FreeBSD 11.1-RELEASE Errata

The FreeBSD Project

FreeBSD is a registered trademark of + the FreeBSD Foundation.

Intel, Celeron, Centrino, Core, EtherExpress, i386, + i486, Itanium, Pentium, and Xeon are trademarks or registered + trademarks of Intel Corporation or its subsidiaries in the United + States and other countries.

SPARC, SPARC64, and + UltraSPARC are trademarks of SPARC International, Inc in the United + States and other countries. SPARC International, Inc owns all of the + SPARC trademarks and under licensing agreements allows the proper use + of these trademarks by its members.

Many of the designations used by + manufacturers and sellers to distinguish their products are claimed + as trademarks. Where those designations appear in this document, + and the FreeBSD Project was aware of the trademark claim, the + designations have been followed by the “™” or the + “®” symbol.

Last modified on 2017-07-20 19:57:01 EDT by gjb.

Abstract

This document lists errata items for FreeBSD 11.1-RELEASE, + containing significant information discovered after the + release or too late in the release cycle to be otherwise + included in the release documentation. This information + includes security advisories, as well as news relating to the + software or documentation that could affect its operation or + usability. An up-to-date version of this document should + always be consulted before installing this version of + FreeBSD.

This errata document for FreeBSD 11.1-RELEASE will be maintained + until the release of FreeBSD 11.2-RELEASE.

Table of Contents

1. Introduction
2. Security Advisories
3. Errata Notices
4. Open Issues
5. Late-Breaking News

1. Introduction

This errata document contains “late-breaking + news” about FreeBSD 11.1-RELEASE Before installing this + version, it is important to consult this document to learn about + any post-release discoveries or problems that may already have + been found and fixed.

Any version of this errata document actually distributed + with the release (for example, on a CDROM distribution) will be + out of date by definition, but other copies are kept updated on + the Internet and should be consulted as the “current + errata” for this release. These other copies of the + errata are located at https://www.FreeBSD.org/releases/, plus any + sites which keep up-to-date mirrors of this location.

Source and binary snapshots of FreeBSD 11.1-STABLE also + contain up-to-date copies of this document (as of the time of + the snapshot).

For a list of all FreeBSD CERT security advisories, see https://www.FreeBSD.org/security/.

2. Security Advisories

Advisory	Date	Topic
FreeBSD-SA-16:32.bhyve	25 October 2016	Privilege escalation vulnerability
FreeBSD-SA-16:33.openssh	2 November 2016	Remote Denial of Service + vulnerability
FreeBSD-SA-16:36.telnetd	6 December 2016	Possible login(1) argument + injection
FreeBSD-SA-16:37.libc	6 December 2016	link_ntoa(3) buffer overflow
FreeBSD-SA-16:38.bhyve	6 December 2016	Possible escape from bhyve(8) virtual + machine
FreeBSD-SA-16:39.ntp	22 December 2016	Multiple vulnerabilities
FreeBSD-SA-17:01.openssh	10 January 2017	Multiple vulnerabilities
FreeBSD-SA-17:02.openssl	23 February 2017	Multiple vulnerabilities
FreeBSD-SA-17:03.ntp	12 April 2017	Multiple vulnerabilities
FreeBSD-SA-17:04.ipfilter	27 April 2017	Fix fragment handling panic
FreeBSD-SA-17:05.heimdal	12 July 2017	Fix KDC-REP service name validation + vulnerability

3. Errata Notices

Errata	Date	Topic
FreeBSD-EN-16:18.loader	25 October 2016	Loader may hang during boot
FreeBSD-EN-16:19.tzcode	6 December 2016	Fix warnings about invalid timez one + abbreviations
FreeBSD-EN-16:20.tzdata	6 December 2016	Update timezone database + information
FreeBSD-EN-16:21.localedef	6 December 2016	Fix incorrectly defined unicode + characters
FreeBSD-EN-17:01.pcie	23 February 2017	Fix system hang when booting when PCI-express + HotPlug is enabled
FreeBSD-EN-17:02.yp	23 February 2017	Fix NIS master updates are not pushed to an NIS + slave
FreeBSD-EN-17:03.hyperv	23 February 2017	Fix compatibility with Hyper-V/storage after + KB3172614 or KB3179574
FreeBSD-EN-17:04.mandoc	23 February 2017	Make makewhatis(1) output + reproducible
FreeBSD-EN-17:05.xen	23 February 2017	Xen migration enhancements

4. Open Issues

FreeBSD/i386 installed on ZFS may crash during boot + when the ZFS pool mount is attempted while booting an + unmodified GENERIC kernel.
A system tunable has been added as of revision + r286584 to make the + kern.kstack_pages tunable configurable + without recompiling the kernel.
To mitigate system crashes with such configurations, + chose Escape to loader prompt in the boot + menu and enter the following lines from loader(8) + prompt, after an OK:
```
set kern.kstack_pages=4
+boot
```
Add this line to + /boot/loader.conf for the change to + persist across reboots:
```
kern.kstack_pages=4
```
[2017-07-21] Due to a bug in earlier versions of + clang(1) that is difficult to work around in the + upgrade process, to upgrade the system from sources via + buildworld to -CURRENT or 11.1-RELEASE, it is necessary to + upgrade machines running 9.x to at least revision r286035, + or machines running 10.x to revision r286033. Source-based + upgrades from 10.3-RELEASE are not affected. This differs + from the historical situation where one could generally + upgrade from anywhere on earlier stable branches, so caution + should be exercised.

5. Late-Breaking News

No news.

All users of FreeBSD 11.1-STABLE should + subscribe to the <stable@FreeBSD.org> + mailing list.