This errata document contains “late-breaking news” about FreeBSD 9.3-RELEASE Before installing this version, it is important to consult this document to learn about any post-release discoveries or problems that may already have been found and fixed.
Any version of this errata document actually distributed
with the release (for example, on a CDROM distribution) will be
out of date by definition, but other copies are kept updated on
the Internet and should be consulted as the “current
errata” for this release. These other copies of the
errata are located at http://www.FreeBSD.org/releases/, plus any sites
which keep up-to-date mirrors of this location.
Source and binary snapshots of FreeBSD 9.3-STABLE also contain up-to-date copies of this document (as of the time of the snapshot).
For a list of all FreeBSD CERT security advisories, see http://www.FreeBSD.org/security/ or ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/.
Problems described in the following security advisories have
been fixed in 9.3-RELEASE. For more information, consult
the individual advisories available from
- http://security.FreeBSD.org/.
| Advisory | Date | Topic |
|---|---|---|
| SA-14:18.openssl | 9 September 2014 | Multiple vulnerabilities |
| SA-14:19.tcp | 16 September 2014 | Denial of Service in TCP packet - processing. |
| SA-14:20.rtsold | 21 October 2014 | Remote buffer overflow - vulnerability. |
| SA-14:21.routed | 21 October 2014 | Remote denial of service - vulnerability. |
| SA-14:22.namei | 21 October 2014 | Memory leak in sandboxed namei - lookup. |
| SA-14:23.openssl | 21 October 2014 | Multiple vulerabilities. |
| SA-14:25.setlogin | 04 November 2014 | Kernel stack disclosure. |
| SA-14:26.ftp | 04 November 2014 | Remote code execution. |
This file, and other release-related documents,
+ http://security.FreeBSD.org/.
| Advisory | Date | Topic |
|---|---|---|
| SA-14:18.openssl | 9 September 2014 | Multiple vulnerabilities |
| SA-14:19.tcp | 16 September 2014 | Denial of Service in TCP packet + processing. |
| SA-14:20.rtsold | 21 October 2014 | Remote buffer overflow + vulnerability. |
| SA-14:21.routed | 21 October 2014 | Remote denial of service + vulnerability. |
| SA-14:22.namei | 21 October 2014 | Memory leak in sandboxed namei + lookup. |
| SA-14:23.openssl | 21 October 2014 | Multiple vulerabilities. |
| SA-14:25.setlogin | 04 November 2014 | Kernel stack disclosure. |
| SA-14:26.ftp | 04 November 2014 | Remote code execution. |
| SA-14:28.file | 10 December 2014 | Multiple vulnerabilities in file(1) and + libmagic(3) |
| SA-14:29.bind | 10 December 2014 | Remote denial of service + vulnerability |
| SA-14:31.ntp | 23 December 2014 | Multiple vulnerabilities |
| SA-15:01.openssl | 14 January 2015 | Multiple vulnerabilities |
| FreeBSD-SA-15:02.kmem | 27 January 2015 | SCTP kernel memory corruption and + disclosure vulnerability |
| FreeBSD-SA-15:03.sctp | 27 January 2015 | SCTP stream reset + vulnerability |
| Errata | Date | Topic |
|---|---|---|
| FreeBSD-EN-14:10.tzdata | 21 October 2014 | Time zone data file update |
| FreeBSD-EN-14:11.crypt | 21 October 2014 | Change crypt(3) default hashing algorithm + back to DES |
| FreeBSD-EN-14:12.zfs | 11 November 2014 | Fix NFSv4 and ZFS cache consistency + issue |
| FreeBSD-EN-14:13.freebsd-update | 23 December 2014 | Fixed directory deletion issue in + freebsd-update(8) |
This file, and other release-related documents, can be downloaded from http://www.FreeBSD.org/releases/.
For questions about FreeBSD, read the documentation before contacting <questions@FreeBSD.org>.
All users of FreeBSD 9.3-STABLE should subscribe to the <stable@FreeBSD.org> mailing list.
For questions about this documentation, e-mail <doc@FreeBSD.org>.
\ No newline at end of file