Index: stable/4/release/doc/en_US.ISO8859-1/errata/article.sgml
===================================================================
--- stable/4/release/doc/en_US.ISO8859-1/errata/article.sgml	(revision 123150)
+++ stable/4/release/doc/en_US.ISO8859-1/errata/article.sgml	(revision 123151)
@@ -1,199 +1,206 @@
 <!--
 	FreeBSD errata document.  Unlike some of the other RELNOTESng
 	files, this file should remain as a single SGML file, so that
 	the dollar FreeBSD dollar header has a meaningful modification
 	time.  This file is all but useless without a datestamp on it,
 	so we'll take some extra care to make sure it has one.
 
 	(If we didn't do this, then the file with the datestamp might
 	not be the one that received the last change in the document.)
 
 -->
 
 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook V4.1-Based Extension//EN" [
 <!ENTITY % man PUBLIC "-//FreeBSD//ENTITIES DocBook Manual Page Entities//EN">
 %man;
 <!ENTITY % authors PUBLIC  "-//FreeBSD//ENTITIES DocBook Author Entities//EN">
 %authors;
 <!ENTITY % mlists PUBLIC "-//FreeBSD//ENTITIES DocBook Mailing List Entities//EN">
 %mlists;
 <!ENTITY % trademarks PUBLIC "-//FreeBSD//ENTITIES DocBook Trademark Entities//EN">
 %trademarks;
 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN">
 %release;
 
 ]>
 
 <article>
   <articleinfo>
     <title>&os;
 <![ %release.type.snapshot [
     &release.prev;
 ]]>
 <![ %release.type.release [
     &release.current;
 ]]>
     Errata</title>
 
     <corpauthor>
     The &os; Project
     </corpauthor>
 
     <pubdate>$FreeBSD$</pubdate>
 
     <copyright>
       <year>2000</year>
       <year>2001</year>
       <year>2002</year>
       <year>2003</year>
       <holder role="mailto:doc@FreeBSD.org">The FreeBSD Documentation Project</holder>
     </copyright>
 
     <legalnotice id="trademarks" role="trademarks">
       &tm-attrib.freebsd;
       &tm-attrib.intel;
       &tm-attrib.general;
     </legalnotice>
   </articleinfo>
 
   <abstract>
     <para>This document lists errata items for &os; 
 <![ %release.type.snapshot [
       &release.prev;,
 ]]>
 <![ %release.type.release [
       &release.current;,
 ]]>
       containing significant information discovered after the release
       or too late in the release cycle to be otherwise included in the
       release documentation.
       This information includes security advisories, as well as news
       relating to the software or documentation that could affect its
       operation or usability.  An up-to-date version of this document
       should always be consulted before installing this version of
       &os;.</para>
 
     <para>This errata document for &os; 
 <![ %release.type.snapshot [
       &release.prev;
 ]]>
 <![ %release.type.release [
       &release.current;
 ]]>
       will be maintained until the release of &os; &release.next;.</para>
   </abstract>
 
   <sect1>
     <title>Introduction</title>
 
     <para>This errata document contains <quote>late-breaking news</quote>
       about &os;
 <![ %release.type.snapshot [
       &release.prev;.
 ]]>
 <![ %release.type.release [
       &release.current;.
 ]]>
       Before installing this version, it is important to consult this
       document to learn about any post-release discoveries or problems
       that may already have been found and fixed.</para>
 
     <para>Any version of this errata document actually distributed
       with the release (for example, on a CDROM distribution) will be
       out of date by definition, but other copies are kept updated on
       the Internet and should be consulted as the <quote>current
       errata</quote> for this release.  These other copies of the
       errata are located at <ulink
       url="http://www.FreeBSD.org/releases/"></ulink>, plus any sites
       which keep up-to-date mirrors of this location.</para>
 
     <para>Source and binary snapshots of &os; &release.branch; also
       contain up-to-date copies of this document (as of the time of
       the snapshot).</para>
 
     <para>For a list of all &os; CERT security advisories, see <ulink
       url="http://www.FreeBSD.org/security/"></ulink> or <ulink
       url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/"></ulink>.</para>
 
   </sect1>
 
   <sect1>
     <title>Security Advisories</title>
 
 <![ %release.type.release [
     <para>No active security advisories.</para>
 ]]>
 
 <![ %release.type.snapshot [
-    <para>No active security advisories.</para>
+
+    <para><application>BIND</application> contains the potential for a
+      denial-of-service attack.  This vulnerability has been addressed
+      by a vendor patch on the &release.prev; security fix branch and
+      by the import of a new version to the &release.branch;
+      development branch.  For more information, see 
+      <ulink url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03:19.bind.asc">FreeBSD-SA-03:19</ulink>.</para>
+
 ]]>
 
   </sect1>
 
   <sect1>
     <title>Late-Breaking News</title>
 
 <![ %release.type.release [
     <para>No news.</para>
 ]]>
 
 <![ %release.type.snapshot [
 
     <para>(28 Oct 2003) Very late in the release cycle, a change was made to the
       HyperThreading (HTT) support on &intel; processors.  HTT support
       is now enabled by default on SMP-capable kernels; as a result,
       the <literal>HTT</literal> kernel option is unnecessary and has
       been removed.  The extra logical CPUs are always started so that
       they can handle interrupts, but are prevented from executing
       user processes by default.  To enable the logical CPUs, change
       the value of the <varname>machdep.hlt_logical_cpus</varname>
       &man.sysctl.8; variable from <literal>1</literal> to
       <literal>0</literal>.  This value can also be set from the
       loader as a tunable of the same name.  This behavior is now
       identical to &os; 5.<replaceable>X</replaceable>.</para>
 
     <para>(29 Oct 2003) Some of the packages contained in the first CD-ROM depend on
       different versions of the <application>OpenLDAP</application>
       packages, which cannot co-exist on the same host.  One
       manifestation of this problem is that it is not possible to
       install both the <filename role="package">x11/gnome2</filename>
       and <filename role="package">x11/kde3</filename>
       packages.</para>
 
     <para>(30 Oct 2003) It appears that the
       <filename>crypto</filename> distribution is required for correct
       functioning of the &os; base system.  At the very least, the
       libraries contained in the <filename>crypto</filename>
       distribution are required for &man.pkg.add.1;.</para>
 
     <para>(30 Oct 2003) There are known cases of fairly-recent i386
       machines with BIOSes that do not support booting from emulation
       mode El Torito CDROMs.  This prevents booting from the &os;
       &release.current; CDROMs.  As a workaround, download the floppy
       disk images, use them to boot the machine into
       &man.sysinstall.8;, and then do a CDROM install.  This problem
       does not seem to be wide-spread as of this writing.
 
       <note>
 	<para>&os; 5.<replaceable>X</replaceable> uses non-emulation
 	  El Torito booting on its CDROM releases by default.  These,
 	  of course, cannot be booted on very old i386 machines that
 	  only support emulation mode.</para>
       </note>
 
       </para>
 
     <para>(10 Nov 2003) An update was made to the
       <literal>xterm</literal> entry in the &man.termcap.5; database
       which, among other things, removed the (already deprecated)
       <literal>bs</literal> backspacing capability.  The &man.hack.6;
       game appears to depend on this capability and hence fails when
       run from inside a window with a terminal type of
       <literal>xterm</literal>.</para>
 
     <para>(10 Nov 2003) Tagged queueing in the &man.ata.4; driver
       is broken and appears to cause kernel panics.</para>
 
 ]]>
   </sect1>
 </article>