=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/errata56.html,v retrieving revision 1.1 retrieving revision 1.2 diff -u -r1.1 -r1.2 --- www/errata56.html 2014/09/06 13:59:35 1.1 +++ www/errata56.html 2014/09/30 19:44:30 1.2 @@ -89,7 +89,32 @@   All architectures
Incorrect RX ring computation leads to panics under load with bge(4), em(4) and ix(4).
- + +A source code patch exists which remedies this problem. +

+ +

  • +002: RELIABILITY FIX: October 1, 2014All architectures
    +If IPv6 autoconf is active on an interface and the autoconfprivacy extension is used, +redundant addresses are added whenever an autoconfprivacy address expires. +The autoconfprivacy extension is used by default and can be disabled with ifconfig(8) +as a workaround: +
    +# ifconfig em0 -autoconfprivacy
    +
    + +A source code patch exists which remedies this problem. +

    + +

  • +003: SECURITY FIX: October 1, 2014All architectures
    +nginx can reuse cached SSL sessions in unrelated contexts, allowing virtual +host confusion attacks in some configurations. +This issue was assigned CVE-2014-3616. +
    + A source code patch exists which remedies this problem.