]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/blob - release/doc/en_US.ISO8859-1/errata/article.xml
Document the following security advisorires:
[FreeBSD/stable/10.git] / release / doc / en_US.ISO8859-1 / errata / article.xml
1 <?xml version="1.0" encoding="iso-8859-1"?>
2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
3   "http://www.FreeBSD.org/XML/share/xml/freebsd50.dtd" [
4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN"
5   "http://www.FreeBSD.org/release/XML/release.ent">
6 %release;
7 ]>
8
9 <article xmlns="http://docbook.org/ns/docbook"
10   xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
11
12   <info>
13     <title>&os; &release.prev; Errata </title>
14
15     <author><orgname>The &os; Project</orgname></author>
16
17     <pubdate>$FreeBSD$</pubdate>
18
19     <copyright>
20       <year>2014</year>
21
22       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
23         Project</holder>
24     </copyright>
25
26     <legalnotice xml:id="trademarks" role="trademarks">
27       &tm-attrib.freebsd;
28       &tm-attrib.intel;
29       &tm-attrib.sparc;
30       &tm-attrib.general;
31     </legalnotice>
32
33     <abstract>
34       <para>This document lists errata items for &os; &release.prev;,
35         containing significant information discovered after the
36         release or too late in the release cycle to be otherwise
37         included in the release documentation.  This information
38         includes security advisories, as well as news relating to the
39         software or documentation that could affect its operation or
40         usability.  An up-to-date version of this document should
41         always be consulted before installing this version of
42         &os;.</para>
43
44       <para>This errata document for &os; &release.prev; will be
45         maintained until the release of &os; &release.next;.</para>
46     </abstract>
47   </info>
48
49   <sect1 xml:id="intro">
50     <title>Introduction</title>
51
52     <para>This errata document contains <quote>late-breaking
53         news</quote> about &os; &release.prev; Before installing this
54       version, it is important to consult this document to learn about
55       any post-release discoveries or problems that may already have
56       been found and fixed.</para>
57
58     <para>Any version of this errata document actually distributed
59       with the release (for example, on a CDROM distribution) will be
60       out of date by definition, but other copies are kept updated on
61       the Internet and should be consulted as the <quote>current
62         errata</quote> for this release.  These other copies of the
63       errata are located at <link
64         xlink:href="http://www.FreeBSD.org/releases/" />, plus any
65       sites which keep up-to-date mirrors of this location.</para>
66
67     <para>Source and binary snapshots of &os; &release.branch; also
68       contain up-to-date copies of this document (as of the time of
69       the snapshot).</para>
70
71     <para>For a list of all &os; CERT security advisories, see <link
72         xlink:href="http://www.FreeBSD.org/security/"/> or <link
73       xlink:href="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/"/>.</para>
74   </sect1>
75
76   <sect1 xml:id="security">
77     <title>Security Advisories</title>
78
79     <informaltable frame="none" pgwide="0">
80       <tgroup cols="3">
81         <colspec colwidth="1*" />
82         <colspec colwidth="1*" />
83         <colspec colwidth="3*" />
84         <thead>
85           <row>
86             <entry>Advisory</entry>
87             <entry>Date</entry>
88             <entry>Topic</entry>
89           </row>
90         </thead>
91
92         <tbody>
93           <row>
94             <entry><link xlink:href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:27.stdio.asc">SA-14:27.stdio</link></entry>
95             <entry>10&nbsp;December&nbsp;2014</entry>
96             <entry><para>Buffer overflow in stdio</para></entry>
97           </row>
98
99           <row>
100             <entry><link xlink:href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc">SA-14:28.file</link></entry>
101             <entry>10&nbsp;December&nbsp;2014</entry>
102             <entry><para>Multiple vulnerabilities in &man.file.1; and
103                 &man.libmagic.3;</para></entry>
104           </row>
105
106           <row>
107             <entry><link xlink:href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:30.unbound.asc">SA-14:30.unbound</link></entry>
108             <entry>17&nbsp;December&nbsp;2014</entry>
109             <entry><para>Remote denial of service
110                 vulnerability</para></entry>
111           </row>
112
113           <row>
114             <entry><link xlink:href="http://www.freebsd.org/security/advisories/FreeBSD-SA-14:31.ntp.asc">SA-14:31.ntp</link></entry>
115             <entry>23&nbsp;December&nbsp;2014</entry>
116             <entry><para>Multiple vulnerabilities</para></entry>
117           </row>
118         </tbody>
119       </tgroup>
120     </informaltable>
121   </sect1>
122
123   <sect1 xml:id="open-issues">
124     <title>Open Issues</title>
125
126     <itemizedlist>
127       <listitem>
128         <para>&os;/&arch.i386; &release.prev; running as a guest
129           operating system on <application>VirtualBox</application>
130           can have a problem with disk I/O access.  It depends on some
131           specific hardware configuration and does not depend on a
132           specific version of <application>VirtualBox</application> or
133           host operating system.</para>
134
135         <para>It causes various errors and makes &os; quite unstable.
136           Although the cause is still unclear, disabling unmapped I/O
137           works as a workaround.  To disable it, choose
138           <literal>Escape to loader prompt</literal> in the boot menu
139           and enter the following lines from &man.loader.8; prompt,
140           after an <literal>OK</literal>:</para>
141
142         <screen>set vfs.unmapped_buf_allowed=0
143 boot</screen>
144
145         <para>Note that the following line has to be added to
146           <filename>/boot/loader.conf</filename> after a boot.  It
147           disables unmapped I/O at every boot:</para>
148
149         <programlisting>vfs.unmapped_buf_allowed=0</programlisting>
150
151         <para>[2014-04-03 update]  It has been reported that
152           instability may be present on virtual machines running
153           on other hypervisors, such as Xen or KVM.</para>
154       </listitem>
155     </itemizedlist>
156   </sect1>
157
158   <sect1 xml:id="late-news">
159     <title>Late-Breaking News</title>
160
161     <para>No news.</para>
162   </sect1>
163 </article>