| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
Fix VNET kernel panic with asynchronous I/O. [EN-17:07]
Approved by: so
|
|
|
|
| |
Approved by: so
|
|
|
|
|
| |
Security: FreeBSD-SA-17:04.ipfilter
Approved by: so
|
|
|
|
|
|
| |
Xen migration enhancements. [EN-17:05]
Approved by: so
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix system hang when booting when PCI-express HotPlug is enabled.
[EN-17:01]
Fix NIS master updates are not pushed to NIS slave. [EN-17:02]
Fix compatibility with Hyper-V/storage after KB3172614 or
KB3179574. [EN-17:03]
Make makewhatis output reproducible. [EN-17:04]
Approved by: so
|
|
|
|
|
|
|
| |
Security: FreeBSD-SA-17:01.openssh
Security: CVE-2016-10009
Security: CVE-2016-10010
Approved by: so
|
|
|
|
| |
Approved by: so
|
|
|
|
|
|
| |
PR: 215105
Submitted by: <jtd2004a sbcglobal.net>
Approved by: so
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix link_ntoa(3) buffer overflow in libc. [SA-16:37]
Fix possible escape from bhyve(8) virtual machine. [SA-16:38]
Fix warnings about valid time zone abbreviations. [EN-16:19]
Update timezone database information. [EN-16:20]
Fix incorrectly defined unicode character(s). [EN-16:21]
Security: FreeBSD-SA-16:36.telnetd
Security: FreeBSD-SA-16:37.libc
Security: FreeBSD-SA-16:38.bhyve
Errata Notice: FreeBSD-EN-16:19.tzcode
Errata Notice: FreeBSD-EN-16:20.tzdata
Errata Notice: FreeBSD-EN-16:21.localedef
Approved by: so
|
|
|
|
|
|
|
|
|
| |
localedef: Fix ctype dump (fixed wide spread errors)
See original commit for longer description.
Errata Notice: EN-16:21
Approved by: so
|
|
|
|
|
|
|
|
|
|
|
|
| |
Note: because of what appears to be a missing MFC to stable branches,
these patches were generated by doing:
% rsync -av stable/11/contrib/tzdata releng/11.x/contrib
% svn add releng/11.x/contrib/tzdata
Errata Notice: EN-16:20
Submitted by: gjb
Approved by: so
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Incorporate a change from OpenBSD by millert@OpenBSD.org
Don't warn about valid time zone abbreviations. POSIX
through 2000 says that an abbreviation cannot start with ':', and
cannot contain ',', '-', '+', NUL, or a digit. POSIX from 2001
on changes this rule to say that an abbreviation can contain only
'-', '+', and alphanumeric characters from the portable character
set in the current locale. To be portable to both sets of rules,
an abbreviation must therefore use only ASCII letters." Adapted
from tzcode2015f.
Errata Notice: EN-16:19.tzcode
Submitted by: bapt
Approved by: so
|
|
|
|
|
| |
Security: FreeBSD-SA-16:33.openssh
Approved by: so
|
|
|
|
|
|
|
|
|
|
| |
based on passing incorrect parameters to sysarch(2). [1]
Fix unchecked array reference in the VGA device emulation code. [2]
Security: SA-16:15 [1]
Security: SA-16:32 [2]
Approved by: so
|
|
|
|
|
|
|
|
|
|
| |
A programming error in GELIBoot causes the loader to attempt to read past
the end of the disk if the size of the final partition is not a multiple of
4 kB.
Merge r306834 from stable/11.
Approved by: so
|
|
|
|
|
| |
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
|
|
|
|
| |
Previously it was possible to smuggle in addional files that would
be used by later portsnap runs. Now we only move those files expected
to be in the snapshot into files/ and require that there are no
unexpected files.
This was used by portsnap attacks 2, 3, and 4 in the "non-cryptanalytic
attacks against FreeBSD update components" anonymous gist.
Approved by: re (gjb)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
=== bspatch ===
MFS r306213: bspatch Capsicumization, sanity checks, and other improvements
r304691: bspatch: apply style(9)
Make style changes (and trivial refactoring of open calls) now in order
to reduce noise in diffs for future capsicum changes.
r304807 (allanjude): Capsicumize bspatch
Move all of the fopen() and open() calls to the top of main()
Restrict each FD to least privilege (read/seek only, write only, etc)
cap_enter(), and make all except the output FD read/seek only.
r304821: bspatch: remove output file in the case of error
r305486: bspatch: add sanity checks on sizes to avoid integer overflow
Note that this introduces an explicit 2GB limit, but this was already
implicit in variable and function argument types.
This is based on the "non-cryptanalytic attacks against freebsd
update components" anonymous gist. Further refinement is planned.
r305737: bspatch: remove superfluous newlines from errx strings
r305822: bspatch: use #define for header size instead of magic number
r306026: bspatch: Remove backwards-compatibility sys/capability.h support
bspatch previously included sys/capability.h or sys/capsicum.h based
on __FreeBSD_version, as FreeBSD is the upstream for bsdiff and we may
see this file incorporated into other third-party software.
The Capsicum header is now installed as sys/capsicum.h in stable/10 and
FreeBSD 10.3, so we can just use sys/capsicum.h and simplify the logic.
With this change, bspatch is identical between head, stable/11 and releng/11.0.
=== portsnap ===
MFS r305648 (delphij): MFC r305469:
Ensure that we always open only files that is named by explicitly
using shell redirections instead of having gzip(1) to decide what
file to open.
Issue reported in the "non-cryptanalytic attacks against freebsd
update components" anonymous gist.
=== libarchive ===
MFS r305754 (mm): MFC r305422:
Sync libarchive with vendor
Vendor issues fixed:
PR #777: Multiple bugfixes for setup_acls()
This includes a bugfix for a bug that caused ACLs not to be read properly
for files and directories inside subdirectories and as a result not being
stored or being incorrectly stored in tar archives.
MFS r306321 (mm): MFC r305819:
Sync libarchive with vendor including important security fixes.
Issues fixed (FreeBSD):
PR #778: ACL error handling
Issue #745: Symlink check prefix optimization is too aggressive
Issue #746: Hard links with data can evade sandboxing restrictions
This update fixes the vulnerability #3 and vulnerability #4 as reported in
"non-cryptanalytic attacks against FreeBSD update components".
https://gist.github.com/anonymous/e48209b03f1dd9625a992717e7b89c4f
Fix for vulnerability #2 has already been merged.
Approved by: re (gjb), so (glebius)
|
|
|
|
|
|
|
| |
Merge OpenSSL 1.0.2j.
Approved by: so
Approved by: re (implicit)
|
|
|
|
|
| |
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
| |
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
| |
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
| |
URLs to svnweb.
Submitted by: jkim
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
| |
usage information.
Suggested by: theraven
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
| |
Submitted by: emaste
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
| |
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
| |
Merge OpenSSL 1.0.2i.
Approved by: re (gjb, implicit), so (delphij)
|
|
|
|
| |
Approved by: re (gjb, implicit)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This is a direct commit to releng/11.0.
Having it enabled can lead to a situation where building
on one system and installing on another will fail due
to not finding cc in the OBJDIR.
An actual fix will be made on head separately.
PR: 212877
Relnotes: yes
Sponsored by: Dell EMC Isilon
Approved by: re (gjb)
|
|
|
|
|
|
| |
Submitted by: emaste
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
| |
Replace elfcopy with objcopy/strip.
Submitted by: emaste
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
| |
kldload(8) during runtime, not newly added.
Submitted by: Harry Schmalzbauer
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
|
|
| |
- Further clarifications to the CUBIEBOARD2 kernel rename,
iwn(4) addition, explicitly noting ia64 is Itanium(tm),
various other fixes.
Submitted by: theraven
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
| |
Submitted by: trasz
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
|
|
| |
Document r298237, SMP booting for Book-E platforms was fixed.
Document r297001, Book-E can address up to 36-bits of physical RAM.
Document r297977, Book-E now supports e500mc and e5500.
Submitted by: jhibbits
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
| |
Submitted by: ae
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
| |
Submitted by: martymac
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
| |
networking stack changed.
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
| |
in ifconfig(8) output.
Submitted by: woodsb02
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
| |
Link to the binmiscctl(8) manual in the r266531 entry.
Submitted by: sbruno
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
| |
Submitted by: lidl
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
| |
Submitted by: dhw
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
| |
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
| |
Submitted by: ken
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
| |
Document r302558, ul(1) truncation bug fix.
Submitted by: gahr
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
| |
Submitted by: cperciva
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
| |
Submitted by: truckman
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
| |
Fix a spacing nit while here.
Submitted by: vangyzen
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Update MK_ARM_EABI entry to note it is the default.
- Reword the entry for r290910.
- Fix various wording nits.
- Remove redundant '[arch]' tags where they are already specified.
- Various rewordings.
Submitted by: theraven (first pass from his feedback)
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
|
|
|
|
|
|
|
| |
NUMA may be disabled due to system BIOS.
Submitted by: vangyzen
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|