Date: Fri, 29 Nov 2013 01:02:00 +0000 (UTC) From: Xin LI <delphij@FreeBSD.org> To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r43263 - in head/share: security/advisories security/patches/EN-13:05 xml Message-ID: <201311290102.rAT120nA095501@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: delphij Date: Fri Nov 29 01:02:00 2013 New Revision: 43263 URL: http://svnweb.freebsd.org/changeset/doc/43263 Log: Add latest errata notice: Fix error in patch for FreeBSD-EN-13:04.freebsd-update [EN-13:05]. Added: head/share/security/advisories/FreeBSD-EN-13:05.freebsd-update.asc (contents, props changed) head/share/security/patches/EN-13:05/ head/share/security/patches/EN-13:05/freebsd-update.patch (contents, props changed) head/share/security/patches/EN-13:05/freebsd-update.patch.asc (contents, props changed) Modified: head/share/xml/notices.xml Added: head/share/security/advisories/FreeBSD-EN-13:05.freebsd-update.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/advisories/FreeBSD-EN-13:05.freebsd-update.asc Fri Nov 29 01:02:00 2013 (r43263) @@ -0,0 +1,146 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-13:05.freebsd-update Errata Notice + The FreeBSD Project + +Topic: Error in patch for FreeBSD-EN-13:04.freebsd-update + +Category: base +Module: freebsd-update +Announced: 2013-11-28 +Affects: All supported FreeBSD releases +Corrected: 2013-11-28 22:06:37 UTC (stable/10, 10.0-STABLE) + 2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA3-p2) + 2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA2-p2) + 2013-11-28 22:06:37 UTC (stable/10, 10.0-BETA1-p3) + 2013-11-28 22:08:41 UTC (stable/9, 9.2-STABLE) + 2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RELEASE-p2) + 2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RC4-p2) + 2013-11-28 22:12:48 UTC (releng/9.2, 9.2-RC3-p3) + 2013-11-28 22:12:48 UTC (releng/9.1, 9.1-RELEASE-p9) + 2013-11-28 22:08:41 UTC (stable/8, 8.4-STABLE) + 2013-11-28 22:12:48 UTC (releng/8.4, 8.4-RELEASE-p6) + 2013-11-28 22:12:48 UTC (releng/8.3, 8.3-RELEASE-p13) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +<URL:http://security.freebsd.org/>. + +I. Background + +The freebsd-update(8) utility is used to download and apply binary diffs +for security and errata patches on systems installed from official FreeBSD +release CDs and DVDs. It can also be used to upgrade such systems to new +FreeBSD releases. + +In the preceding Errata Notice (FreeBSD-EN-13:04.freebsd-update), a change +was made to freebsd-update(8) to cause it to create directories appearing +in a new release before creating other filesystem objects; and to delete +directories which no longer appeared after other filesystem objects had +been removed. + +II. Problem Description + +An typographical error caused the directories needing to be deleted to be +incorrectly enumerated. In particular, the /var/empty directory was being +removed when upgrading from earlier releases to FreeBSD 10.0-BETA3. + +III. Impact + +After upgrading to FreeBSD 10.0-BETA3 some daemons, including sshd(8), +will not start. + +IV. Workaround + +To manually recreate the /var/empty directory on systems where it was +inadvertently removed, run the following commands: + +# mkdir /var/empty +# chflags schg /var/empty + +V. Solution + +Perform one of the following: + +1) Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date. + +2) To update your present system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch http://security.FreeBSD.org/patches/EN-13:05/freebsd-update.patch +# fetch http://security.FreeBSD.org/patches/EN-13:05/freebsd-update.patch.asc +# gpg --verify freebsd-update.patch.asc + +b) Apply the patch. + +# cd /usr/src +# patch < /path/to/patch + +c) Reinstall freebsd-update. + +# cd /usr/src/usr.sbin/freebsd-update +# make install -DWITHOUT_MAN + +3) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install + +VI. Correction details + +The following list contains the revision numbers of each file that was +corrected in FreeBSD. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/8/ r258724 +releng/8.3/ r258725 +releng/8.4/ r258725 +stable/9/ r258724 +releng/9.1/ r258725 +releng/9.2/ r258725 +stable/10/ r258723 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + +<URL:http://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>; + +VII. References + +The latest revision of this Errata Notice is available at +http://security.FreeBSD.org/advisories/FreeBSD-EN-13:05.freebsd-update.asc +-----BEGIN PGP SIGNATURE----- + +iQIcBAEBCgAGBQJSl+SzAAoJEO1n7NZdz2rn/rcP/0kzyXknxebFrQ33ZWJjjt4V +mkR5ubFETVjRbbxqP/t6Y7mDfptpqZ3yxYB7dL7IO4Tw1CzHxE6oGveAggXvW9Lp +nznbutR74VNvDyClKDYihDK4XPq+p+sEKfw1w6tq5/sktPUCqAwie7ckv59GU5Sd +HIAM7efyyN1PnxO7QjAwIpzSZ/aaaagUvZmatH35HZBXNX+JcliH0cUCYqsyum0o +ucD3VeoG8ab2Ks9bg+UvX+6C+iWE9Hqh1gFklN5bJ4PKT2JtqEV5m7s/MeEdC+oZ +FOtatDJ0FsvJGCJhox/Plo5G07Ggtxl8mtmXt/ognTCUxeeQ5WabzdxBMk1LhuYF +Hqrzd9YTlEj1g/pz7w7j/hAkRhb2zfUSpnqV+AaZTRvV8OlyfxeVrZojkWNEpVuX +icx4z40EupzrfKBLHX1GX1R+ldLHbu1Q7eOaBpFqcupf3PkTO6c59MeKk5Vq7U6q +BHNWsYbk9btW9AcRWQQGhmqkQcfiHLyyAS/6jP/7PODH53sm6y2IQLfFvG0WCEXN +X+YH5QUMENVr1OrSacBa6CaVMG5ofUEiszVjauniPNdkZetTj5Xlt2R076MWFYKP +aP3aKzUOwYYDR53b1EX9NOk+AEd98PXEphAi/tXrVdPxsgO1Bl1Z917iw6XeamV2 +P1ZmFLZD21zfunR9miM4 +=XRsr +-----END PGP SIGNATURE----- Added: head/share/security/patches/EN-13:05/freebsd-update.patch ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-13:05/freebsd-update.patch Fri Nov 29 01:02:00 2013 (r43263) @@ -0,0 +1,17 @@ +Index: usr.sbin/freebsd-update/freebsd-update.sh +=================================================================== +--- usr.sbin/freebsd-update/freebsd-update.sh (revision 257878) ++++ usr.sbin/freebsd-update/freebsd-update.sh (revision 257879) +@@ -2884,10 +2884,10 @@ + install_delete INDEX-OLD INDEX-NEW || return 1 + + # Remove old directories ++ grep -vE '^/boot/' $1/INDEX-NEW | ++ grep -E '^[^|]+\|d\|' > INDEX-NEW + grep -vE '^/boot/' $1/INDEX-OLD | + grep -E '^[^|]+\|d\|' > INDEX-OLD +- grep -vE '^/boot/' $1/INDEX-OLD | +- grep -E '^[^|]+\|d\|' > INDEX-OLD + install_delete INDEX-OLD INDEX-NEW || return 1 + + # Remove temporary files Added: head/share/security/patches/EN-13:05/freebsd-update.patch.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-13:05/freebsd-update.patch.asc Fri Nov 29 01:02:00 2013 (r43263) @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIcBAABCgAGBQJSl+S/AAoJEO1n7NZdz2rn83kP/i3z33vMVlyCJ+ECx6sl6Ph6 +waNo+sp32vqnth+HWM20uUSBx1AHuizl/R2Vn8np8yoN4kM75snYbDm65+1ukFTH +V/5jOFCGPLrgz/jFHyUKfxfk/AoVDUsX06seqyKANR1ohTz2qU9TAPt6otWHp5qz ++ia4w0oRF9us5Trb0TEHWiLhDlkL2Sflzk9nP4uRTCWkaoCiFIvGL0g0v7NTj66o +wbzT93qtF1OBdPIB7opZo2+OZNt9mvDeEBy8AtWemctZBSqtxDSK4vqDXwWUJdat +CNULqzlO9C5EhylGpJa/tPZXo8RfaZnIsYZPgywH/UJeaGHh9izlQYpYFXwcp4PY +uo+CT/ljRlVPdq7Z72ncleuBhA9UGxCTe+R+hT3Muhr9LzUoCq12ruARSa+Z7+Wx +dHiAwt+mu7Hi3Sg/TnxKpbtCKh5w8JW9jbA2sR6SYNhwgI1rc361Pnk41wR4GkrS +jA6EaQhuMK5mefRhkqcJeP7LHX7bRyQkv1avgZjTLUef3fVfBMQpxaGQcsKwouyG +CiD8uMtQhERijEbcP4jmis/67kYwZ6IK+QxsIhETVs79sNILy8YOk+7ZNPhgeUUj +8qb89Ar5p3oVuWJdJ6SrCXSweCou7sajESsIuCaurzzMrUUTL5QPAZdfWjL+yw0j +cChdU0yXPbmnlHk/Hgsd +=RdmK +-----END PGP SIGNATURE----- Modified: head/share/xml/notices.xml ============================================================================== --- head/share/xml/notices.xml Thu Nov 28 12:36:18 2013 (r43262) +++ head/share/xml/notices.xml Fri Nov 29 01:02:00 2013 (r43263) @@ -8,6 +8,18 @@ <name>2013</name> <month> + <name>11</name> + + <day> + <name>28</name> + + <notice> + <name>FreeBSD-EN-13:05.freebsd-update</name> + </notice> + </day> + </month> + + <month> <name>10</name> <day>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201311290102.rAT120nA095501>