This file contains post-release ERRATA for 2.2.5 and should always be considered the definitive place to look *first* before reporting a problem with this release. This file will also be periodically updated as new issues are reported so even if you've checked this file recently, check it again before filing a bug report. Any changes to this file are also automatically emailed to: freebsd-stable@freebsd.org For 2.2.5 security advisories, see: ftp://freebsd.org/pub/CERT/ For the latest information (note the URL carefully - this is NOT ftp.freebsd.org). ---- Security Advisories: Current active security advisories for 2.2.5: One o FreeBSD-SA-97:05 (available from ftp://freebsd.org/pub/CERT/) - security compromise via open(). Patches available in ftp://freebsd.org/pub/CERT/patches/SA-97:05/ You may also simply remove /dev/io as a quick work-around if you're not running an X server or some other specialized utility which requires access to the I/O instructions. ---- System Update Information: o The appletalk stack was broken in 2.2.5 and, if you plan to run appletalk, you should apply the following patch: ftp://ftp.freebsd.org/pub/FreeBSD/2.2.5-RELEASE/updates/atalk.diff.2.2 o The line printer spooler lpd will, when sending jobs to remote printers, kill the child process sending to the remote after the timeout specified in the `ct' capability (2 minutes by default). For a fix, please upgrade the lpd subsystem to 2.2-stable. As a workaround, increase the `ct' capability to an unreasonably large number of seconds (like 3600). o Intel "F00F bug" enables users to hang machines with Pentium processors if they have access to the machine and can execute programs. Fix: Update to the 2.2-stable version of the kernel or apply the patch found in: ftp://ftp.freebsd.org/pub/FreeBSD/2.2.5-RELEASE/updates/f00f.diff.2.2 o A bug in the ipfw code exists where using the "reset tcp" firewall command causes the kernel to write ethernet headers onto random kernel stack locations. Fix: Update to the 2.2-stable version of the kernel or apply the patch found in ftp://ftp.freebsd.org/pub/FreeBSD/2.2.5-RELEASE/updates/ipfw.diff