summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Fix bspatch heap overflow vulnerability. [SA-16:29]delphij2016-10-1014-203/+1255
| | | | | | | | Fix multiple portsnap vulnerabilities. [SA-16:30] Fix multiple libarchive vulnerabilities. [SA-16:31] Approved by: so
* Apply upstream revision 3612ff6fcec0e3d1f2a598135fe12177c0419582:delphij2016-09-263-4/+7
| | | | | | | | | | | | Fix overflow check in BN_bn2dec() Fix an off by one error in the overflow check added by 07bed46 ("Check for errors in BN_bn2dec()"). This fixes a regression introduced in SA-16:26.openssl. Submitted by: jkim PR: 212921 Approved by: so
* Fix multiple OpenSSL vulnerabilitites.delphij2016-09-2318-92/+223
| | | | | Approved by: so Security: FreeBSD-SA-16:26.openssl
* Release 6 errata notices for 10.3-RELEASE, all related to Microsoft Hyper-V.glebius2016-08-1210-153/+332
| | | | | Submitted by: Dexuan Cui <decui microsoft.com>, gjb Approved by: so
* Fix bspatch heap overflow vulnerability. [SA-16:25]delphij2016-07-254-2/+14
| | | | | | | Fix freebsd-update(8) support of FreeBSD 11.0 release distribution. [EN-16:09] Approved by: so
* Fix multiple ntp vulnerabilities.delphij2016-06-04161-3086/+4306
| | | | | Security: FreeBSD-SA-16:24.ntp Approved by: so
* Fix kernel stack disclosure in Linux compatibility layer. [SA-16:20]glebius2016-05-315-1/+14
| | | | | | | | Fix kernel stack disclosure in 4.3BSD compatibility layer. [SA-16:21] Security: SA-16:20 Security: SA-16:21 Approved by: so
* Merge r300361 by mm@:glebius2016-05-316-4/+44
| | | | | | | | | Backport security fix for absolute path traversal vulnerability in bsdcpio. Security: CVE-2015-2304 Security: SA-16:22 Approved by: so
* - Use unsigned version of min() when handling arguments of SETFKEY ioctl.glebius2016-05-174-2/+12
| | | | | | | | | | | | - Validate that user supplied control message length in sendmsg(2) is not negative. Security: SA-16:18 Security: CVE-2016-1886 Security: SA-16:19 Security: CVE-2016-1887 Submitted by: C Turt <cturt hardenedbsd.org> Approved by: so
* Fix multiple OpenSSL vulnerabilitites. [SA-16:17]delphij2016-05-0412-28/+81
| | | | | | | | | | Fix performance regression in libc hash(3). [EN-16:06] Fix excessive latency in x86 IPI delivery. [EN-16:07] Fix memory leak in ZFS. [EN-16:08] Approved by: so
* Fix ntp multiple vulnerabilities.delphij2016-04-29187-1243/+4544
| | | | Approved by: so
* Update releng/10.3 to -RELEASE status in preparation for the finalmarius2016-03-251-1/+1
| | | | | | 10.3-RELEASE builds. Approved by: re (implicit)
* Anticipate the expected 10.3-RELEASE date.marius2016-03-251-0/+3
| | | | Approved by: re (implicit)
* Set the static abitag to the current value of __FreeBSD_version.marius2016-03-251-1/+1
| | | | Approved by: re (implicit)
* Prune empty sections.gjb2016-03-251-107/+0
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* - Update relnotes items:hrs2016-03-241-4/+57
| | | | | | | | | | | | | | | | grdc(6) 12-hour mode fixed, inetd(8) crash with IPv6 address fixed, netstat(1) statistics counter divided by 1024 fixed, rc.d/netif now updates only static routes, vt(4) kern.vt.bell_enable, puc(4) MSI support, epair(4) and lagg(4) cloner vnet jail support, epair(4) panic fixed, lagg(4) per-interface sysctl nodes replaced with ifconfig flags, lagg(4) panic fixed, SIOCGDRLST_IN6 and SIOCGPRLST_IN6 ioctls removed. Approved by: re (implicit)
* - Update relnotes items:hrs2016-03-241-4/+32
| | | | | | | | | | | reword description about ar -D/-U option, camcontrol(8) fwdonwload improvements, pkill -j jailname support, timeout(1) added, ypinit(8) eui64 NIS map, kern.features.invariants sysctl added. Approved by: re (implicit)
* - Update relnotes items:hrs2016-03-241-6/+61
| | | | | | | | | | | | | | | | last reboot now works again, mv(1) return value has been fixed, mkimg(1) dynamic VHD format fixed, pw(8) userdel/usermod -y option, watchdogd(8) -x option added, rc.firewall now uses ipfw tables when firewall_type="SIMPLE", imxwdt driver fixed, uart(4) PPS polarity fixed, user(4) dev.uart.pps_mode added, uftdi(4) new ioctls to read/write eeprom, legacy ata(4) drivers removed. Approved by: re (implicit)
* Fix FPIs.hrs2016-03-244-12/+18
| | | | Approved by: re (implicit)
* - Fix FPIs and catalog entries.hrs2016-03-242-27/+77
| | | | | | | | | | | | | | | | | | | | - Fix typos. - Update relnotes items: ctladm(8) return value bugfix, ifconfig -v now displays SFP/SFP+ data, add updstream changeset id to the libarchive(3) improvement, vt(4) ALT_BREAK_TO_DEBUGGER support added, thread_create() API added, pms(4) removed from GENERIC for amd64/i386, kern.racct.enable fixed, cxgbe(4) firmware updated to 1.14.4.0, pf(4) logging issue fixed, LLENTRY_DELETED event in NDP fixed. - Edit items: s/Timezone data files/Time zone database/, -manage-gids flag is for nfsuserd, not nfsd. Approved by: re (implicit)
* In preparation for 10.3-RELEASE, revert r296976, i. e. the merge ofmarius2016-03-231-1/+0
| | | | | | | | | | | | | | r296416 (head) and r296969 (stable/10) respectively. With SAVESIGVEC enabled, csh(1) and tcsh(1) leak signal masks after spawning external commands. This causes strange effects like for example SIGTERM not being delivered to rc(8) scripts on shutdown albeit these use sh(1), if csh(1) or tcsh(1) are used as login shell of root. As such r296976 causes way more problems than it solves. It is anticipated that a proper changeset for the original problem will be issued as an Errata Notice post-10.3-RELEASE. PR: 208132 Approved by: re (gjb)
* Update releng/10.3 to RC3 in preparation for 10.3-RC3 builds.marius2016-03-181-1/+1
| | | | Approved by: re (implicit)
* MFC: r296996allanjude2016-03-171-5/+5
| | | | | | | Remove 50% ZFS conditional from bsdinstall/zfsboot PR: 208094 Approved by: re (marius)
* Add paragraph about isp(4) improvements.mav2016-03-171-0/+5
| | | | Approved by: re (implicit)
* MFC 296416:mp2016-03-171-0/+1
| | | | | | | | | | | Signal handling within tcsh vfork code path will conflict with some system libraries (such as libthr) which maintain their own signal state. This change adds the tcsh SAVESIGVEC option to save and restore the sigvecs for the signals the child modifies before it execs. Reviewed by: kib, rwatson Reported by: kib Approved by: re
* Merge r296956:glebius2016-03-161-2/+2
| | | | | | | | | | | Due to invalid use of a signed intermediate value in the bounds checking during argument validity verification, unbound zero'ing of the process LDT and adjacent memory can be initiated from usermode. Submitted by: CORE Security Patch by: kib Security: SA-16:15 Approved by: re (implicit)
* MFC 296943:ian2016-03-161-1/+1
| | | | | | | | Require firewall setup before running rc.d/netwait, otherwise the ping packets sent by netwait may not get through. PR: 207916 Approved by: re (marius)
* MFC r296908:kib2016-03-162-6/+8
| | | | | | Force the desired alignment of the user save area. Approved by: re (marius)
* MFS r296911:bdrewery2016-03-151-4/+10
| | | | | | | Filemon: Attach from the child to avoid racing with the parent attach. Relnotes: yes Approved by: re (marius)
* MFS r296797:dchagin2016-03-151-0/+5
| | | | | | | | MFC r296542: Load linux64 module for amd64 if Linux abi enabled. Reviewed by: emaste@ Approved by: re (marius) Differential Revision: https://reviews.freebsd.org/D5567
* MFC r296320:kib2016-03-153-7/+14
| | | | | | | | Adjust _callout_stop_safe() return value for the subr_sleepqueue.c needs when migrating callout was blocked, but running one was not. PR: 200992 Approved by: re (marius)
* Correct program name: s/shutdown/reboot/gjb2016-03-151-1/+1
| | | | | | Submitted by: Harald Schmalzbauer Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Add missing xml:id to reduce diff when copying to doc/ tree.gjb2016-03-145-15/+20
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Remove a few references to 9.2 and earlier.gjb2016-03-141-2/+2
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Connect the installation chapter to the build.gjb2016-03-141-0/+1
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Add the installation chapter back.gjb2016-03-142-0/+169
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r296853, OpenSSH 7.2p2.gjb2016-03-141-3/+3
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Update copyright year.gjb2016-03-143-31/+3
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* MFS (r296781):des2016-03-14155-3342/+5789
| | | | | | | | | | MFH (r296633): upgrade to 7.2p2 (fixes xauth command injection bug) MFH (r296634): re-add aes-cbc to server-side default cipher list MFH (r296651, r296657): fix gcc build of pam_ssh PR: 207679 Security: CVE-2016-3115 Approved by: re (marius)
* Update version information in 10.3-RELEASE documentation.gjb2016-03-141-6/+6
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r294190, unbound(8) updated to 1.5.7.gjb2016-03-141-0/+3
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r290152, file(1) updated to version 5.25.gjb2016-03-141-0/+3
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r291774, cp(1) '-s' option.gjb2016-03-141-0/+4
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Fix ordering by revision number.gjb2016-03-141-5/+5
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r292233, nfsd(8) '-manage-gids' option.gjb2016-03-141-0/+6
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r292462, resolv.conf(5) reloaded if mtime changed.gjb2016-03-142-0/+6
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r292588, xz(1) updated to 5.2.2.gjb2016-03-141-0/+4
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r293650, ntp updated to 4.2.8p5.gjb2016-03-141-0/+3
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r293675, ismt(4) addition.gjb2016-03-141-1/+3
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
* Document r293744, reroot support.gjb2016-03-141-0/+6
| | | | | Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
OpenPOWER on IntegriCloud