svn commit: r218978 - stable/8/release/doc/en_US.ISO8859-1/errata

Hiroki Sato hrs at
Wed Feb 23 19:33:43 UTC 2011

Author: hrs
Date: Wed Feb 23 19:33:42 2011
New Revision: 218978

  Update Errata document for 8.2R.  CVE-2011-0014 fix for OpenSSL.


Modified: stable/8/release/doc/en_US.ISO8859-1/errata/article.sgml
--- stable/8/release/doc/en_US.ISO8859-1/errata/article.sgml	Wed Feb 23 19:07:50 2011	(r218977)
+++ stable/8/release/doc/en_US.ISO8859-1/errata/article.sgml	Wed Feb 23 19:33:42 2011	(r218978)
@@ -16,7 +16,7 @@
 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN">
-<!ENTITY release.bugfix "8.1-RELEASE">
+<!ENTITY release.bugfix "8.2-RELEASE">
@@ -40,7 +40,7 @@
-      <year>2010</year>
+      <year>2011</year>
       <holder role="mailto:doc at">The &os; Documentation Project</holder>
@@ -131,7 +131,7 @@
       For more information, consult the individual advisories available from
       <ulink url=""></ulink>.</para>
-    <informaltable frame="none" pgwide="0">
+    <informaltable frame="none" pgwide="1">
       <tgroup cols="3">
 	<colspec colwidth="1*">
 	<colspec colwidth="1*">
@@ -160,23 +160,19 @@
   <sect1 id="open-issues">
     <title>Open Issues</title>
-    <para>No open issues.</para>
+    <para>No open issue.</para>
   <sect1 id="late-news">
     <title>Late-Breaking News and Corrections</title>
-    <para>A deadlock can occur in UFS with the QUOTA enabled due to a
-      lock order reversal.  This problem has been fixed in <ulink
-	url="">r209367
-	(HEAD)</ulink>. An Errata Notice for &release.bugfix; is
-      planned.</para>
-    <para>A legacy device detection in the &man.ata.4; can fail in
-      some cases.  Specifically, Marvell 88SX6141 controllers can
-      cause attach failure or panic.  This problem has been fixed in
-      <ulink url="">r210168
-	(HEAD)</ulink>. An Errata Notice for &release.bugfix; is
-      planned.</para>
+    <para>A bug in <application>OpenSSL</application> that could cause
+      it to parse past the end of the message was found at the late
+      stage of &release.bugfix; release process.  The &release.bugfix;
+      includes a fix for this issue by importing relevant parts from
+      the OpenSSL CVS.  This could be triggered by an incorrectly
+      formatted ClientHello SSL/TLS handshake messages.  The details
+      can be found at <ulink
+      url=""></ulink>.</para>

More information about the svn-src-stable-8 mailing list