FreeBSD 9.3-RELEASE Errata
Abstract
This document lists errata items for FreeBSD 9.3-RELEASE, containing significant information discovered after the release or too late in the release cycle to be otherwise included in the release documentation. This information includes security advisories, as well as news relating to the software or documentation that could affect its operation or usability. An up-to-date version of this document should always be consulted before installing this version of FreeBSD.
This errata document for FreeBSD 9.3-RELEASE will be maintained until the EoL of FreeBSD 9.3-STABLE.
Table of Contents
Introduction
This errata document contains "late-breaking news" about FreeBSD 9.3-RELEASE Before installing this version, it is important to consult this document to learn about any post-release discoveries or problems that may already have been found and fixed.
Any version of this errata document actually distributed with
the release (for example, on a CDROM distribution) will be out of
date by definition, but other copies are kept updated on the
Internet and should be consulted as the "current errata" for this
release. These other copies of the errata are located at
https://www.FreeBSD.org/releases/, plus any sites
which keep up-to-date mirrors of this location.
Source and binary snapshots of FreeBSD 9.3-STABLE also contain up-to-date copies of this document (as of the time of the snapshot).
For a list of all FreeBSD CERT security advisories, see
https://www.FreeBSD.org/security/.
Security Advisories
Problems described in the following security advisories have
been fixed in 9.3-RELEASE. For more information, consult the
individual advisories available from http://security.FreeBSD.org/.
| Advisory | Date | Topic |
|---|---|---|
|
9 September 2014 |
Multiple vulnerabilities |
|
|
16 September 2014 |
Denial of Service in TCP packet processing. |
|
|
21 October 2014 |
Remote buffer overflow vulnerability. |
|
|
21 October 2014 |
Remote denial of service vulnerability. |
|
|
21 October 2014 |
Memory leak in sandboxed namei lookup. |
|
|
21 October 2014 |
Multiple vulerabilities. |
|
|
04 November 2014 |
Kernel stack disclosure. |
|
|
04 November 2014 |
Remote code execution. |
|
|
10 December 2014 |
Multiple vulnerabilities in file(1) and libmagic(3) |
|
|
10 December 2014 |
Remote denial of service vulnerability |
|
|
23 December 2014 |
Multiple vulnerabilities |
|
|
14 January 2015 |
Multiple vulnerabilities |
|
|
27 January 2015 |
SCTP kernel memory corruption and disclosure vulnerability |
|
|
27 January 2015 |
SCTP stream reset vulnerability |
|
|
25 February 2015 |
Integer overflow in IGMP protocol |
|
|
25 February 2015 |
Remote denial of service vulnerability |
|
|
19 March 2015 |
Multiple vulnerabilities |
|
|
7 April 2015 |
Multiple vulnerabilities |
|
|
7 April 2015 |
Router advertisement Denial of Service |
|
|
16 June 2015 |
Multiple vulnerabilities |
|
|
7 July 2015 |
Resolver remote denial of service |
|
|
21 July 2015 |
resource exhaustion due to sessions stuck in
|
|
|
28 July 2015 |
resource exhaustion in TCP reassembly |
|
|
28 July 2015 |
Multiple vulnerabilities |
|
|
28 July 2015 |
Remote denial of service vulnerability |
|
|
5 August 2015 |
Remote denial of service vulnerability |
|
|
18 August 2015 |
Fix multiple integer overflows in libbsdxml(3). |
|
|
25 August 2015 |
Fix local privilege escalation in IRET handler. |
|
|
25 August 2015 |
Multiple vulnerabilities |
|
|
2 September 2015 |
Remote denial of service vulnerability |
|
|
29 September 2015 |
Remote denial of service |
|
|
26 October 2015 |
Multiple vulnerabilities |
|
|
5 December 2015 |
Multiple vulnerabilities |
|
|
16 December 2015 |
Remote denial of service |
|
|
14 January 2016 |
ICMPv6 error message vulnerability |
|
|
14 January 2016 |
Panic threshold bypass vulnerability |
|
|
14 January 2016 |
Incorrect |
|
|
14 January 2016 |
setgroups(2) system call vulnerability |
|
|
14 January 2016 |
MD5 signature denial of service |
|
|
14 January 2016 |
Insecure default configuration file permissions |
|
|
14 January 2016 |
OpenSSH client information leak |
|
|
27 January 2016 |
Remote denial of service vulnerability. |
|
|
27 January 2016 |
Multiple vulnerabilities. |
|
|
27 January 2016 |
issetugid(2) system call vulnerability. |
|
|
30 January 2016 |
SSLv2 cipher suite downgrade vulnerability. |
|
|
7 March 2016 |
Multiple vulnerabilities |
|
|
10 March 2016 |
Multiple vulnerabilities |
|
|
16 March 2016 |
OpenSSH xauth injection vulnerability |
|
|
16 March 2016 |
Incorrect argument validation in sysarch(2) |
|
|
29 April 2016 |
Multiple ntp vulnerabilities. |
|
|
29 April 2016 |
Multiple OpenSSL vulnerabilities. |
|
|
17 May 2016 |
Keyboard driver buffer overflow |
|
|
17 May 2016 |
Incorrect argument handling in sendmsg(2) |
|
|
31 May 2016 |
Kernel stack disclosure in Linux compatibility layer |
|
|
31 May 2016 |
Kernel stack disclosure in 4.3BSD compatibility layer |
|
|
31 May 2016 |
Absolute path traversal vulnerability |
|
|
31 May 2016 |
Absolute path traversal vulnerability |
|
|
3 June 2016 |
Multiple ntp vulnerabilties |
|
|
25 July 2016 |
heap overflow vulnerability |
|
|
23 September 2016 |
Multiple vulnerabilities |
|
|
26 September 2016 |
Regression in OpenSSL suite |
|
|
10 October 2016 |
BIND denial of service |
|
|
10 October 2016 |
Heap overflow vulnerability |
|
|
10 October 2016 |
Multiple vulnerabilities |
|
|
10 October 2016 |
Multiple vulnerabilities |
|
|
2 November 2016 |
Remote Denial of Service vulnerability |
|
|
2 November 2016 |
Remote Denial of Service vulnerability |
|
|
6 December 2016 |
Possible login(1) argument injection |
|
|
6 December 2016 |
link_ntoa(3) buffer overflow |
Errata Notices
| Errata | Date | Topic |
|---|---|---|
|
21 October 2014 |
Time zone data file update |
|
|
21 October 2014 |
Change crypt(3) default hashing algorithm back to DES |
|
|
11 November 2014 |
Fix NFSv4 and ZFS cache consistency issue |
|
|
23 December 2014 |
Fixed directory deletion issue in freebsd-update(8) |
|
|
25 February 2015 |
vt(4) crash with improper ioctl parameters |
|
|
25 February 2015 |
OpenSSL update |
|
|
25 February 2015 |
freebsd-update(8) updates libraries in suboptimal order |
|
|
13 May 2015 |
freebsd-update(8) does not ensure the previous upgrade has completed |
|
|
9 June 2015 |
Multiple denial of service issues |
|
|
30 June 2015 (revised) |
Sendmail TLS/DH interoperability improvement |
|
|
30 June 2015 |
Fix inconsistency between locale and rune locale states |
|
|
25 August 2015 |
Insufficient check of supported pkg(7) signature methods. |
|
|
16 September 2015 |
Implement |
|
|
4 November 2015 |
kqueue(2) write events never fire for files larger than 2GB. |
|
|
4 November 2015 |
Applications exiting due to segmentation violation on a correct memory address. |
|
|
14 January 2016 |
Invalid TCP checksum issue. |
|
|
14 January 2016 |
YP/NIS library bug. |
|
|
4 May 2016 |
Memory leak in ZFS |
|
|
25 July 2016 |
Fix freebsd-update(8) support of FreeBSD 11.0-RELEASE |
|
|
6 December 2016 |
Fix warnings about invalid timezone abbreviations |
|
|
6 December 2016 |
Update timezone database information |
Late-Breaking News
No late-breaking news.