FreeBSD 4.8-RELEASE Errata

The FreeBSD Project

$FreeBSD: src/release/doc/en_US.ISO8859-1/errata/article.sgml,v - 1.1.2.99 2003/04/04 06:51:06 bmah Exp $
+ 1.1.2.100 2003/04/04 07:39:47 bmah Exp $

This document lists errata items for FreeBSD 4.8-RELEASE, containing significant information discovered after the release or too late in the release cycle to be otherwise included in the release documentation. This information includes security advisories, as well as news relating to the software or documentation that could affect its operation or usability. An up-to-date version of this document should always be consulted before installing this version of FreeBSD.

This errata document for FreeBSD 4.8-RELEASE will be maintained until the release of FreeBSD 4.9-RELEASE.

1 Introduction

This errata document contains ``late-breaking news'' about FreeBSD 4.8-RELEASE. Before installing this version, it is important to consult this document to learn about any post-release discoveries or problems that may already have been found and fixed.

Any version of this errata document actually distributed with the release (for example, on a CDROM distribution) will be out of date by definition, but other copies are kept updated on the Internet and should be consulted as the ``current errata'' for this release. These other copies of the errata are located at http://www.FreeBSD.org/releases/, plus any sites which keep up-to-date mirrors of this location.

Source and binary snapshots of FreeBSD 4-STABLE also contain up-to-date copies of this document (as of the time of the snapshot).

For a list of all FreeBSD CERT security advisories, see http://www.FreeBSD.org/security/ or ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/.

2 Security Advisories

A buffer overflow in header parsing exists in older versions of sendmail. It could allow a remote attacker to create a specially-crafted message that may cause sendmail(8) to execute arbitrary code with the privileges of the user running it, typically root. More information, including pointers to patches, can be found in security advisory FreeBSD-SA-03:07. This problem was corrected for FreeBSD 4.8-RELEASE with a vendor patch and was corrected for FreeBSD 4.8-STABLE with the import of a new version of sendmail. However, these changes may not otherwise have been noted in the release documentation.

3 Late-Breaking News

Due to some problems discovered very late in the release + cycle, the ISO images and FTP install directories for + FreeBSD 4.8-RELEASE/i386 needed to be re-generated and + re-uploaded to the FTP mirror sites. For reference, the + final ISO images have checksums computed via + md5(1) as + follows:

+    MD5 (4.8-RELEASE-i386-disc1.iso) = c4e34b6a6be5cd1977ca206bf821c7fc
+    MD5 (4.8-RELEASE-i386-disc2.iso) = 93b09f97c01deead302557d7d24f87cb
+    MD5 (4.8-RELEASE-i386-mini.iso) = 5f0d2576dbb56d6ec85d49ac9fa4bbf9
+

Some parts of the documentation may incorrectly give the release date of FreeBSD 4.8-RELEASE as March 2003, rather than April 2003.

FreeBSD 4.8-RELEASE restores the ability to install from the installation media to a mly(4) device. (This capability was broken in FreeBSD 4.7-RELEASE.)

After installing GNOME, the default terminal font might be garbled. If this is the case, install the x11-fonts/bitstream-vera port, then restart GNOME. The new fonts - should take effect automatically. If they do not, edit your - current gnome-terminal profile, and select the Bitstream + should take effect automatically. If they do not, edit the + current gnome-terminal profile and select the Bitstream Vera Sans Mono font.

Due to space limitations, the awi(4) driver has been removed from the kernel used on the 1.44MB kern.flp i386 boot floppy. Because no module is available for this driver in FreeBSD 4.8-RELEASE, this means that it is generally not possible to install FreeBSD 4.8-RELEASE over an awi(4) network.

All users of FreeBSD 4-STABLE should subscribe to the <stable@FreeBSD.org> mailing list.