svn commit: r278922 - head

[John-Mark Gurney]

Author: jmg
Date: Tue Feb 17 21:18:17 2015
New Revision: 278922
URL: https://svnweb.freebsd.org/changeset/base/278922

Log:
  note that you should update your kernel due to RNG issue, and what
  versions you should upgrade...
  
  Suggested by:	Ryan Stone

Modified:
  head/UPDATING

Modified: head/UPDATING
==============================================================================
--- head/UPDATING	Tue Feb 17 21:12:45 2015	(r278921)
+++ head/UPDATING	Tue Feb 17 21:18:17 2015	(r278922)
@@ -31,6 +31,14 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 11
 	disable the most expensive debugging functionality run
 	"ln -s 'abort:false,junk:false' /etc/malloc.conf".)
 
+20150217:
+	If you are running a -CURRENT kernel since r273872 (Oct 30th, 2014),
+	but before r278907, the RNG was not seeded properly.  Immediately
+	upgrade the kernel to r278907 or later and regenerate any keys (e.g.
+	ssh keys or openssl keys) that were generated w/ a kernel from that
+	range.  This does not effect programs that directly used /dev/random
+	or /dev/urandom.  All userland uses of arc4random(3) are effected.
+
 20150210:
 	The autofs(4) ABI was changed in order to restore binary compatibility
 	with 10.1-RELEASE.  The automountd(8) daemon needs to be rebuilt to work