svn commit: r43263 - in head/share: security/advisories security/patches/EN-13:05 xml

Xin LI delphij at FreeBSD.org
Fri Nov 29 01:02:07 UTC 2013


Author: delphij
Date: Fri Nov 29 01:02:00 2013
New Revision: 43263
URL: http://svnweb.freebsd.org/changeset/doc/43263

Log:
  Add latest errata notice:
  
  Fix error in patch for FreeBSD-EN-13:04.freebsd-update [EN-13:05].

Added:
  head/share/security/advisories/FreeBSD-EN-13:05.freebsd-update.asc   (contents, props changed)
  head/share/security/patches/EN-13:05/
  head/share/security/patches/EN-13:05/freebsd-update.patch   (contents, props changed)
  head/share/security/patches/EN-13:05/freebsd-update.patch.asc   (contents, props changed)
Modified:
  head/share/xml/notices.xml

Added: head/share/security/advisories/FreeBSD-EN-13:05.freebsd-update.asc
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/share/security/advisories/FreeBSD-EN-13:05.freebsd-update.asc	Fri Nov 29 01:02:00 2013	(r43263)
@@ -0,0 +1,146 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-EN-13:05.freebsd-update                                 Errata Notice
+                                                          The FreeBSD Project
+
+Topic:          Error in patch for FreeBSD-EN-13:04.freebsd-update
+
+Category:       base
+Module:         freebsd-update
+Announced:      2013-11-28
+Affects:        All supported FreeBSD releases
+Corrected:      2013-11-28 22:06:37 UTC (stable/10, 10.0-STABLE)
+                2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA3-p2)
+                2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA2-p2)
+                2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA1-p3)
+                2013-11-28 22:08:41 UTC (stable/9, 9.2-STABLE)
+                2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RELEASE-p2)
+                2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RC4-p2)
+                2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RC3-p3)
+                2013-11-28 22:12:48 UTC (releng/9.1, 9.1-RELEASE-p9)
+                2013-11-28 22:08:41 UTC (stable/8, 8.4-STABLE)
+                2013-11-28 22:12:48 UTC (releng/8.4, 8.4-RELEASE-p6)
+                2013-11-28 22:12:48 UTC (releng/8.3, 8.3-RELEASE-p13)
+
+For general information regarding FreeBSD Errata Notices and Security
+Advisories, including descriptions of the fields above, security
+branches, and the following sections, please visit
+<URL:http://security.freebsd.org/>.
+
+I.   Background
+
+The freebsd-update(8) utility is used to download and apply binary diffs
+for security and errata patches on systems installed from official FreeBSD
+release CDs and DVDs.  It can also be used to upgrade such systems to new
+FreeBSD releases.
+
+In the preceding Errata Notice (FreeBSD-EN-13:04.freebsd-update), a change
+was made to freebsd-update(8) to cause it to create directories appearing
+in a new release before creating other filesystem objects; and to delete
+directories which no longer appeared after other filesystem objects had
+been removed.
+
+II.  Problem Description
+
+An typographical error caused the directories needing to be deleted to be
+incorrectly enumerated.  In particular, the /var/empty directory was being
+removed when upgrading from earlier releases to FreeBSD 10.0-BETA3.
+
+III. Impact
+
+After upgrading to FreeBSD 10.0-BETA3 some daemons, including sshd(8),
+will not start.
+
+IV.  Workaround
+
+To manually recreate the /var/empty directory on systems where it was
+inadvertently removed, run the following commands:
+
+# mkdir /var/empty
+# chflags schg /var/empty
+
+V.   Solution
+
+Perform one of the following:
+
+1) Upgrade your system to a supported FreeBSD stable or release / security
+branch (releng) dated after the correction date.
+
+2) To update your present system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+# fetch http://security.FreeBSD.org/patches/EN-13:05/freebsd-update.patch
+# fetch http://security.FreeBSD.org/patches/EN-13:05/freebsd-update.patch.asc
+# gpg --verify freebsd-update.patch.asc
+
+b) Apply the patch.
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Reinstall freebsd-update.
+
+# cd /usr/src/usr.sbin/freebsd-update
+# make install -DWITHOUT_MAN
+
+3) To update your system via a binary patch:
+
+Systems running a RELEASE version of FreeBSD on the i386 or amd64
+platforms can be updated via the freebsd-update(8) utility:
+
+# freebsd-update fetch
+# freebsd-update install
+
+VI.  Correction details
+
+The following list contains the revision numbers of each file that was
+corrected in FreeBSD.
+
+Branch/path                                                      Revision
+- -------------------------------------------------------------------------
+stable/8/                                                         r258724
+releng/8.3/                                                       r258725
+releng/8.4/                                                       r258725
+stable/9/                                                         r258724
+releng/9.1/                                                       r258725
+releng/9.2/                                                       r258725
+stable/10/                                                        r258723
+- -------------------------------------------------------------------------
+
+To see which files were modified by a particular revision, run the
+following command, replacing NNNNNN with the revision number, on a
+machine with Subversion installed:
+
+# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
+
+Or visit the following URL, replacing NNNNNN with the revision number:
+
+<URL:http://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>
+
+VII. References
+
+The latest revision of this Errata Notice is available at
+http://security.FreeBSD.org/advisories/FreeBSD-EN-13:05.freebsd-update.asc
+-----BEGIN PGP SIGNATURE-----
+
+iQIcBAEBCgAGBQJSl+SzAAoJEO1n7NZdz2rn/rcP/0kzyXknxebFrQ33ZWJjjt4V
+mkR5ubFETVjRbbxqP/t6Y7mDfptpqZ3yxYB7dL7IO4Tw1CzHxE6oGveAggXvW9Lp
+nznbutR74VNvDyClKDYihDK4XPq+p+sEKfw1w6tq5/sktPUCqAwie7ckv59GU5Sd
+HIAM7efyyN1PnxO7QjAwIpzSZ/aaaagUvZmatH35HZBXNX+JcliH0cUCYqsyum0o
+ucD3VeoG8ab2Ks9bg+UvX+6C+iWE9Hqh1gFklN5bJ4PKT2JtqEV5m7s/MeEdC+oZ
+FOtatDJ0FsvJGCJhox/Plo5G07Ggtxl8mtmXt/ognTCUxeeQ5WabzdxBMk1LhuYF
+Hqrzd9YTlEj1g/pz7w7j/hAkRhb2zfUSpnqV+AaZTRvV8OlyfxeVrZojkWNEpVuX
+icx4z40EupzrfKBLHX1GX1R+ldLHbu1Q7eOaBpFqcupf3PkTO6c59MeKk5Vq7U6q
+BHNWsYbk9btW9AcRWQQGhmqkQcfiHLyyAS/6jP/7PODH53sm6y2IQLfFvG0WCEXN
+X+YH5QUMENVr1OrSacBa6CaVMG5ofUEiszVjauniPNdkZetTj5Xlt2R076MWFYKP
+aP3aKzUOwYYDR53b1EX9NOk+AEd98PXEphAi/tXrVdPxsgO1Bl1Z917iw6XeamV2
+P1ZmFLZD21zfunR9miM4
+=XRsr
+-----END PGP SIGNATURE-----

Added: head/share/security/patches/EN-13:05/freebsd-update.patch
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/share/security/patches/EN-13:05/freebsd-update.patch	Fri Nov 29 01:02:00 2013	(r43263)
@@ -0,0 +1,17 @@
+Index: usr.sbin/freebsd-update/freebsd-update.sh
+===================================================================
+--- usr.sbin/freebsd-update/freebsd-update.sh	(revision 257878)
++++ usr.sbin/freebsd-update/freebsd-update.sh	(revision 257879)
+@@ -2884,10 +2884,10 @@
+ 	install_delete INDEX-OLD INDEX-NEW || return 1
+ 
+ 	# Remove old directories
++	grep -vE '^/boot/' $1/INDEX-NEW |
++	    grep -E '^[^|]+\|d\|' > INDEX-NEW
+ 	grep -vE '^/boot/' $1/INDEX-OLD |
+ 	    grep -E '^[^|]+\|d\|' > INDEX-OLD
+-	grep -vE '^/boot/' $1/INDEX-OLD |
+-	    grep -E '^[^|]+\|d\|' > INDEX-OLD
+ 	install_delete INDEX-OLD INDEX-NEW || return 1
+ 
+ 	# Remove temporary files

Added: head/share/security/patches/EN-13:05/freebsd-update.patch.asc
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/share/security/patches/EN-13:05/freebsd-update.patch.asc	Fri Nov 29 01:02:00 2013	(r43263)
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=RdmK
+-----END PGP SIGNATURE-----

Modified: head/share/xml/notices.xml
==============================================================================
--- head/share/xml/notices.xml	Thu Nov 28 12:36:18 2013	(r43262)
+++ head/share/xml/notices.xml	Fri Nov 29 01:02:00 2013	(r43263)
@@ -8,6 +8,18 @@
     <name>2013</name>
 
     <month>
+      <name>11</name>
+
+      <day>
+	<name>28</name>
+
+	<notice>
+	  <name>FreeBSD-EN-13:05.freebsd-update</name>
+	</notice>
+      </day>
+    </month>
+
+    <month>
       <name>10</name>
 
       <day>


More information about the svn-doc-all mailing list