[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-10:01.freebsd

Previous thread: [FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-06:09.openssh [REVISED] by FreeBSD Security Advisories on Wednesday, March 1, 2006 - 9:06 am. (3 messages)

Next thread: [FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-06:12.opie by FreeBSD Security Advisories on Wednesday, March 22, 2006 - 9:11 am. (3 messages)
From: FreeBSD Security Advisories
Date: Wednesday, March 22, 2006 - 9:11 am

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=============================================================================
FreeBSD-SA-06:11.ipsec                                      Security Advisory
                                                          The FreeBSD Project

Topic:          IPsec replay attack vulnerability

Category:       core
Module:         sys_netipsec
Announced:      2006-03-22
Credits:        Pawel Jakub Dawidek
Affects:        All FreeBSD releases since 4.8-RELEASE
Corrected:      2006-03-22 16:01:08 UTC (RELENG_6, 6.1-STABLE)
                2006-03-22 16:01:38 UTC (RELENG_6_0, 6.0-RELEASE-p6)
                2006-03-22 16:01:56 UTC (RELENG_5, 5.5-STABLE)
                2006-03-22 16:02:17 UTC (RELENG_5_4, 5.4-RELEASE-p13)
                2006-03-22 16:02:35 UTC (RELENG_5_3, 5.3-RELEASE-p28)
                2006-03-22 16:02:49 UTC (RELENG_4, 4.11-STABLE)
                2006-03-22 16:03:05 UTC (RELENG_4_11, 4.11-RELEASE-p16)
                2006-03-22 16:03:25 UTC (RELENG_4_10, 4.10-RELEASE-p22)
CVE Name:       CVE-2006-0905

For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit
<URL:http://www.freebsd.org/security/>.

I.   Background

IPsec is a set of protocols, including ESP (Encapsulating Security Payload)
and AH (Authentication Header), that provide security services for IP
datagrams.  ESP protects IP payloads from wire-tapping by encrypting them
using secret key cryptography algorithms.  AH guarantees the integrity of IP
packets and protects them from intermediate alteration or impersonation by
attaching a cryptographic checksum computed using one-way hash functions.

II.  Problem Description

IPsec provides an anti-replay service which when enabled prevents an attacker
from successfully executing a replay attack.  This is done through the
verification of sequence numbers.  A programming error in the ...
From: FreeBSD Errata Notices
Date: Wednesday, January 6, 2010 - 3:54 pm

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=============================================================================
FreeBSD-EN-10:01.freebsd                                        Errata Notice
                                                          The FreeBSD Project

Topic:          Various FreeBSD 8.0-RELEASE improvements

Category:       core
Module:         kern
Announced:      2010-01-06
Affects:        FreeBSD 8.0-RELEASE.
Corrected:      2010-01-06 21:45:30 UTC (RELENG_8_0, 8.0-RELEASE-p2)

For general information regarding FreeBSD Errata Notices and Security
Advisories, including descriptions of the fields above, security
branches, and the following sections, please visit
<URL:http://security.FreeBSD.org/>.

I.      Background

Since FreeBSD 8.0 was released, several stability and performance problems
have been identified.  This Errata Notice describes several fixes judged to
be of particular importance, but low risk, to users with specific workloads
or using specific features that trigger these problems.

Areas where problems are addressed include NFS, ZFS, Multicast networking,
SCTP as well as the rename(2) syscall.

II.     Description

* Slow NFS client reconnects when using TCP

Under certain circumstances the NFS client can queue requests even though
the remote server has initiated a connection shutdown.
The deferred notice of the shutdown can cause slow reconnects against
an NFS server that drops inactive connections.

* Possible panics in ZFS

Due to inadequate checks, attempts to modify a file on a read-only ZFS
snapshot will lead to a 'dirtying snapshot' kernel panic.

The system will also panic if ZFS is combined with a MAC policy supporting
file system labeling (e.g., mac_biba(4) or mac_mls(4)).

* Multicast regression and panic

Multicast filtering may not pass incoming IGMP messages if the group
has not been joined.  User space routing daemons will therefore not see
all IGMP control traffic.

Further, the system will panic ...
From: Matt Olander
Date: Tuesday, February 3, 2009 - 8:17 am

FreeBSD Mall, Inc. is happy to announce the availability of FreeBSD
7.1-based products.  The four CD set and DVD are now shipping to
subscribers around the world.

If you haven't yet placed your order, you may do so at
http://www.freebsdmall.com.

You may also elect to start your subscription with the latest release.  
Sit back and relax while each new release of FreeBSD is delivered  
straight to your door.

In addition to CD and DVD products and toolkit, we also have a large  
collection of FreeBSD shirts, hats, jackets, boxer shorts, stickers,  
case-plates, mouse pads, and other promotional materials.

FYI, during the course of the next few months, the Mall site will be  
getting a much needed facelift that will include new promotional BSD  
products. Stay tuned ;-)

Thanks and enjoy!

-matt

_______________________________________________
freebsd-announce@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-announce
To unsubscribe, send any mail to "freebsd-announce-unsubscribe@freebsd.org"
Previous thread: [FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-06:09.openssh [REVISED] by FreeBSD Security Advisories on Wednesday, March 1, 2006 - 9:06 am. (3 messages)

Next thread: [FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-06:12.opie by FreeBSD Security Advisories on Wednesday, March 22, 2006 - 9:11 am. (3 messages)