Annotation of www/errata.html, Revision 1.71
1.1 deraadt 1: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">
2: <html>
3: <head>
1.64 deraadt 4: <title>OpenBSD release errata</title>
1.1 deraadt 5: <link rev=made href=mailto:www@openbsd.org>
6: <meta name="resource-type" content="document">
7: <meta name="description" content="the OpenBSD CD errata page">
8: <meta name="keywords" content="openbsd,cd,errata">
9: <meta name="distribution" content="global">
10: <meta name="copyright" content="This document copyright 1997 by OpenBSD.">
11: </head>
12:
13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
14:
1.37 deraadt 15: <img alt="[OpenBSD]" SRC="images/smalltitle.gif">
1.68 deraadt 16: <h2><font color=#0000e0>
17: This is the OpenBSD 2.2 release errata & patch list:
18: </font></h2>
19:
1.25 deraadt 20: <ul>
1.43 deraadt 21: <a name=all></a>
1.67 deraadt 22: <li><h3><font color=#e00000>All architectures</font></h3>
1.25 deraadt 23: <ul>
1.39 deraadt 24: <li>Building an object tree from a read-only source tree (such as off a CDROM)
25: may fail under certain circumstances (e.g. when creating a symlink on sparc
26: whose target name is exactly 33 characters). As a workaround you have to
27: either provide the source tree read/write, or install a newer version of
28: /usr/bin/readlink. You wish to use
1.34 deraadt 29: <a href=http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/readlink/readlink.c?rev=1.13>
30: revision 1.13 of usr.bin/readlink/readlink.c</a>.
1.39 deraadt 31: <p>
1.62 deraadt 32: <a name=ruserok></a>
1.61 deraadt 33: <li><strong>IMPORTANT</strong>
34: A combination localhost+remote host security problem exists if a
35: local user running a setuid binary causes a non-existant root .rhosts
36: file to be created via a symbolic link with a specific kind of corefile,
37: and then subsequently uses rsh/rlogin to enter the machine from remote.
38: A similar exploit might also be possible using sshd which lacks any code
39: for checking for deviations from the expected format in the .rhosts or
40: .shosts files, but we have not confirmed this yet. The following two
41: fixes are recommended:
42: <p>
43: <ul>
44: <li>
45: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/common/nosuidcoredump.patch>
46: (1) Adds a new sysctl option which permits the adminstrator to decide
47: whether setuid corefiles should be written or not.</a>
48: <p>
49: <li><a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/common/rcmd.patch>
50: (2) Replaces the ruserok() function in libc with a much more paranoid
51: version which can detect these bogus looking .rhosts files better. If the
52: previous patch is used to stop setuid coredumps, then this patch is not
53: as important.</a>
54: </ul>
55: <p>
56: This problem is fixed much better in OpenBSD-current, where the kernel's
57: symbolic link handling has been improved such that coredumping will not
58: create a file on the other side of a symbolic link. Such a patch is not
59: possible for the 4.4lite1 VFS layer in the OpenBSD 2.2 kernel.
60: <p>
1.25 deraadt 61: </ul>
1.42 deraadt 62: <a name=i386></a>
1.67 deraadt 63: <li><h3><font color=#e00000>i386</font></h3>
1.25 deraadt 64: <ul>
1.39 deraadt 65: <li>The Intel P5 F00F bug was discovered after the CDR's had already been
66: sent to the manufacturer. This problem permits any user who has an account
67: to lock your machine up using a 4-line program. The problem only affects
68: Intel P5 processors (the i386, i486, P-Pro, and P-II are not vulnerable,
69: nor are processors by other manufacturers).
1.44 deraadt 70: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/i386/f00f.patch>
1.39 deraadt 71: A kernel source-code patch is available</a>.
72: <p>
1.33 deraadt 73: <li>Some Linux binaries will execute in SVR4 emulation mode, which is
74: definately a problem for people who need Linux emulation to work correctly.
1.39 deraadt 75: To solve this mis-identification problem,
1.32 deraadt 76: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/i386/compat_linux.patch>
1.56 deraadt 77: a patch file is provided.</a>
1.39 deraadt 78: <p>
1.45 deraadt 79: <li>APM can crash on machines without it.
80: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/i386/apm.patch>
81: A kernel source-code patch is available</a>.
82: <p>
1.39 deraadt 83: <li>A few people are running into this problem, particularily if they had some
84: other *BSD operating system on their machine before trying OpenBSD: if after
85: installation onto an IDE-based machine, the kernel fails to mount the root
86: partition because it thinks that it should be opening sd0 (0x400), this means
87: you have incorrectly setup your disklabel for the IDE drive -- the disklabel
88: is indicating that the drive is SCSI.
89: To repair this, use the floppy to run "disklabel -E wd0", then using the
90: "edit" command ensure the type field is set to "ST506".
91: <p>
92: </ul>
1.47 deraadt 93: <a name=mac68k></a>
1.67 deraadt 94: <li><h3><font color=#e00000>mac68k</font></h3>
1.39 deraadt 95: <ul>
1.46 gene 96: <li>Unfortunately, X11 binaries for the mac68k did not manage to make it onto the
1.69 deraadt 97: CDROM. However, X11 for the mac68k is immediately available from
1.46 gene 98: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/2.2/mac68k/X11/X11R6.tar.gz">
99: ftp://ftp.OpenBSD.org/pub/OpenBSD/2.2/mac68k/X11/X11R6.tar.gz</a>. Please
100: be sure to read the <a href="ftp://ftp.openbsd.org/pub/OpenBSD/2.2/mac68k/X11/README.X11">README file</a> also in that directory for instructions on installing
101: and setting up X.
1.39 deraadt 102: <p>
1.70 gene 103: <li>As shipped on the CDROM, both the <a href="ftp://ftp.openbsd.org/pub/OpenBSD/2.2/mac68k/bsd-generic.tar.gz">generic kernel</a> and the
104: <a href="ftp://ftp.openbsd.org/pub/OpenBSD/2.2/bsd-genericbsc.tar.gz">
105: genericsbc kernel</a> extract themselves into the wrong place in the filesystem.
106: Both <strong>should</strong> extract a kernel named <tt>/bsd</tt>, but they extract
107: the kernel into <tt>/usr/src/sys/arch/mac68k/compile</tt> instead.
108: <p>
1.71 ! gene 109: This has been fixed on the ftp release of <a href=22.html>OpenbSD 2.2</a>, and
! 110: fresh kernels are available from <a href="ftp://ftp.openbsd.org/pub/OpenBSD/2.2/mac68k">
! 111: ftp://ftp.OpenBSD.ORG/pub/OpenBSD/2.2/mac68k/</a>. If at all possible,
! 112: installing these kernels is recommended.
! 113: <p>
! 114: A number of possible workarounds exist if you don't have easy access to ftp
! 115: the updated kernels. The simplest of these is to use a
1.70 gene 116: MacOS program to uncompress and untar the kernel aad use the Installer's
117: mini-shell to "cpin" the kernel. Alternately, you could install the kernel
118: with the Installer and use the mini-shell to move the binary from <tt>/usr/src/...</tt> to <tt>/bsd</tt>.
119: <p>
1.25 deraadt 120: </ul>
1.65 deraadt 121: <a name=sparc></a>
1.67 deraadt 122: <li><h3><font color=#e00000>sparc</font></h3>
1.25 deraadt 123: <ul>
1.58 deraadt 124: <li>Older 4/xxx systems (particularily the 4/300's) cannot boot
125: with the 2.2 kernel due to bugs in the scsi device driver.
1.57 jason 126: <a href=ftp://ftp.OpenBSD.org/pub/OpenBSD/patches/2.2/sparc/esp.patch>
127: A kernel source patch is available.</a>
1.60 jason 128: Replacement kernels are available for:
129: <a href=ftp://ftp.OpenBSD.org/pub/OpenBSD/patches/2.2/sparc/bsd>bsd</a>,
130: <a href=ftp://ftp.OpenBSD.org/pub/OpenBSD/patches/2.2/sparc/bsd.scsi3>bsd.scsi3</a>,
131: and a replacement for bsd.rd is coming soon.
1.39 deraadt 132: <p>
1.65 deraadt 133: <a name=sparciommu></a>
1.63 marc 134: <li>SPARCstation 4 and 5 (Microsparc 2) users may see kernel panics when
135: using a custom kernel configured for option sun4m only.
136: <a href=ftp://ftp.OpenBSD.org/pub/OpenBSD/patches/2.2/sparc/sun4m.patch>
137: A workaround (kernel source patch) is available.</a> Apply the patch and
138: then re-build your kernel.
139: <p>
1.39 deraadt 140: </ul>
1.67 deraadt 141: <li><h3><font color=#e00000>amiga</font></h3>
1.39 deraadt 142: <p>
143: <ul>
1.48 niklas 144: <li>Missing Xamiga manual page. Get
145: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/amiga/Xamiga-manual.tgz>
146: this package</a> and execute, <i>as root</i>:<br>
1.49 deraadt 147: <pre><b># </b>pkg_add Xamiga-manual.tgz</pre>
1.51 deraadt 148: The MD5 checksum of this package is:<br>
1.49 deraadt 149: <b>MD5 (Xamiga-manual.tgz) = 2362a7857264b9d17f65cca258b42031</b><p>
1.48 niklas 150: <li>The Ariadne ethernet support was broken, there will be both binary and
151: source level fixes available shortly. If you are in a hurry mail
1.49 deraadt 152: <a href=mailto:niklas@openbsd.org>Niklas</a> for a test kernel.<p>
1.25 deraadt 153: </ul>
1.65 deraadt 154: <a name=pmax></a>
1.67 deraadt 155: <li><h3><font color=#e00000>pmax</font></h3>
1.25 deraadt 156: <ul>
1.53 deraadt 157: <li>There is a Year-1998 problem in the time-setting code (which causes the
158: date and time to be set incorrectly after a reboot in 1998).
159: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/pmax/clock.patch>
160: A source code patch file is available.</a> plus replacement installation
161: kernels for the 2.2 release at
162: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/pmax/bsd.NFS>bsd.NFS</a>,
163: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/pmax/bsd>bsd</a>,
164: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/pmax/bsd.rz0>bsd.rz0</a>.
1.66 deraadt 165: <p>
1.53 deraadt 166: <li>X11 support for the 3min and 3maxplus machines was broken
167: due to a kernel bug.
168: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2/pmax/fb.patch>
169: A source code patch is available</a>.
1.66 deraadt 170: <p>
1.59 deraadt 171: <li>A bug in the shared library linker <strong>ld.so</strong> requires that
172: you replace it with a new binary.
173: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2//pmax/ld.so>
174: The replacement binary is here.</a>
1.39 deraadt 175: <p>
1.25 deraadt 176: </ul>
1.65 deraadt 177: <a name=arc></a>
1.67 deraadt 178: <li><h3><font color=#e00000>arc</font></h3>
1.59 deraadt 179: <ul>
180: <li>A bug in the shared library linker <strong>ld.so</strong> requires that
181: you replace it with a new binary.
182: <a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.2//pmax/ld.so>
183: The replacement binary is here.</a>
1.69 deraadt 184: <p>
1.59 deraadt 185: </ul>
1.67 deraadt 186: <li><h3><font color=#e00000>alpha</font></h3>
1.56 deraadt 187: <p>
188: <ul>
189: <li>No problems identified yet.
190: <p>
191: </ul>
1.67 deraadt 192: <li><h3><font color=#e00000>hp300</font></h3>
1.56 deraadt 193: <p>
194: <ul>
195: <li>No problems identified yet.
196: <p>
197: </ul>
1.67 deraadt 198: <li><h3><font color=#e00000>mvme68k</font></h3>
1.25 deraadt 199: <ul>
1.39 deraadt 200: <li>No problems identified yet.
201: <p>
1.25 deraadt 202: </ul>
203: </ul>
204: <br>
205: <hr>
1.68 deraadt 206: <h2><font color=#0000e0>
207: This is the OpenBSD 2.1 release errata & patch list:
208: </font></h3></h2>
1.13 pefo 209: <br>
1.14 pefo 210: <ul>
1.67 deraadt 211: <li><h3><font color=#e00000>All architectures</font></h3>
1.13 pefo 212: <ul>
213: <li>One of the install scripts has a flaw that makes the CD-ROM mount fail
214: when using the CD-ROM as the install source media.
215: To workaround this use the following sequence of commands before
216: starting the install script. This must be done each time the install
217: kernel is booted if the install script is to be run and the CD-ROM
218: is the media to install from. Do the following at the shell prompt:
1.16 pefo 219: <pre><b>#</b> ed install.sub
220: /{_filesystem/s//{_fstype/
221: wq
1.13 pefo 222: <b>#</b>
223: </pre>
1.22 niklas 224: For architectures where the install scripts start automatically
225: (like amiga), you need to abort it at the (I)nstall or (U)pdate
1.29 todd 226: prompt by pressing Ctrl-C before doing the above command. After
1.22 niklas 227: that you can restart the install by:
228: <pre><b>#</b> install
229: </pre>
1.13 pefo 230: </ul>
1.1 deraadt 231: <br>
1.67 deraadt 232: <li><h3><font color=#e00000>Alpha</font></h3>
1.6 grr 233: <ul>
1.1 deraadt 234: <li>CD2 does not boot on the alpha, as had been planned. Instead, you
1.3 deraadt 235: must use the floppy install method. This is not significantly
236: harder..
1.6 grr 237: </ul>
1.11 millert 238: <br>
1.67 deraadt 239: <li><h3><font color=#e00000>i386</font></h3>
1.7 deraadt 240: <ul>
241: <li>Some rarer PC BIOS's do not like the hardrive bootblocks when used
242: as a MBR. The symptom is that the BIOS says "READ ERROR" when booting,
243: but everything suggests it should work fine. In those cases, it is
244: sufficient to install OS-BS or some other primary bootloader as the main
245: MBR, then install OpenBSD in a partition all by itself starting at a
1.24 mickey 246: non-zero offset. For instance, start OpenBSD at next track boundary or so.
1.8 deraadt 247: <li>The i386/X11/SUMS.md5 file contains 4 incorrect MD5 checksums.
1.24 mickey 248: These have been corrected on the ftp mirrors. The correct lines are:<br>
1.8 deraadt 249: MD5 (X33doc.tgz) = 6aa0be7987f9a3cf32a63b5ea9a83b39<br>
250: MD5 (X33html.tgz) = 6ba39d41aef7c75c35a0533275c6f8c0<br>
251: MD5 (X33ps.tgz) = ea49fc1b12c17fc16ece7d0e4ad4ee06<br>
252: MD5 (RELNOTES) = 689fda20596a4eb82f86ded51efb01f4<br>
1.21 deraadt 253: <li>A lot of people with IDE disk drives fail to read the
254: INSTALL.i386 document, and hence end up with geometry translation
255: problems. Read the document, please.
1.7 deraadt 256: </ul>
1.11 millert 257: <br>
1.67 deraadt 258: <li><h3><font color=#e00000>Amiga</font></h3>
1.6 grr 259: <ul>
1.4 niklas 260: <li>The amiga install has a flaw wrt Tseng based graphic cards: when entering
261: multiuser mode the console won't get a login prompt. This is due to
262: a problem in the shipped /dev/MAKEDEV script. To fix, enter single
263: user mode and do:
1.5 todd 264: <pre><b>#</b> cd /dev
1.4 niklas 265: <b>#</b> sh MAKEDEV ttye6
266: </pre>
1.6 grr 267: </ul>
1.67 deraadt 268: <li><h3><font color=#e00000>Sparc</font></h3>
1.6 grr 269: <ul>
1.5 todd 270: <li>The sparc X11R6.3 xdm-config files reference /usr/X11R6.3/... This is
271: due to X11R6.3's default config file contents. To fix, su and
272: type:
273: <pre><b>#</b> cd /usr
274: <b>#</b> ln -s X11R6 X11R6.3
275: </pre>
1.6 grr 276: <li>The sparc "single floppy install disk" has a problem when you specify
277: "dumb" in response to the terminal type query. As a work-around
278: first specify an invalid terminal such as "bogus" and when prompted
279: again for a terminal type, enter "dumb" and it will work correctly.
280: <li>When netbooting an older sparc system such as a Sun4 or Sun4c, the boot
281: may hang up at the end of the tftp transfer of the bootstrap due
282: to the tftp transfer working in 512-byte blocks. If this occurs
283: create a "padded" version of the bootstrap (boot or zboot) as follows:
284: <pre><b>#</b> cd /tftpboot
285: <b>#</b> dd if=boot of=newboot obs=512 conv=osync
286: <b>#</b> mv newboot boot
287: </pre>
1.19 graichen 288: <li>The sparc install script has two flaws that make the kernel copy
289: and the bootblock install fail. The kernel copy only fails
290: then installing from CD-ROM. To workaround this use the
291: following sequence of commands before starting the install
292: script. This must be done each time the install kernel is
293: booted if the install script is to be run and the CD-ROM is
294: the media to install from. Do the following at the shell
295: prompt:
296: if you install from CD-ROM do the following:
297: <pre><b>#</b> ed install.md
298: /\/bsd/s//\/mnt2\/2.1\/sparc\/bsd/
299: wq
300: <b>#</b>
301: </pre>
302: ... or if you plan to use the bsd.scsi3 kernel you should use instead:
303: <pre><b>#</b> ed install.md
304: /\/bsd/s//\/mnt2\/2.1\/sparc\/bsd.scsi3/
305: wq
306: <b>#</b>
307: </pre>
308: The following one you'll have to do always (not only then
309: installing from from CD-ROM)
310: <pre><b>#</b> ed /usr/mdec/binstall
311: /getopt/,/getopt/+4d
312: wq
313: <b>#</b>
314: </pre>
1.6 grr 315: </ul>
1.67 deraadt 316: <li><h3><font color=#e00000>Pmax</font></h3>
1.9 graichen 317: <ul>
1.10 millert 318: <li> When using the X11R6 binaries from the 2.1 release you will get
1.9 graichen 319: errors like:
320: <pre><b>#</b> mkfontdir
321: mkfontdir: undefined symbol: 'astpending' 12
322: Segmentation fault (core dumped)
323: </pre>
324: this is due to a little problem affecting the compatibility between
325: the OpenBSD/arc port (on which the X11R6 clients were build) and
326: OpenBSD/pmax. You can work around this problem by using the arc
327: version of the shared libc instead of the pmax one. You may get a copy
328: of the OpenBSD/arc 2.1 libc.so.16.1 from <a
329: href=ftp://miranda.rz-berlin.mpg.de/pub/OpenBSD/pmax/fixes/libc.so.16.1>
330: here </a>. Simply download it and do the following:
331: <pre><b>#</b> cd /usr/lib
332: <b>#</b> mv libc.so.16.1 original_libc.so.16.1
333: <b>#</b> cp /where_you_have_downloaded_it_to/libc.so.16.1 .
334: <b>#</b> chown root.bin libc.so.16.1
335: <b>#</b> chmod 444 libc.so.16.1
336: </pre>
337: Please be careful while doing this - because the libc is a very
338: sensitive part of the system. You can remove the original_libc.so.16.1
339: after the next reboot if everything is working fine.
340: </ul>
1.18 deraadt 341: <p>
1.67 deraadt 342: <li><h3><font color=#e00000>Mac68k</font></h3>
1.17 deraadt 343: <ul>
1.20 gene 344: <li>The installer generates incorrect /etc/fstab files causing messages such as "file system read-only" on bootup.
345: To correct, boot to single-user mode (by clicking that checkbox in the Booter's Booting:Options dialog) and do the following:
1.17 deraadt 346: <pre>
1.18 deraadt 347: <b>#</b> mount /dev/sd0a /
348: <b>#</b> ed /etc/fstab
349: 1,$s/ ufs / ffs /
1.20 gene 350: 1,$s/ ro / rw /
1.18 deraadt 351: w
352: q
1.17 deraadt 353: </pre>
1.20 gene 354: Alternately, simply invoke vi or another editor and change the root filesystem
355: to be of type ffs rather than ufs and be rw (read-write) rather than ro
356: (read-only). In either case, you'll need to reboot the system afterwards.
357: Make this correction as soon as possible after installing the system.
1.17 deraadt 358: The installer should not have specified the filesystem as the old
359: "ufs" type; the "ffs" type is more correct.
1.20 gene 360:
1.17 deraadt 361: <li>The installer forgets to install the kernel onto the filesystem.
1.20 gene 362: This is because the installer expects all packages including the kernel to
363: be tar'ed and gzip'ed. The kernel was not shipped that way. Therefore, you
364: must make this correction <em>before attempting to boot the system</em>.
1.17 deraadt 365: To correct, use the Installer mini-shell and do the following:
366: <pre>
1.20 gene 367: > cpin :[internal-macos-path]:bsd-generic bsd
368: </pre>
369: This should place the kernel as /bsd on the filesystem. You should
1.23 gene 370: replace the above string with the colon-delimited path from your desktop to
1.20 gene 371: wherever you have placed the kernel. If possible, it is easiest to drag the
1.23 gene 372: kernel into the same folder as the Installer, so you can simply issue a
373: command without leading colon(s) like:
1.20 gene 374: <pre>
1.23 gene 375: > cpin bsd-generic bsd
1.17 deraadt 376: </pre>
1.20 gene 377: Good luck.
1.17 deraadt 378: </ul>
1.1 deraadt 379: </ul>
1.2 deraadt 380:
381: <hr>
382: <a href=orders.html><img src=back.gif border=0 alt=OpenBSD></a>
383: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.71 ! gene 384: <br><small>$OpenBSD: errata.html,v 1.70 1998/02/15 19:45:16 gene Exp $</small>
1.2 deraadt 385:
386: </body>
387: </html>