FreeBSD 8.4-RELEASE Errata

+FreeBSD 8.4-RELEASE Errata
FreeBSD 8.4-RELEASE Errata
The FreeBSD Project
Copyright © 2013 The FreeBSD Documentation Project
FreeBSD is a registered trademark of the FreeBSD Foundation.
Intel, Celeron, EtherExpress, i386, @@ -14,7 +14,7 @@ as trademarks. Where those designations appear in this document, and the FreeBSD Project was aware of the trademark claim, the designations have been followed by the “™” or the - “®” symbol.
Last modified on 2013-06-07 by hrs.
Table of Contents
1. Introduction
2. Security Advisories
3. Open Issues
4. Late-Breaking News and Corrections
Abstract
This document lists errata items for FreeBSD 8.4-RELEASE, + “®” symbol.
Last modified on 2013-06-08 by hrs.

Table of Contents

1. Introduction
2. Security Advisories
3. Open Issues
4. Late-Breaking News and Corrections

Abstract

This document lists errata items for FreeBSD 8.4-RELEASE, containing significant information discovered after the release or too late in the release cycle to be otherwise included in the release documentation. @@ -37,7 +37,19 @@ contain up-to-date copies of this document (as of the time of the snapshot).

For a list of all FreeBSD CERT security advisories, see http://www.FreeBSD.org/security/ or ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/.

2. Security Advisories

The following security advisories pertain to FreeBSD 8.4-RELEASE. For more information, consult the individual advisories available from - http://security.FreeBSD.org/.

Advisory	Date	Topic
SA-12:01.openssl	03 May 2012	OpenSSL multiple vulnerabilities
SA-12:02.crypt	30 May 2012	Incorrect crypt() hashing
SA-12:03.bind	12 June 2012	Incorrect handling of zero-length RDATA fields in named(8)
SA-12:04.sysret	12 June 2012	Privilege escalation when returning from kernel
SA-12:05.bind	06 August 2012	named(8) DNSSEC validation Denial of Service
SA-12:06.bind	22 November 2012	Multiple Denial of Service vulnerabilities with named(8)
SA-12:07.hostapd	22 November 2012	Insufficient message length validation for EAP-TLS messages
SA-12:08.li nux	22 November 2012	Linux compatibility layer input validation error
SA-13:02.libc	19 February 2013	glob(3) related resource exhaustion
SA-13:03.openssl	02 April 2013	OpenSSL multiple vulnerabilities
SA-13:04.bind	02 April 2013	BIND remote denial of service
SA-13:05.nfsserver	29 April 2013	Insufficient input validation in the NFS server

3. Open Issues

[20130607] The bge(4) network interface driver has an + http://security.FreeBSD.org/.

Advisory	Date	Topic
SA-12:01.openssl	03 May 2012	OpenSSL multiple vulnerabilities
SA-12:02.crypt	30 May 2012	Incorrect crypt() hashing
SA-12:03.bind	12 June 2012	Incorrect handling of zero-length RDATA fields in named(8)
SA-12:04.sysret	12 June 2012	Privilege escalation when returning from kernel
SA-12:05.bind	06 August 2012	named(8) DNSSEC validation Denial of Service
SA-12:06.bind	22 November 2012	Multiple Denial of Service vulnerabilities with named(8)
SA-12:07.hostapd	22 November 2012	Insufficient message length validation for EAP-TLS messages
SA-12:08.li nux	22 November 2012	Linux compatibility layer input validation error
SA-13:02.libc	19 February 2013	glob(3) related resource exhaustion
SA-13:03.openssl	02 April 2013	OpenSSL multiple vulnerabilities
SA-13:04.bind	02 April 2013	BIND remote denial of service
SA-13:05.nfsserver	29 April 2013	Insufficient input validation in the NFS server

3. Open Issues

[20130608] FreeBSD 8.4-RELEASE no longer supports FreeBSD CVS + repository. Some documents mistakenly refer to + RELEASE_8_4_0 as CVS tag for the release and + RELENG_8_4 as CVS branch tag for the + 8.4-RELEASE security branch. However, FreeBSD Project no longer + supports FreeBSD CVS repository and 8.4-RELEASE has been released by + using FreeBSD subversion repository instead. + RELENG_8_4 corresponds to + svn://svn.FreeBSD.org/base/releng/8.4, and + RELEASE_8_4_0 corresponds to + svn://svn.FreeBSD.org/base/release/8.4.0. + Please note that FreeBSD source tree for 8.4-RELEASE and its security + branch cannot be updated by using official CVSup servers.

[20130607] The bge(4) network interface driver has an issue when TSO (TCP Segmentation Offload) is enabled. It causes intermittent reset and re-initialization.

A workaround is disabling the TSO feature. One can disable it by adding the following line into the rc.conf(5)