diff --git a/share/security/advisories/FreeBSD-EN-13:05.freebsd-update.asc b/share/security/advisories/FreeBSD-EN-13:05.freebsd-update.asc new file mode 100644 index 0000000000..f743611bd5 --- /dev/null +++ b/share/security/advisories/FreeBSD-EN-13:05.freebsd-update.asc @@ -0,0 +1,146 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-13:05.freebsd-update Errata Notice + The FreeBSD Project + +Topic: Error in patch for FreeBSD-EN-13:04.freebsd-update + +Category: base +Module: freebsd-update +Announced: 2013-11-28 +Affects: All supported FreeBSD releases +Corrected: 2013-11-28 22:06:37 UTC (stable/10, 10.0-STABLE) + 2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA3-p2) + 2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA2-p2) + 2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA1-p3) + 2013-11-28 22:08:41 UTC (stable/9, 9.2-STABLE) + 2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RELEASE-p2) + 2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RC4-p2) + 2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RC3-p3) + 2013-11-28 22:12:48 UTC (releng/9.1, 9.1-RELEASE-p9) + 2013-11-28 22:08:41 UTC (stable/8, 8.4-STABLE) + 2013-11-28 22:12:48 UTC (releng/8.4, 8.4-RELEASE-p6) + 2013-11-28 22:12:48 UTC (releng/8.3, 8.3-RELEASE-p13) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +The freebsd-update(8) utility is used to download and apply binary diffs +for security and errata patches on systems installed from official FreeBSD +release CDs and DVDs. It can also be used to upgrade such systems to new +FreeBSD releases. + +In the preceding Errata Notice (FreeBSD-EN-13:04.freebsd-update), a change +was made to freebsd-update(8) to cause it to create directories appearing +in a new release before creating other filesystem objects; and to delete +directories which no longer appeared after other filesystem objects had +been removed. + +II. Problem Description + +An typographical error caused the directories needing to be deleted to be +incorrectly enumerated. In particular, the /var/empty directory was being +removed when upgrading from earlier releases to FreeBSD 10.0-BETA3. + +III. Impact + +After upgrading to FreeBSD 10.0-BETA3 some daemons, including sshd(8), +will not start. + +IV. Workaround + +To manually recreate the /var/empty directory on systems where it was +inadvertently removed, run the following commands: + +# mkdir /var/empty +# chflags schg /var/empty + +V. Solution + +Perform one of the following: + +1) Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date. + +2) To update your present system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch http://security.FreeBSD.org/patches/EN-13:05/freebsd-update.patch +# fetch http://security.FreeBSD.org/patches/EN-13:05/freebsd-update.patch.asc +# gpg --verify freebsd-update.patch.asc + +b) Apply the patch. + +# cd /usr/src +# patch < /path/to/patch + +c) Reinstall freebsd-update. + +# cd /usr/src/usr.sbin/freebsd-update +# make install -DWITHOUT_MAN + +3) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install + +VI. Correction details + +The following list contains the revision numbers of each file that was +corrected in FreeBSD. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/8/ r258724 +releng/8.3/ r258725 +releng/8.4/ r258725 +stable/9/ r258724 +releng/9.1/ r258725 +releng/9.2/ r258725 +stable/10/ r258723 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + +The latest revision of this Errata Notice is available at +http://security.FreeBSD.org/advisories/FreeBSD-EN-13:05.freebsd-update.asc +-----BEGIN PGP SIGNATURE----- + +iQIcBAEBCgAGBQJSl+SzAAoJEO1n7NZdz2rn/rcP/0kzyXknxebFrQ33ZWJjjt4V +mkR5ubFETVjRbbxqP/t6Y7mDfptpqZ3yxYB7dL7IO4Tw1CzHxE6oGveAggXvW9Lp +nznbutR74VNvDyClKDYihDK4XPq+p+sEKfw1w6tq5/sktPUCqAwie7ckv59GU5Sd +HIAM7efyyN1PnxO7QjAwIpzSZ/aaaagUvZmatH35HZBXNX+JcliH0cUCYqsyum0o +ucD3VeoG8ab2Ks9bg+UvX+6C+iWE9Hqh1gFklN5bJ4PKT2JtqEV5m7s/MeEdC+oZ +FOtatDJ0FsvJGCJhox/Plo5G07Ggtxl8mtmXt/ognTCUxeeQ5WabzdxBMk1LhuYF +Hqrzd9YTlEj1g/pz7w7j/hAkRhb2zfUSpnqV+AaZTRvV8OlyfxeVrZojkWNEpVuX +icx4z40EupzrfKBLHX1GX1R+ldLHbu1Q7eOaBpFqcupf3PkTO6c59MeKk5Vq7U6q +BHNWsYbk9btW9AcRWQQGhmqkQcfiHLyyAS/6jP/7PODH53sm6y2IQLfFvG0WCEXN +X+YH5QUMENVr1OrSacBa6CaVMG5ofUEiszVjauniPNdkZetTj5Xlt2R076MWFYKP +aP3aKzUOwYYDR53b1EX9NOk+AEd98PXEphAi/tXrVdPxsgO1Bl1Z917iw6XeamV2 +P1ZmFLZD21zfunR9miM4 +=XRsr +-----END PGP SIGNATURE----- diff --git a/share/security/patches/EN-13:05/freebsd-update.patch b/share/security/patches/EN-13:05/freebsd-update.patch new file mode 100644 index 0000000000..97654526c1 --- /dev/null +++ b/share/security/patches/EN-13:05/freebsd-update.patch @@ -0,0 +1,17 @@ +Index: usr.sbin/freebsd-update/freebsd-update.sh +=================================================================== +--- usr.sbin/freebsd-update/freebsd-update.sh (revision 257878) ++++ usr.sbin/freebsd-update/freebsd-update.sh (revision 257879) +@@ -2884,10 +2884,10 @@ + install_delete INDEX-OLD INDEX-NEW || return 1 + + # Remove old directories ++ grep -vE '^/boot/' $1/INDEX-NEW | ++ grep -E '^[^|]+\|d\|' > INDEX-NEW + grep -vE '^/boot/' $1/INDEX-OLD | + grep -E '^[^|]+\|d\|' > INDEX-OLD +- grep -vE '^/boot/' $1/INDEX-OLD | +- grep -E '^[^|]+\|d\|' > INDEX-OLD + install_delete INDEX-OLD INDEX-NEW || return 1 + + # Remove temporary files diff --git a/share/security/patches/EN-13:05/freebsd-update.patch.asc b/share/security/patches/EN-13:05/freebsd-update.patch.asc new file mode 100644 index 0000000000..50dfe7d0b7 --- /dev/null +++ b/share/security/patches/EN-13:05/freebsd-update.patch.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIcBAABCgAGBQJSl+S/AAoJEO1n7NZdz2rn83kP/i3z33vMVlyCJ+ECx6sl6Ph6 +waNo+sp32vqnth+HWM20uUSBx1AHuizl/R2Vn8np8yoN4kM75snYbDm65+1ukFTH +V/5jOFCGPLrgz/jFHyUKfxfk/AoVDUsX06seqyKANR1ohTz2qU9TAPt6otWHp5qz ++ia4w0oRF9us5Trb0TEHWiLhDlkL2Sflzk9nP4uRTCWkaoCiFIvGL0g0v7NTj66o +wbzT93qtF1OBdPIB7opZo2+OZNt9mvDeEBy8AtWemctZBSqtxDSK4vqDXwWUJdat +CNULqzlO9C5EhylGpJa/tPZXo8RfaZnIsYZPgywH/UJeaGHh9izlQYpYFXwcp4PY +uo+CT/ljRlVPdq7Z72ncleuBhA9UGxCTe+R+hT3Muhr9LzUoCq12ruARSa+Z7+Wx +dHiAwt+mu7Hi3Sg/TnxKpbtCKh5w8JW9jbA2sR6SYNhwgI1rc361Pnk41wR4GkrS +jA6EaQhuMK5mefRhkqcJeP7LHX7bRyQkv1avgZjTLUef3fVfBMQpxaGQcsKwouyG +CiD8uMtQhERijEbcP4jmis/67kYwZ6IK+QxsIhETVs79sNILy8YOk+7ZNPhgeUUj +8qb89Ar5p3oVuWJdJ6SrCXSweCou7sajESsIuCaurzzMrUUTL5QPAZdfWjL+yw0j +cChdU0yXPbmnlHk/Hgsd +=RdmK +-----END PGP SIGNATURE----- diff --git a/share/xml/notices.xml b/share/xml/notices.xml index 76433dad6b..b99fe30ace 100644 --- a/share/xml/notices.xml +++ b/share/xml/notices.xml @@ -1,327 +1,339 @@ $FreeBSD$ 2013 + + 11 + + + 28 + + + FreeBSD-EN-13:05.freebsd-update + + + + 10 26 FreeBSD-EN-13:04.freebsd-update 8 22 FreeBSD-EN-13:03.mfi 6 28 FreeBSD-EN-13:01.fxp FreeBSD-EN-13:02.vtnet 2012 6 12 FreeBSD-EN-12:02.ipv6refcount 1 4 FreeBSD-EN-12:01.freebsd-update 2010 2 27 FreeBSD-EN-10:02.sched_ule 1 6 FreeBSD-EN-10:01.freebsd 2009 10 2 FreeBSD-EN-09:05.null 6 24 FreeBSD-EN-09:04.fork FreeBSD-EN-09:03.fxp FreeBSD-EN-09:02.bce 3 23 FreeBSD-EN-09:01.kenv 2008 6 19 FreeBSD-EN-08:02.tcp 4 17 FreeBSD-EN-08:01.libpthread 2007 3 15 FreeBSD-EN-07:05.freebsd-update 2 28 FreeBSD-EN-07:04.zoneinfo FreeBSD-EN-07:03.rc.d_jail FreeBSD-EN-07:02.net 14 FreeBSD-EN-07:01.nfs 2006 8 28 FreeBSD-EN-06:02.net 7 7 FreeBSD-EN-06:01.jail 2005 12 19 FreeBSD-EN-05:04.nfs 1 16 FreeBSD-EN-05:03.ipi 6 FreeBSD-EN-05:02.sk 5 FreeBSD-EN-05:01.nfs 2004 6 28 FreeBSD-EN-04:01.twe 2 26 FreeBSD 5.2.1-RELEASE