[BACK]Return to errata27.html CVS log [TXT][DIR] Up to [local] / www

Diff for /www/errata27.html between version 1.67 and 1.68

version 1.67, 2014/03/31 03:36:54 version 1.68, 2014/03/31 04:11:40
Line 103 
Line 103 
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/037_ftpd.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/037_ftpd.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   <li><a name="qe"> </a>
   <font color="#009000"><strong>036: RELIABILITY FIX: Nov 17, 2000</strong></font><br>
   Configuring a qec+qe causes a NMI panic.<br>
   <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/sparc/036_qe.patch">
   A source code patch exists which remedies this problem.</a>
   <p>
 <li><a name="sshforwarding"> </a>  <li><a name="sshforwarding"> </a>
 <font color="#009000"><strong>035: SECURITY FIX: Nov 10, 2000</strong></font> &nbsp; <i>All architectures</i><br>  <font color="#009000"><strong>035: SECURITY FIX: Nov 10, 2000</strong></font> &nbsp; <i>All architectures</i><br>
 Hostile servers can force OpenSSH clients to do agent or X11 forwarding.  Hostile servers can force OpenSSH clients to do agent or X11 forwarding.
Line 110 
Line 116 
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/035_sshforwarding.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/035_sshforwarding.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   <li><a name="zsconsole"> </a>
   <font color="#009000"><strong>034: RELIABILITY FIX: Nov 10, 2000</strong></font><br>
   When running a sparc with a serial console, certain types of interrupts would
   cause great grief.<br>
   <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/sparc/034_zsconsole.patch">
   A source code patch exists which remedies this problem.</a>
   <p>
 <li><a name="execsubr"> </a>  <li><a name="execsubr"> </a>
 <font color="#009000"><strong>033: RELIABILITY FIX: Nov 6, 2000</strong></font> &nbsp; <i>All architectures</i><br>  <font color="#009000"><strong>033: RELIABILITY FIX: Nov 6, 2000</strong></font> &nbsp; <i>All architectures</i><br>
 Invalid fields in the exec header could cause a crash.<br>  Invalid fields in the exec header could cause a crash.<br>
Line 203 
Line 216 
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/023_xlock.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/023_xlock.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   <li><a name="mac68k_arandom"></a>
   <font color="#009000"><strong>022: INSTALLATION FIX: July 14, 2000</strong></font>
   <br>
   The MacOS installer shipped with OpenBSD 2.7 does not correctly make all
   devices, specifically it does not make the <tt>/dev/arandom</tt> device
   needed for the userland crypto such as ssh to work.  The problem shows itself
   when ssh-keygen fails to make RSA or DSA keys, resulting in messages like
   <b>RSA-generate_keys failed</b> or <b>DSA-generate_keys failed</b>.
   <br>
   To work around this, once your machine is up and running run the following
   commands as root:
   <pre>
   # cd /dev
   # ./MAKEDEV arandom
   </pre>
   <p>
   After doing this (and possibly installing one of the ssl27 packages),
   reboot your machine and it will generate ssh keys correctly.
   <p>
 <li><a name="X11_libs"></a>  <li><a name="X11_libs"></a>
 <font color="#009000"><strong>021: SECURITY FIX: July 14, 2000</strong></font> &nbsp; <i>All architectures</i><br>  <font color="#009000"><strong>021: SECURITY FIX: July 14, 2000</strong></font> &nbsp; <i>All architectures</i><br>
 Various problems in X11 libraries have various side effects.  We provide a  Various problems in X11 libraries have various side effects.  We provide a
Line 234 
Line 266 
 ignore the build error.   The whatis database will be rebuilt the next  ignore the build error.   The whatis database will be rebuilt the next
 time /etc/weekly runs.  time /etc/weekly runs.
 <p>  <p>
   <li><a name="pmax_msgbuf"></a>
   <font color="#009000"><strong>020: KERNEL BUG: July 10, 2000</strong></font><br>
   As originally shipped, the pmax port would fail to install due to
   <b>/kern/msgbuf</b> bugs.<br>
   The necessary fixes have been merged,
   and the binaries needed re-released on the FTP site.<br>
   However, the 2.7 <b>srcsys.tar.gz</b> file has not been updated.<br>
   If you recompile a kernel, you should use either the
   <a href=stable.html>stable release source tree</a> or apply the
   provided patch to a 2.7 source tree.
   <br>
   <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/pmax/020_pmax_msgbuf.patch">
   A source code patch exists which remedies this problem.</a>
   <p>
 <li><a name="ftpd"></a>  <li><a name="ftpd"></a>
 <font color="#009000"><strong>019: SECURITY FIX: July 5, 2000</strong></font> &nbsp; <i>All architectures</i><br>  <font color="#009000"><strong>019: SECURITY FIX: July 5, 2000</strong></font> &nbsp; <i>All architectures</i><br>
 Just like pretty much all the other unix ftp daemons on the planet,  Just like pretty much all the other unix ftp daemons on the planet,
Line 260 
Line 306 
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/ports/017_screen.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/ports/017_screen.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   <li><a name="xlhash"></a>
   <font color="#009000"><strong>016: DRIVER BUG: July 2, 2000</strong></font><br>
   The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&amp;sektion=4">xl(4)</a>
   driver supporting various 3com cards, had a bug which prevented the multicast
   filter from working correctly on the 3c905B, thus preventing many IPv6 things
   from working.
   <br>
   <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/i386/016_xlhash.patch">
   A source code patch exists which remedies this problem.</a>
   <p>
   <li><a name="ste"></a>
   <font color="#009000"><strong>015: DRIVER BUG: June 30, 2000</strong></font><br>
   The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ste&amp;sektion=4">ste(4)</a>
   driver supporting Ethernet cards based on the Sundance ST201 chipset
   (i.e., the D-Link 550TX) has a bug which causes the machine to panic at
   boot-time.
   <br>
   <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/i386/015_ste.patch">
   A source code patch exists which remedies this problem.</a>
   <p>
   <li><a name="pcvt"></a>
   <font color="#009000"><strong>014: DRIVER BUG: June 30, 2000</strong></font><br>
   The PC console driver (PCVT) has two bugs. Display problems can result if
   reverse video mode is turned on or off twice in a row. This patch also
   fixes a problem with scrolling region handling that has been seen by many
   users trying to use the BitchX irc client with the screen program.<br>
   <br>
   <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/i386/014_pcvt.patch">
   A source code patch exists which remedies this problem.</a>
   This is the second revision of the patch.
   <p>
 <li><a name="libedit"></a>  <li><a name="libedit"></a>
 <font color="#009000"><strong>013: SECURITY FIX: June 28, 2000</strong></font> &nbsp; <i>All architectures</i><br>  <font color="#009000"><strong>013: SECURITY FIX: June 28, 2000</strong></font> &nbsp; <i>All architectures</i><br>
 libedit would check for a <b>.editrc</b> file in the current directory.  libedit would check for a <b>.editrc</b> file in the current directory.
Line 277 
Line 354 
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/012_dhclient.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/012_dhclient.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 <p>  <p>
   <li><a name="if_an"></a>
   <font color="#009000"><strong>011: DRIVER BUG: June 17, 2000</strong></font><br>
   The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&amp;sektion=4">an(4)</a>
   Aironet Communications 4500/4800 IEEE 802.11DS driver has a bug which prevents
   <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&amp;sektion=8">ancontrol(8)</a> from working correctly, instead causing a panic.
   <br>
   <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/i386/011_an.patch">
   A source code patch exists which remedies this problem.</a>
   <p>
   <li><a name="amiga_cd"></a>
   <font color="#009000"><strong>010: CD DISTRIBUTION ERROR: June 15, 2000</strong></font><br>
   On the 2.7 CD media, the <b>amiga</b> distribution contains two pairs of archives
   files for installation, ie:
   <pre>
   -rw-r--r--  1 root  mirftp  20191465 Apr 29 14:27 base27.tar.gz
   -rw-r--r--  1 root  mirftp  20291753 May 13 19:33 base27.tgz
   -rw-r--r--  1 root  mirftp  13699507 Apr 29 14:26 comp27.tar.gz
   -rw-r--r--  1 root  mirftp  13748096 May 13 19:33 comp27.tgz
   -rw-r--r--  1 root  mirftp   1005376 Apr 29 14:26 etc27.tar.gz
   -rw-r--r--  1 root  mirftp   1010772 May 13 19:33 etc27.tgz
   -rw-r--r--  1 root  mirftp   2755567 Apr 29 14:26 game27.tar.gz
   -rw-r--r--  1 root  mirftp   2755624 May 13 19:33 game27.tgz
   -rw-r--r--  1 root  mirftp   5002872 Apr 29 14:26 man27.tar.gz
   -rw-r--r--  1 root  mirftp   5038896 May 13 19:33 man27.tgz
   -rw-r--r--  1 root  mirftp   1684356 Apr 29 14:26 misc27.tar.gz
   -rw-r--r--  1 root  mirftp   1684381 May 13 19:33 misc27.tgz
   </pre>
   The installation script will list ALL of these files.  For proper
   operation one should install the <b>*.tgz</b> versions, and deselect
   the <b>*.tar.gz</b> versions.<br>
   The FTP area sets do not suffer from this problem.
   <p>
 <li><a name="isakmpd"></a>  <li><a name="isakmpd"></a>
 <font color="#009000"><strong>009: SECURITY FIX: June 9, 2000</strong></font> &nbsp; <i>All architectures</i><br>  <font color="#009000"><strong>009: SECURITY FIX: June 9, 2000</strong></font> &nbsp; <i>All architectures</i><br>
 A serious bug in isakmpd(8) policy handling wherein policy  A serious bug in isakmpd(8) policy handling wherein policy
Line 345 
Line 454 
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/001_ipf.patch">  <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/001_ipf.patch">
 A source code patch exists which remedies this problem.</a>  A source code patch exists which remedies this problem.</a>
 It updates ipf to version 3.3.16.  It updates ipf to version 3.3.16.
 <p>  
 </ul>  
 <p>  
 <a name="i386"></a>  
 <h3><font color="#e00000">i386</font></h3>  
 <ul>  
 <li><a name="xlhash"></a>  
 <font color="#009000"><strong>016: DRIVER BUG: July 2, 2000</strong></font><br>  
 The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&amp;sektion=4">xl(4)</a>  
 driver supporting various 3com cards, had a bug which prevented the multicast  
 filter from working correctly on the 3c905B, thus preventing many IPv6 things  
 from working.  
 <br>  
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/i386/016_xlhash.patch">  
 A source code patch exists which remedies this problem.</a>  
 <p>  
 <li><a name="ste"></a>  
 <font color="#009000"><strong>015: DRIVER BUG: June 30, 2000</strong></font><br>  
 The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ste&amp;sektion=4">ste(4)</a>  
 driver supporting Ethernet cards based on the Sundance ST201 chipset  
 (i.e., the D-Link 550TX) has a bug which causes the machine to panic at  
 boot-time.  
 <br>  
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/i386/015_ste.patch">  
 A source code patch exists which remedies this problem.</a>  
 <p>  
 <li><a name="pcvt"></a>  
 <font color="#009000"><strong>014: DRIVER BUG: June 30, 2000</strong></font><br>  
 The PC console driver (PCVT) has two bugs. Display problems can result if  
 reverse video mode is turned on or off twice in a row. This patch also  
 fixes a problem with scrolling region handling that has been seen by many  
 users trying to use the BitchX irc client with the screen program.<br>  
 <br>  
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/i386/014_pcvt.patch">  
 A source code patch exists which remedies this problem.</a>  
 This is the second revision of the patch.  
 <p>  
 <li><a name="if_an"></a>  
 <font color="#009000"><strong>011: DRIVER BUG: June 17, 2000</strong></font><br>  
 The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&amp;sektion=4">an(4)</a>  
 Aironet Communications 4500/4800 IEEE 802.11DS driver has a bug which prevents  
 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ancontrol&amp;sektion=8">ancontrol(8)</a> from working correctly, instead causing a panic.  
 <br>  
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/i386/011_an.patch">  
 A source code patch exists which remedies this problem.</a>  
 <p>  
 </ul>  
 <p>  
 <a name="mac68k"></a>  
 <h3><font color="#e00000">mac68k</font></h3>  
 <ul>  
 <li><a name="mac68k_arandom"></a>  
 <font color="#009000"><strong>022: INSTALLATION FIX: July 14, 2000</strong></font>  
 <br>  
 The MacOS installer shipped with OpenBSD 2.7 does not correctly make all  
 devices, specifically it does not make the <tt>/dev/arandom</tt> device  
 needed for the userland crypto such as ssh to work.  The problem shows itself  
 when ssh-keygen fails to make RSA or DSA keys, resulting in messages like  
 <b>RSA-generate_keys failed</b> or <b>DSA-generate_keys failed</b>.  
 <br>  
 To work around this, once your machine is up and running run the following  
 commands as root:  
 <pre>  
 # cd /dev  
 # ./MAKEDEV arandom  
 </pre>  
 <p>  
 After doing this (and possibly installing one of the ssl27 packages),  
 reboot your machine and it will generate ssh keys correctly.  
 </ul>  
 <p>  
 <a name="sparc"></a>  
 <h3><font color="#e00000">sparc</font></h3>  
 <ul>  
 <li><a name="qe"> </a>  
 <font color="#009000"><strong>036: RELIABILITY FIX: Nov 17, 2000</strong></font><br>  
 Configuring a qec+qe causes a NMI panic.<br>  
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/sparc/036_qe.patch">  
 A source code patch exists which remedies this problem.</a>  
 <p>  
 <li><a name="zsconsole"> </a>  
 <font color="#009000"><strong>034: RELIABILITY FIX: Nov 10, 2000</strong></font><br>  
 When running a sparc with a serial console, certain types of interrupts would  
 cause great grief.<br>  
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/sparc/034_zsconsole.patch">  
 A source code patch exists which remedies this problem.</a>  
 <p>  
 </ul>  
 <p>  
 <a name="amiga"></a>  
 <h3><font color="#e00000">amiga</font></h3>  
 <ul>  
 <li><a name="amiga_cd"></a>  
 <font color="#009000"><strong>010: CD DISTRIBUTION ERROR: June 15, 2000</strong></font><br>  
 On the 2.7 CD media, the <b>amiga</b> distribution contains two pairs of archives  
 files for installation, ie:  
 <pre>  
 -rw-r--r--  1 root  mirftp  20191465 Apr 29 14:27 base27.tar.gz  
 -rw-r--r--  1 root  mirftp  20291753 May 13 19:33 base27.tgz  
 -rw-r--r--  1 root  mirftp  13699507 Apr 29 14:26 comp27.tar.gz  
 -rw-r--r--  1 root  mirftp  13748096 May 13 19:33 comp27.tgz  
 -rw-r--r--  1 root  mirftp   1005376 Apr 29 14:26 etc27.tar.gz  
 -rw-r--r--  1 root  mirftp   1010772 May 13 19:33 etc27.tgz  
 -rw-r--r--  1 root  mirftp   2755567 Apr 29 14:26 game27.tar.gz  
 -rw-r--r--  1 root  mirftp   2755624 May 13 19:33 game27.tgz  
 -rw-r--r--  1 root  mirftp   5002872 Apr 29 14:26 man27.tar.gz  
 -rw-r--r--  1 root  mirftp   5038896 May 13 19:33 man27.tgz  
 -rw-r--r--  1 root  mirftp   1684356 Apr 29 14:26 misc27.tar.gz  
 -rw-r--r--  1 root  mirftp   1684381 May 13 19:33 misc27.tgz  
 </pre>  
 The installation script will list ALL of these files.  For proper  
 operation one should install the <b>*.tgz</b> versions, and deselect  
 the <b>*.tar.gz</b> versions.<br>  
 The FTP area sets do not suffer from this problem.  
 <p>  
 </ul>  
 <p>  
 <a name="pmax"></a>  
 <h3><font color="#e00000">pmax</font></h3>  
 <ul>  
 <li><a name="pmax_msgbuf"></a>  
 <font color="#009000"><strong>020: KERNEL BUG: July 10, 2000</strong></font><br>  
 As originally shipped, the pmax port would fail to install due to  
 <b>/kern/msgbuf</b> bugs.<br>  
 The necessary fixes have been merged,  
 and the binaries needed re-released on the FTP site.<br>  
 However, the 2.7 <b>srcsys.tar.gz</b> file has not been updated.<br>  
 If you recompile a kernel, you should use either the  
 <a href=stable.html>stable release source tree</a> or apply the  
 provided patch to a 2.7 source tree.  
 <br>  
 <a href="http://ftp.openbsd.org/pub/OpenBSD/patches/2.7/pmax/020_pmax_msgbuf.patch">  
 A source code patch exists which remedies this problem.</a>  
 <p>  <p>
 </ul>  </ul>
 <p>  <p>
Legend:
Removed from v.1.67  
changed lines
  Added in v.1.68