative
		caching</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:04.compress.asc"
		>SA-11:04.compress</ulink></entry>
	    <entry>28&nbsp;September&nbsp;2011</entry>
	    <entry><para>Errors handling corrupt compress file in
		&man.compress.1; and &man.gzip.1;</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:05.unix.asc"
		>SA-11:05.unix</ulink></entry>
	    <entry>28&nbsp;September&nbsp;2011</entry>
	    <entry><para>Buffer overflow in handling of UNIX socket
		addresses</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:06.bind.asc"
		>SA-11:06.bind</ulink></entry>
	    <entry>23&nbsp;December&nbsp;2011</entry>
	    <entry><para>Remote packet Denial of Service against &man.named.8;
		servers</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:07.chroot.asc"
		>SA-11:07.chroot</ulink></entry>
	    <entry>23&nbsp;December&nbsp;2011</entry>
	    <entry><para>Code execution via chrooted ftpd</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc"
		>SA-11:08.telnetd</ulink></entry>
	    <entry>23&nbsp;December&nbsp;2011</entry>
	    <entry><para>telnetd code execution vulnerability</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:09.pam_ssh.asc"
		>SA-11:09.pam_ssh</ulink></entry>
	    <entry>23&nbsp;December&nbsp;2011</entry>
	    <entry><para>pam_ssh improperly grants access when user account has
		unencrypted SSH private keys</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:10.pam.asc"
		>SA-11:10.pam</ulink></entry>
	    <entry>23&nbsp;December&nbsp;2011</entry>
	    <entry><para><function>pam_start()</function> does not validate
		service names</para></entry>
	  </row>
	</tbody>
      </tgroup>
    </informaltable>
  </sect1>

  <sect1 id="open-issues">
    <title>Open Issues</title>

    <itemizedlist>
      <listitem>
	<para>In some releases prior to &release.current;, upgrading
	  by using &man.freebsd-update.8; can fail.  This issue has
	  been fixed by a change in Errata Notice EN-12:01.  For more
	  information, see <ulink
	    url="http://security.freebsd.org/advisories/FreeBSD-EN-12:01.freebsd-update.asc"></ulink></para>
      </listitem>

      <listitem>
	<para arch="amd64,i386">&os; &release.current; includes
	  several changes to improve resource management of PCI
	  devices.  Some x86 machines may not boot or may have devices
	  that no longer attach when using ACPI as a result of these
	  changes.  This can be worked around by setting a
	  &man.loader.8; tunable
	  <varname>debug.acpi.disabled</varname> to
	  <literal>hostres</literal>.  To do this, enter the following
	  lines at the loader prompt:</para>

	<screen>set debug.acpi.disabled="hostres"
boot</screen>

	<para>Or, put the following line into
	  <filename>/boot/loader.conf</filename>:</para>

	<programlisting>debug.acpi.disabled="hostres"</programlisting>
      </listitem>

      <listitem>
	<para>A &man.devctl.4; event upon arrival of a &man.ugen.4;
	  device has been changed.  The event now includes
	  <literal>ugen</literal> and <literal>cdev</literal>
	  variables instead of <literal>device-name</literal>.  This
	  change can prevent the following &man.devd.8; rule which
	  worked in a previous releases from working:</para>

	<programlisting>attach 0 {
	match "device-name" "ugen[0-9]+.[0-9]+";
	action "/path/to/script /dev/$device-name";
}</programlisting>

	<para>This should be updated to the following:</para>

	<programlisting>attach 0 {
	match "subsystem" "DEVICE";
	match "type" "ATTACH";
	match "cdev" "ugen[0-9]+.[0-9]+";
	action "/path/to/script /dev/$cdev";
}</programlisting>
      </listitem>

      <listitem>
	<para>The &os; &release.current; Release Notes should have
	  mentioned that SSM (Source-Specific Multicast) MLDv2 now
	  uses <literal>ALLOW_NEW_SOURCES</literal> and
	  <literal>BLOCK_OLD_SOURCES</literal> record types to signal
	  a join or a leave by default.  This conforms RFC 4604,
	  <quote>Using Internet Group Management Protocol Version 3
	  (IGMPv3) and Multicast Listener Discovery Protocol Version 2
	  (MLDv2) for Source-Specific Multicast</quote>.  A new
	  &man.sysctl.8; variable
	  <varname>net.inet6.mld.use_allow</varname> which controls
	  the behavior has been added.  The default value is
	  <literal>1</literal> (use
	  <literal>ALLOW_NEW_SOURCES</literal> and
	  <literal>BLOCK_OLD_SOURCES</literal>).</para>
      </listitem>

      <listitem>
	<para>&release.current; fails to configure an interface
	  specified in the &man.rc.conf.5; variable
	  <varname>ipv6_prefix_<replaceable>IF</replaceable></varname>
	  when the interface does not have a corresponding
	  <varname>ifconfig_<replaceable>IF</replaceable>_ipv6</varname>
	  variable.  This problem will be fixed in the future
	  releases.  To work around this problem on &release.current;,
	  add an
	  <varname>ifconfig_<replaceable>IF</replaceable>_ipv6</varname>
	  line for each interface specified in
	  <varname>ipv6_prefix_<replaceable>IF</replaceable></varname>
	  as the following:</para>

	<programlisting>ipv6_prefix_em0="2001:db8:1:0 2001:db8:2:0"
ifconfig_em0_ipv6="inet6 auto_linklocal"</programlisting>
      </listitem>

      <listitem>
	<para>In &release.current; the &os; USB subsystem supports USB
	  3.0 by the &man.xhci.4; driver.  However, a bug that could
	  prevent it from working with a USB 3.0 hub has been found
	  and fixed after the release date.  This means
	  &release.current; and prior do not work with a USB 3.0 hub.
	  This problem has been fixed in HEAD and will be merged into
	  the 9-STABLE branch.</para>
      </listitem>
    </itemizedlist>
  </sect1>

  <sect1 id="late-news">
    <title>Late-Breaking News</title>

<![ %release.type.current [
    <para>No news.</para>
]]>

<![ %release.type.release [
    <para>No news.</para>
]]>

<![ %release.type.snapshot [
    <para>No news.</para>
]]>
  </sect1>

</article>
@


1.1.4.3
log
@Switch importer
@
text
@d40 1
a40 1
    <pubdate>$FreeBSD: releng/9.1/release/doc/en_US.ISO8859-1/errata/article.xml 241445 2012-10-11 15:49:42Z gabor $</pubdate>
@


1.1.4.4
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/243705
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r243705 | hrs | 2012-11-30 16:15:35 +0000 (Fri, 30 Nov 2012) | 18 lines
## SVN ##
## SVN ## - Bump versions and revert XML migration of the release documents in
## SVN ##   releng/9.1 branch.  The doc tree release/9.1.0 for this release still uses
## SVN ##   SGML toolchain[1].
## SVN ##
## SVN ## - Add SVNROOT{BASE,SRC,DOC,PORTS} for subversion repository URLs and
## SVN ##   BRANCH{SRC,DOC,PORTS} for the branches to generate-release.sh, and
## SVN ##   remove -p, -r, -d options.  The revision to be built should be specified
## SVN ##   in the URL.
## SVN ##
## SVN ## - Add {WORLD,KERNEL}_FLAGS to generate-release.sh.  These were supported in
## SVN ##   the old release build framework.
## SVN ##
## SVN ## - Disable to use binary package for docproj port during a release build.
## SVN ##   This package should be built successfully.
## SVN ##
## SVN ## Pointy hat to:	hrs [1]
## SVN ## Approved by:	re (implicitly)
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@@


1.1.2.1
log
@file article.xml was added on branch RELENG_9 on 2012-10-02 06:38:22 +0000
@
text
@d1 180
@


1.1.2.2
log
@SVN rev 241122 on 2012-10-02 06:37:46Z by gabor

MFC r241096:
  - Rename .sgml files to .xml to track the recent doc changes
@
text
@a0 339
<?xml version="1.0" encoding="iso-8859-1" standalone="no"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V4.2-Based Extension//EN" [
<!ENTITY % entities PUBLIC "-//FreeBSD//ENTITIES DocBook FreeBSD Entity Set//EN">
%entities;

<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN">
%release;

<![ %release.type.current [
<!ENTITY release "&release.current;">
]]>
<![ %release.type.snapshot [
<!ENTITY release "&release.prev;">
]]>
<![ %release.type.release [
<!ENTITY release "&release.current;">
]]>
]>

<!--
	FreeBSD errata document.  Unlike some of the other RELNOTESng
	files, this file should remain as a single SGML file, so that
	the dollar FreeBSD dollar header has a meaningful modification
	time.  This file is all but useless without a datestamp on it,
	so we'll take some extra care to make sure it has one.

	(If we didn't do this, then the file with the datestamp might
	not be the one that received the last change in the document.)

-->

<article>
  <articleinfo>
    <title>&os; &release; Errata </title>

    <corpauthor>
    The &os; Project
    </corpauthor>

    <pubdate>$FreeBSD$</pubdate>

    <copyright>
      <year>2012</year>
      <holder role="mailto:doc@@FreeBSD.org">The &os; Documentation Project</holder>
    </copyright>

    <legalnotice id="trademarks" role="trademarks">
      &tm-attrib.freebsd;
      &tm-attrib.intel;
      &tm-attrib.sparc;
      &tm-attrib.general;
    </legalnotice>
  </articleinfo>

  <abstract>
    <para>This document lists errata items for &os;
<![ %release.type.current [
      &release.current;,
]]>
<![ %release.type.snapshot [
      &release.prev;,
]]>
<![ %release.type.release [
      &release.current;,
]]>
      containing significant information discovered after the release
      or too late in the release cycle to be otherwise included in the
      release documentation.
      This information includes security advisories, as well as news
      relating to the software or documentation that could affect its
      operation or usability.  An up-to-date version of this document
      should always be consulted before installing this version of
      &os;.</para>

    <para>This errata document for &os;
<![ %release.type.current [
      &release.current;
]]>
<![ %release.type.snapshot [
      &release.prev;
]]>
<![ %release.type.release [
      &release.current;
]]>
      will be maintained until the release of &os; &release.next;.</para>
  </abstract>

  <sect1 id="intro">
    <title>Introduction</title>

    <para>This errata document contains <quote>late-breaking news</quote>
      about &os;
<![ %release.type.current [
      &release.current;.
]]>
<![ %release.type.snapshot [
      &release.prev;.
]]>
<![ %release.type.release [
      &release.current;.
]]>
      Before installing this version, it is important to consult this
      document to learn about any post-release discoveries or problems
      that may already have been found and fixed.</para>

    <para>Any version of this errata document actually distributed
      with the release (for example, on a CDROM distribution) will be
      out of date by definition, but other copies are kept updated on
      the Internet and should be consulted as the <quote>current
      errata</quote> for this release.  These other copies of the
      errata are located at <ulink
      url="http://www.FreeBSD.org/releases/"></ulink>, plus any sites
      which keep up-to-date mirrors of this location.</para>

    <para>Source and binary snapshots of &os; &release.branch; also
      contain up-to-date copies of this document (as of the time of
      the snapshot).</para>

    <para>For a list of all &os; CERT security advisories, see <ulink
      url="http://www.FreeBSD.org/security/"></ulink> or <ulink
      url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/"></ulink>.</para>

  </sect1>

  <sect1 id="security">
    <title>Security Advisories</title>

    <para>Problems described in the following security advisories have
      been fixed in &release.current;.  For more information, consult
      the individual advisories available from <ulink
	url="http://security.FreeBSD.org/"></ulink>.</para>

    <informaltable frame="none" pgwide="1">
      <tgroup cols="3">
      <colspec colwidth="1*"/>
      <colspec colwidth="1*"/>
      <colspec colwidth="3*"/>

      <thead>
	  <row>
	    <entry>Advisory</entry>
	    <entry>Date</entry>
	    <entry>Topic</entry>
	  </row>
	</thead>

	<tbody>
	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:01.mountd.asc"
		>SA-11:01.mountd</ulink></entry>
	    <entry>20&nbsp;April&nbsp;2011</entry>
	    <entry><para>Network ACL mishandling in &man.mountd.8;</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:02.bind.asc"
		>SA-11:02.bind</ulink></entry>
	    <entry>28&nbsp;May&nbsp;2011</entry>
	    <entry><para>BIND remote DoS with large RRSIG RRsets and negative
		caching</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:04.compress.asc"
		>SA-11:04.compress</ulink></entry>
	    <entry>28&nbsp;September&nbsp;2011</entry>
	    <entry><para>Errors handling corrupt compress file in
		&man.compress.1; and &man.gzip.1;</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:05.unix.asc"
		>SA-11:05.unix</ulink></entry>
	    <entry>28&nbsp;September&nbsp;2011</entry>
	    <entry><para>Buffer overflow in handling of UNIX socket
		addresses</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:06.bind.asc"
		>SA-11:06.bind</ulink></entry>
	    <entry>23&nbsp;December&nbsp;2011</entry>
	    <entry><para>Remote packet Denial of Service against &man.named.8;
		servers</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:07.chroot.asc"
		>SA-11:07.chroot</ulink></entry>
	    <entry>23&nbsp;December&nbsp;2011</entry>
	    <entry><para>Code execution via chrooted ftpd</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc"
		>SA-11:08.telnetd</ulink></entry>
	    <entry>23&nbsp;December&nbsp;2011</entry>
	    <entry><para>telnetd code execution vulnerability</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:09.pam_ssh.asc"
		>SA-11:09.pam_ssh</ulink></entry>
	    <entry>23&nbsp;December&nbsp;2011</entry>
	    <entry><para>pam_ssh improperly grants access when user account has
		unencrypted SSH private keys</para></entry>
	  </row>

	  <row>
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-11:10.pam.asc"
		>SA-11:10.pam</ulink></entry>
	    <entry>23&nbsp;December&nbsp;2011</entry>
	    <entry><para><function>pam_start()</function> does not validate
		service names</para></entry>
	  </row>
	</tbody>
      </tgroup>
    </informaltable>
  </sect1>

  <sect1 id="open-issues">
    <title>Open Issues</title>

    <itemizedlist>
      <listitem>
	<para>In some releases prior to &release.current;, upgrading
	  by using &man.freebsd-update.8; can fail.  This issue has
	  been fixed by a change in Errata Notice EN-12:01.  For more
	  information, see <ulink
	    url="http://security.freebsd.org/advisories/FreeBSD-EN-12:01.freebsd-update.asc"></ulink></para>
      </listitem>

      <listitem>
	<para arch="amd64,i386">&os; &release.current; includes
	  several changes to improve resource management of PCI
	  devices.  Some x86 machines may not boot or may have devices
	  that no longer attach when using ACPI as a result of these
	  changes.  This can be worked around by setting a
	  &man.loader.8; tunable
	  <varname>debug.acpi.disabled</varname> to
	  <literal>hostres</literal>.  To do this, enter the following
	  lines at the loader prompt:</para>

	<screen>set debug.acpi.disabled="hostres"
boot</screen>

	<para>Or, put the following line into
	  <filename>/boot/loader.conf</filename>:</para>

	<programlisting>debug.acpi.disabled="hostres"</programlisting>
      </listitem>

      <listitem>
	<para>A &man.devctl.4; event upon arrival of a &man.ugen.4;
	  device has been changed.  The event now includes
	  <literal>ugen</literal> and <literal>cdev</literal>
	  variables instead of <literal>device-name</literal>.  This
	  change can prevent the following &man.devd.8; rule which
	  worked in a previous releases from working:</para>

	<programlisting>attach 0 {
	match "device-name" "ugen[0-9]+.[0-9]+";
	action "/path/to/script /dev/$device-name";
}</programlisting>

	<para>This should be updated to the following:</para>

	<programlisting>attach 0 {
	match "subsystem" "DEVICE";
	match "type" "ATTACH";
	match "cdev" "ugen[0-9]+.[0-9]+";
	action "/path/to/script /dev/$cdev";
}</programlisting>
      </listitem>

      <listitem>
	<para>The &os; &release.current; Release Notes should have
	  mentioned that SSM (Source-Specific Multicast) MLDv2 now
	  uses <literal>ALLOW_NEW_SOURCES</literal> and
	  <literal>BLOCK_OLD_SOURCES</literal> record types to signal
	  a join or a leave by default.  This conforms RFC 4604,
	  <quote>Using Internet Group Management Protocol Version 3
	  (IGMPv3) and Multicast Listener Discovery Protocol Version 2
	  (MLDv2) for Source-Specific Multicast</quote>.  A new
	  &man.sysctl.8; variable
	  <varname>net.inet6.mld.use_allow</varname> which controls
	  the behavior has been added.  The default value is
	  <literal>1</literal> (use
	  <literal>ALLOW_NEW_SOURCES</literal> and
	  <literal>BLOCK_OLD_SOURCES</literal>).</para>
      </listitem>

      <listitem>
	<para>&release.current; fails to configure an interface
	  specified in the &man.rc.conf.5; variable
	  <varname>ipv6_prefix_<replaceable>IF</replaceable></varname>
	  when the interface does not have a corresponding
	  <varname>ifconfig_<replaceable>IF</replaceable>_ipv6</varname>
	  variable.  This problem will be fixed in the future
	  releases.  To work around this problem on &release.current;,
	  add an
	  <varname>ifconfig_<replaceable>IF</replaceable>_ipv6</varname>
	  line for each interface specified in
	  <varname>ipv6_prefix_<replaceable>IF</replaceable></varname>
	  as the following:</para>

	<programlisting>ipv6_prefix_em0="2001:db8:1:0 2001:db8:2:0"
ifconfig_em0_ipv6="inet6 auto_linklocal"</programlisting>
      </listitem>

      <listitem>
	<para>In &release.current; the &os; USB subsystem supports USB
	  3.0 by the &man.xhci.4; driver.  However, a bug that could
	  prevent it from working with a USB 3.0 hub has been found
	  and fixed after the release date.  This means
	  &release.current; and prior do not work with a USB 3.0 hub.
	  This problem has been fixed in HEAD and will be merged into
	  the 9-STABLE branch.</para>
      </listitem>
    </itemizedlist>
  </sect1>

  <sect1 id="late-news">
    <title>Late-Breaking News</title>

<![ %release.type.current [
    <para>No news.</para>
]]>

<![ %release.type.release [
    <para>No news.</para>
]]>

<![ %release.type.snapshot [
    <para>No news.</para>
]]>
  </sect1>

</article>
@


1.1.2.3
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242902
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242902 | dteske | 2012-11-11 23:29:45 +0000 (Sun, 11 Nov 2012) | 10 lines
## SVN ##
## SVN ## Fix a regression introduced by SVN r211417 that saw the breakage of a feature
## SVN ## documented in usr.sbin/sysinstall/help/shortcuts.hlp (reproduced below):
## SVN ##
## SVN ## If /usr/sbin/sysinstall is linked to another filename, say
## SVN ## `/usr/local/bin/configPackages', then the basename will be used
## SVN ## as an implicit command name.
## SVN ##
## SVN ## Reviewed by:	adrian (co-mentor)
## SVN ## Approved by:	adrian (co-mentor)
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d40 1
a40 1
    <pubdate>$FreeBSD: stable/9/release/doc/en_US.ISO8859-1/errata/article.xml 241122 2012-10-02 06:37:46Z gabor $</pubdate>
@


1.1.2.4
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/244379
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r244379 | hrs | 2012-12-18 06:55:13 +0000 (Tue, 18 Dec 2012) | 4 lines
## SVN ##
## SVN ## - Trim old entries.
## SVN ## - Update errata items.
## SVN ## - Bump &release.*;
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d1 19
a30 4
<?xml version="1.0" encoding="iso-8859-1" standalone="no"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V4.2-Based Extension//EN" [
<!ENTITY % entities PUBLIC "-//FreeBSD//ENTITIES DocBook FreeBSD Entity Set//EN">
%entities;
a31 3
<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN">
%release;
]>
d34 1
a34 11
    <title>&os;
<![ %release.type.current [
    &release.current;
]]>
<![ %release.type.snapshot [
    &release.prev;
]]>
<![ %release.type.release [
    &release.current;
]]>
    Errata</title>
d40 1
a40 1
    <pubdate>$FreeBSD: stable/9/release/doc/en_US.ISO8859-1/errata/article.xml 244379 2012-12-18 06:55:13Z hrs $</pubdate>
d135 5
a139 4
	<colspec colwidth="1*" />
	<colspec colwidth="1*" />
	<colspec colwidth="3*" />
	<thead>
d149 4
a152 4
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-12:01.openssl.asc"
		>SA-12:01.openssl</ulink></entry>
	    <entry>3&nbsp;May&nbsp;2012</entry>
	    <entry><para>OpenSSL multiple vulnerabilities</para></entry>
d156 5
a160 4
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-12:02.crypt.asc"
		>SA-12:02.crypt</ulink></entry>
	    <entry>30&nbsp;May&nbsp;2012</entry>
	    <entry><para>Incorrect <function>crypt()</function> hashing</para></entry>
d164 5
a168 4
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-12:03.bind.asc"
		>SA-12:03.bind</ulink></entry>
	    <entry>12&nbsp;June&nbsp;2012</entry>
	    <entry><para>Incorrect handling of zero-length RDATA fields in &man.named.8;</para></entry>
d172 5
a176 4
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-12:04.sysret.asc"
		>SA-12:04.sysret</ulink></entry>
	    <entry>12&nbsp;June&nbsp;2012</entry>
	    <entry><para>Privilege escalation when returning from kernel</para></entry>
d180 5
a184 4
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-12:05.bind.asc"
		>SA-12:05.bind</ulink></entry>
	    <entry>6&nbsp;August&nbsp;2012</entry>
	    <entry><para>&man.named.8; DNSSEC validation Denial of Service</para></entry>
d188 4
a191 4
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-12:06.bind.asc"
		>SA-12:06.bind</ulink></entry>
	    <entry>22&nbsp;November&nbsp;2012</entry>
	    <entry><para>Multiple Denial of Service vulnerabilities with &man.named.8;</para></entry>
d195 4
a198 4
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-12:07.hostapd.asc"
		>SA-12:07.hostapd</ulink></entry>
	    <entry>22&nbsp;November&nbsp;2012</entry>
	    <entry><para>Insufficient message length validation for EAP-TLS messages</para></entry>
d202 13
a214 4
	    <entry><ulink url="http://security.freebsd.org/advisories/FreeBSD-SA-12:08.linux.asc"
		>SA-12:08.linux</ulink></entry>
	    <entry>22&nbsp;November&nbsp;2012</entry>
	    <entry><para>Linux compatibility layer input validation error</para></entry>
d221 102
d326 5
d332 5
d338 1
@


1.1.2.5
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/244671
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r244671 | hrs | 2012-12-25 06:07:34 +0000 (Tue, 25 Dec 2012) | 4 lines
## SVN ##
## SVN ## Add Errata items:
## SVN ##         - mfi(4) driver overflow issue,
## SVN ##         - typos in Installation Instructions.
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d38 1
a38 1
    <pubdate>$FreeBSD: stable/9/release/doc/en_US.ISO8859-1/errata/article.xml 244671 2012-12-25 06:07:34Z hrs $</pubdate>
d208 1
a208 28
    <para>[November 2, 2012] The current &man.mfi.4; driver has an
      overflow bug when handling disks larger than 2^32 sectors in
      SYSPD volumes, also known as JBODs, which will cause data
      corruption.  This bug has been fixed on this &os;-CURRENT but
      was too late for inclusion in this release.  An Errata Notice
      for &release.current; is planned.</para>

    <para>[December 25, 2012] The Installtion Instructions had the
      following wrong information about upgrading procedure.  All of
      them have been fixed in the online version.</para>

    <itemizedlist>
      <listitem>
	<para>The link URL of <quote>upgrading section in the Release
	    Notes</quote>, branch names where upcoming Security
	  Advisories or Errata Notices will be applied, and a
	  command line argument of &man.freebsd-update.8; were ones
	  for 9.0-RELEASE, not for &release.current;.</para>
      </listitem>

      <listitem>
	<para>The list of releases supported by &man.freebsd-update.8;
	  utility were incorrect.  For 9.X, The following versions are
	  supported: <literal>9.0-RELEASE</literal>,
	  <literal>9.1-BETA1</literal>, and
	  <literal>9.1-RC[123]</literal>.</para>
      </listitem>
    </itemizedlist>
@