@opntr opntr released this Mar 7, 2017 · 1727 commits to hardened/10-stable/master since this release

Assets 2

Warning: this is a security update!

Highlights:
*Fix null pointer dereference in zfs_freebsd_setacl() (8f4efc7) [FreeBSD-SA-Candidate]
*Libarchive update
*HBSD: add our first mirror: fr-01.installer.hardenedbsd.org Roubaix@France
*zlib update to 1.2.11

Changelog

Oliver Pinter (4):
      HBSD: refactor mirror selection
      HBSD: add our first mirror: fr-01.installer.hardenedbsd.org Roubaix@France
      HBSD: correct the ipv6 mirror's address
      HBSD NOEXEC: add the ability to change maxprot in imgact's mapping functions

Oliver Pinter + (43):
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master

asomers (4):
      MFC r311893, r313008, r313081
      MFC r311572, r311895, r311928, r311985, r312395, r312417
      MFC r312559:
      MFC r312995:

avg (29):
      MFC r313686: check remaining space in zfs implementations of vptocnp
      MFC r313687: remove l2_padding_needed statistic from zfs arc
      MFC r313735: add svcpool_close to handle killed nfsd threads
      MFC r263215,r263218,r285366: replace the kernel sha256 code
      MFC r282726: Ensure libmd symbols do not clash with libcrypto
      MFC r263219: add sha256c.c to the various modules that included sha2.c...
      MFC r282736: Unbreak build following rev. 282726 (MFC-ed as r314144)
      fixup r314143, MFC of r285366 didn't remove files that it should have
      MFC r282774: Unbreak MIPS build following r282726 (MFCed in r314144)
      MFC r292782: Replace sys/crypto/sha2/sha2.c with lib/libmd/sha512c.c
      MFC r285417: Add new include path for sha256.h
      fix up r314327 (MFC of r292782): sha2 -> sha512 in sys/modules/random
      MFC r300903: Implement SHA-512 truncated (224 and 256 bits)
      MFC r300966: Retune SHA2 code for improved performance on CPUs with more ILP...
      MFC r313730: try to fix RACCT_RSS accounting
      MFC r313752,r314035: mca: use time_uptime instead of ticks for CMCI throttling
      MFC r314037: jedec_ts: fix slave address check
      MFC r314183: add jedec_ts.4 to the list of manual pages
      MFC r314059: zfs: move zio_taskq_basedc under SYSDC
      MFC r313751: mca: fix writes to MSR_MC_CTL2 in cmci_update
      MFC r314100: fix a typo in __STDC_VERSION__ in __min_size requirements
      MFC r314101: don't use C99 static array indices with older GCC versions
      Fix r314332 (MFC of r300903): do not use C99 Static array indices
      MFC r288112,r302571: remove unused and redundant declarations and code
      mlx5 module: remove include path that doesn't exist in this branch
      MFC r314357: edge-triggered interrupt mode is set by clearing APIC_LVT_TM
      MFC r314272: call vm_lowmem hook in uma_reclaim_worker
      MFC r283291: don't use CALLOUT_MPSAFE with callout_init()
      MFC r314273: zfs: call spa_deadman on a taskqueue thread

bapt (1):
      MFC r312644, r312650

bdrewery (2):
      MFC r313867,r313869,r313870,r314001:
      MFC r313909:

cy (1):
      MFC r312787:

delphij (1):
      MFC r311285,312335: zlib 1.2.11.

des (1):
      MFH (r278120): add missing ssh-related files

dexuan (4):
      MFC: r312685, r312686
      MFC: r312687, r312916
      MFC: r312688
      MFC r312689, r312690

dim (1):
      Pull in r242377 from upstream libc++ trunk (by Marshall Clow):

emaste (4):
      MFC r313562: kldxref: s/sections/segments/ in warning message
      MFC r313563: kldxref: bump MAXSEGS to 3
      MFC r313774:    localtime: return NULL if time_t out of range of struct tm
      MFC r309649 (oshogbo): tcpdump: allow to use BIOCROTZBUF in capability mode

garga (3):
      MFC r313448:
      MFC r313457:
      MFC r313477:

grehan (1):
      MFC r311702   Use correct PCI device id for virtio-rng.   This prevented the device from attaching with a   Windows guest (most other guests use the device type   for matching)

ken (2):
      MFC 313895:
      MFC r313893

kib (11):
      MFC r313692: Style: wrap long line.
      MFC r313715: Order alphabetically.
      MFC r313797: Minor style fixes.
      MFC r313693: Remove MPSAFE and ARGUSED annotations, ANSI-fy syscall handlers.
      MFC r313493: Define ELF_ST_VISIBILITY().
      MFC r313494: Handle protected symbols in rtld.
      MFC r313800: Do not access memory past the buffer end. Do not accept and silently truncate too long hostname.
      MFC r313496: Increase a chance of devfs_close() calling d_close cdevsw method.
      MFC r313734: Add RLIM_SAVED_MAX and RLIM_SAVED_CUR symbols.
      MFC r314195: Properly handle possible underflow in vm_fault_prefault().
      MFC r314562: Style.

marius (1):
      MFC: r311979

mav (29):
      MFC r313736: Fix panic on shutdown of ramdisk LU with zero capacity.
      MFC r313910: Change XCOPY memory allocations.
      MFC r313744: No need to erase sense_data when sense_len is set to zero.
      MFC r313851: Fix tight loop spinning on postponed requests.
      MFC r313852: Freeze CAM SIM when request is postponed due to MaxCmdSN.
      MFC r313945: Remove broken remnants of obsolete INOT API.
      MFC r313936, r313937: Move CTIO waitq from per-LUN to per-channel.
      MFC r314358: Announce that sbp_targ(4) does not support initiator mode.
      MFC r314027: Do not blindly free completed ATIOs/INOTs on invalidation.
      MFC r314038: Remove ancient __FreeBSD_version checks.
      MFC r314045: Remove duplicate INOT allocation.
      MFC r314086: Fix multiple problems around LUN disable under load.
      MFC r314088: Slightly polish isp_dump_atpd().
      MFC r314193: Some code cleanup.
      MFC r314196: Unify ATIO/INOT CCBs requeuing.
      MFC r314200: We can't access periph after ctlfe_free_ccb().
      MFC r314203: Fix missing xpt_done() for ATIO/INOT on missing LUN.
      MFC r314204: Explicitly abort ATIO if CTIO sending status has failed.
      MFC r314208: Respecting r314204 tighten ATIO cleanup requirements.
      MFC r314246: Improve CAM target frontend reference counting.
      MFC r314247: Axe out some forever disabled questionable functionality.
      MFC r314255: Reenable CTL_WITH_CA, optimizing it for lower memory usage.
      MFC r314257: Add reporting SAS protocol, in case we ever have one.
      MFC r314299, r314300: Fix residual length reporting in target mode.
      MFC r314302: Return better error code in case of too long CDB.
      MFC r314387: Make ctl_queue_sense() not sleep.
      MFC r314496: Add check missed in r314257.
      MFC r314326: Send TERMINATE to firmware when aborting active ATIO.
      MFC r314338: Polish handling of different reset flavours.

mm (3):
      MFC r313572,313782 Sync libarchive with vendor.
      Fix incomplete merge in r313927:
      MFC r314572:

ngie (16):
      MFC r288241:
      MFC r285119,r292502,r295380:
      MFC r295643:
      Fix mismerge in r313790
      MFC r312520:
      MFC r313656:
      MFC r313653:
      MFC r313679:
      MFC r313654:
      MFC r313652:
      MFC r313404:
      MFC r312213,r313713:
      Revert r314020
      MFC r313924,r313925:
      Note: this change reintroduces r314020 after r314327, r314330, and r314332
      MFC r314244:

np (2):
      MFC r314400:
      MFC r314509 and r314578.

pfg (4):
      MFC r313819: Remove outdated claim.
      MFC r313554: Clean redundant MIN/MAX declarations in some HighPoint drivers.
      MFC r313897: ext2fs: Remove unused assignment.
      MFC r314316: dc(1): Catch up with OpenBSD tag.

sephe (3):
      MFC 311475
      MFC 311743
      MFC 312250

Installer images: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/ISO-IMAGES/HardenedBSD-10-STABLE-v46.25/

CHECKSUM.SHA512:

SHA512 (HardenedBSD-10-STABLE-v46.25-amd64-bootonly.iso) = 244df54c943c52dc9d97ee0d253a06d99b78a3c6916c3361526446a1d3846cb5059e54b9b1393e0184bcfd714ffbf60ece495cbfd9277e4aa99c39b8a52f1c9f
SHA512 (HardenedBSD-10-STABLE-v46.25-amd64-disc1.iso) = 888af8fa7f2e000d474459b08b2f281260252a2aab28d0ca5bad33a8d67e931dd266098c0d6f01504b195ad8252dec8a138abf098b989037167e69948e7bfd4d
SHA512 (HardenedBSD-10-STABLE-v46.25-amd64-memstick.img) = 3bf56a556d7692f77fc68d5c6b707351111aadf8334a3fb9d14506b4b8d73cfc96289260deae9367f23482490147a27450ff99762bd4fe45333e51e33bad45db
SHA512 (HardenedBSD-10-STABLE-v46.25-amd64-mini-memstick.img) = 098bb76dd195837a409b2c86cab00f6fd22e41c457d471521a0dcfd97f1e68966dcea981dea839827d0890ab7ceded9057bcbf99108c85b8f996e4ad424975da
SHA512 (HardenedBSD-10-STABLE-v46.25-amd64-uefi-bootonly.iso) = f12dd735eba76b64aac9e101a62c32768b5d53c48b924860aa46cec43be8e62776659c245b884b94f9c3a175da9ffa82b1c349c5cb2118d7f96e4abce3f26fb4
SHA512 (HardenedBSD-10-STABLE-v46.25-amd64-uefi-disc1.iso) = 124675b8abf436e050d5a569a977a23e9df170089cd50bd3b50f9c5bca66310b031203e8cae85f1a940815a4d076252104414cd49b697cc9b91a39681864fe8a
SHA512 (HardenedBSD-10-STABLE-v46.25-amd64-uefi-memstick.img) = ee67fcf91a503d508e4344319b788f7d08687b9d9672da929586a473baa1e9cac97004993ffd3f124d51ff5707d6193e3886299fa652de7ef8db7d6523cecbe2
SHA512 (HardenedBSD-10-STABLE-v46.25-amd64-uefi-mini-memstick.img) = 13853f2e931490bfbf84b1cc92e2465504e090b40584c57e233ea875c2b6ba15c209ced66ad9cc9c6898d419389964bbc9b8ad10e0251e243514d39fb397bc14

CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----
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=CSFS
-----END PGP SIGNATURE-----

shortlog-HardenedBSD-10-STABLE-v46.25.txt
CHECKSUM.SHA512.txt
CHECKSUM.SHA512.asc.txt