HardenedBSD-11-STABLE-v46.7
·
14291 commits
to hardened/10-stable/master
since this release
WARNING: This is a security update!
Highlights:
- added evdev support by upstream (disabled yet in HARDENEDBSD kernel configs)
- unbound 1.5.10
- Use M_WAITOK in PIO_KEYMAP ioctl (afa321a) [FreeBSD SA Candidate]
- EFI related changes by upstream
- hyperv updates by upstream
- ZFS updates by upstream
- CloufABI updates by upstream
Changelog
Oliver Pinter (5):
Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
HBSD: fix merge conflict in sys/{i386,amd64}/conf/NOTES files
HBSD MFC: Use M_WAITOK in PIO_KEYMAP ioctl
HBSD: update OP-HBSD kernel config
HBSD: sync HARDENEDBSD kernel config with GENERIC, and update ident
Oliver Pinter + (30):
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
araujo (1):
MFC r303541, r303542, r303543, r303545, r303546, r303547, r304225, r304226, r304605, r304676, r305212, r305863:
arybchik (2):
MFC r306944
MFC r307038
asomers (1):
MFC r306276, but don't remove findwin95
avg (1):
MFC r306665: zfs: fix a wrong assertion for extended attributes
avos (1):
MFC r307000, r307001:
bapt (9):
MFC r306854
MFC r306877
MFC r306852
MFC r306853
MFC: 304677, 304680, 305125, 305770, 305769
MFC: r307316
MFC: 306864,307648
MFC: 307368,307369,307372,307381
MFC: 305937
davidcs (1):
MFC r306790 Add support for adding up to 64 Multicast addresses with a single mailbox command
des (3):
MFH (r305381, r306457): upgrade to unbound 1.5.10 via 1.5.9
MFH (r305414): add a toggle to show approximate swap usage.
MFH (r306488, r306494, r306495, r306496): fix markup and cross-references
ed (3):
MFC r304740:
MFC r306162:
MFC r303818, r303833, r303941, r304478, r304481, r304483, r304484, r304554, r304555, r304556, r304557, r304558, r304559, r304561, r304563, r304564, r304565, r304615, r304742, r304743, r304744, r304745, r304748, r304886, r304991, r305928, r305938, r305987, r306185:
emaste (5):
Add Cavium sponsor entity
Add missing ThunderX release notes
MFC r306740, r307150: groff: use changelog date in man pages
MFC r307152: Add COMPAT_FREEBSD10 to the MIPS ERL kernel config
MFC r307145: Use M_WAITOK in PIO_KEYMAP ioctl
gahr (1):
MFC r302558:
gjb (12):
- Add known-issue entries for 11.0-RELEASE errata.html. - Bump version numbers in release.ent. - Bump the copyright year for the errata file.
Fix a typo.
Correct an entry from the release announcement.
Switch stable/11 to -STABLE following the release.
Use the sponsors/vendors entities in the errata docs.
Add an EN item regarding some recent systems that fail to boot under certain circumstances.
Document two errata items that may affect systems with ZFS boot pools on GPT.
Fix a spacing nit and a typo.
Fix a copy/paste error.
Document an issue with clang and source-based upgrades from 10.2 and earlier.
Fix wording.
Fix grammar.
gonzo (16):
MFC r302465:
MFC r307067, r307068, r307087, r307088, r307089, r307091, r307092, r307093, r307095, r307098, r307115:
MFC r306355, r306474, r306746:
MFC r306356:
MFC r306357:
MFC r307154:
MFC r306555:
Bump __FreeBSD_version for struct fb_info change in r307589
MFC r306557, r307240, r307241:
MFC r307239:
MFC r305706, r305749, r306274
MFC r305708, r305719
MFC r306132, r306275:
MFC r306134:
MFC r306578:
MFC r306430
hiren (1):
MFC r306464
hselasky (5):
MFC r306441 and r306634: While draining a timeout task prevent the taskqueue_enqueue_timeout() function from restarting the timer.
MFC r306451: The IORESOURCE_XXX defines should resemble a bitmask while SYS_RES_XXX are not bitmasks. Fix return value of pci_resource_flags() to reflect this change.
MFC r306453: Set hardware stats flag to avoid double counting the number of incoming bytes.
MFC r306454: Set hardware stats flag to avoid double counting the number of incoming bytes.
MFC r306478: Add new USB ID.
jch (1):
MFC r306443:
jilles (2):
MFC r305676: wait: Do not copyout uninitialized status/rusage/wrusage.
MFC r305628: intro(2),_exit(2): Update for reaper (procctl(PROC_REAP_ACQUIRE)).
jtl (1):
MFC r306766: Remove declaration of un-defined function tcp_seq_subtract().
kib (4):
MFC r307036: Fill msg_len for the initial element of msgvec.
MFC r307037: Correct indent.
MFC r307064: When downgrading exclusively busied page to shared-busy state, wakeup waiters.
MFC r307218: Fix a race in vm_page_busy_sleep(9).
lidl (3):
MFC r306695: Make blacklist-helper commands emit a message when successful
MFC r306696: Make 502.pfdenied find blacklistd/* filter names dynamically
MFC r306458: Properly preserve ip_tos bits for IPv4 packets
markj (6):
MFC r307398: Reference the libc symbols ypresp_{allfn,data} instead of local symbols.
MFC r307384: Remove an unused field from struct pmcstat_image.
MFC r306792-r306795, r306826, r306828: Miscellaneous ND6 code cleanups.
MFC r306742: gmirror: Use bool instead of boolean_t.
MFC r306571: rtsold: Log messages about unexpected RAs at LOG_DEBUG.
MFC r307236: Plug a vnode lock leak in vm_fault_hold().
mav (40):
MFC r305193: MFV r302642: 6876 Stack corruption after importing a pool with a too-long name
MFC r305195: MFV r302643: 6902 speed up listing of snapshots if requesting name only and sorting by name
MFC r305198: MFV r302647: 6922 Emit ESC_ZFS_VDEV_REMOVE_AUX after removing an aux device
MFC r305199: MFV r302648: 7019 zfsdev_ioctl skips secpolicy when FKIOCTL is set
MFC r305200: MFV r302651: 7054 dmu_tx_hold_t should use refcount_t to track space
MFC r305207: MFV r302659: 6931 lib/libzfs: cleanup gcc warnings
MFC r305194: MFV r302642: 6876 Stack corruption after importing a pool with a too-long name
MFC r305197: MFV r302646: 6980 6902 causes zfs send to break due to 32-bit/64-bit struct mismatch
MFC r305201: MFV r302653: 6111 zfs send should ignore datasets created after the ending snapshot
MFC r305202: MFV r302654: 6879 incorrect endianness swap for drr_spill.drr_length in libzfs_sendrecv.c
MFC r305203: MFV r302655: 6873 zfs_destroy_snaps_nvl leaks errlist
MFC r305205: MFV r302657: 4521 zfstest is trying to execute evil "zfs unmount -a"
MFC r305206: MFV r302658: 6872 zfs libraries should not allow uninitialized variables
MFC r305209: MFV r302660: 6314 buffer overflow in dsl_dataset_name
MFC r305210: MFV r302661: 7082 bptree_iterate() passes wrong args to zfs_dbgmsg()
MFC r305211: MFV r302662: 6447 handful of nvpair cleanups
MFC r305221: MFV r302992: 7071 lzc_snapshot does not fill in errlist on ENOENT
MFC r305222: MFV r302993: 7104 increase indirect block size
MFC r305224: MFV r304158: 7136 ESC_VDEV_REMOVE_AUX ought to always include vdev information
MFC 306699: Do not retry on some security sense codes.
MFC r306747, r307042: Fix ABI compat shims, broken by adding NVMe support.
MFC r305323: MFV r302991: 6950 ARC should cache compressed data
MFC r305324: MFV r303077: 7072 zfs fails to expand if lun added when os is in shutdown state
MFC r305325: MFV r303078: 7086 ztest attempts dva_get_dsize_sync on an embedded blockpointer
MFC r305326: MFV r303079: 7147 ztest: ztest_ddt_repair fails with ztest_pattern_match assertion
MFC r305327: MFV r303080: 6451 ztest fails due to checksum errors
MFC r305328: MFV r303081: 7163 ztest failures due to excess error injection
MFC r305331: MFV r304155: 7090 zfs should improve allocation order and throttle allocations
MFC r305332: MFV r304159: 7277 zdb should be able to print zfs_dbgmsg's
MFC r305333: MFV r304156: 7235 remove unused func dsl_dataset_set_blkptr
MFC r305334: MFV r304157: 7230 add assertions to dmu_send_impl() to verify that stream includes BEGIN and END records
MFC r305338: MFV r305335: 7003 zap_lockdir() should tag hold
MFC r305339: MFV r305336: 7247 zfs receive of deduplicated stream fails
MFC r305340: MFC r305337: 7004 dmu_tx_hold_zap() does dnode_hold() 7x on same object
MFC r305342: Missed FreeBSD-specific piece of r305338.
MFC r305456 (by avg): fix zfs pool creation accidentally broken by r305331
MFC r305561: MFV r305560: 7278 tuning zfs_arc_max does not impact arc_c_min
MFC r305563: MFV r305562: 7259 DS_FIELD_LARGE_BLOCKS is unused
Bump __FreeBSD_version for todays ZFS merges.
MFC r306762: Fix possible geom destruction before final provider close.
mckusick (2):
MFC r304230: Add two new macros, SLIST_CONCAT and LIST_CONCAT.
MFC 304438:
mm (1):
MFC r306670: Sync libarchive with vendor including security fixes.
mmel (6):
MFC r306754:
MFC r306755:
MFC r306756:
MFC r306759:
MFC r302560:
MFC r302951,r302952,r304071:
ngie (7):
MFC r305916,r305918:
MFC r305919:
MFC r305920:
MFC r305961:
MFC r306029:
MFC r305963,r305970:
MFC r303367:
pfg (1):
MFC r306332: btree(3): don't shortcut closing if the metadata is dirty.
rmacklem (1):
MFC: r306559 r297225 broke udp_output() for the case where the "addr" argument is NULL and the function jumps to the "release:" label. For this case, the "inp" was write locked, but the code attempted to read unlock it. This patch fixes the problem. This case could occur for NFS over UDP mounts, where the server was down for a few minutes under certain circumstances.
sephe (91):
MFC 306480
MFC 302540
MFC 302543-302545,302547,302549,302554,302556,302557,302559,302606
MFC 302607-302612
MFC 302617-302621,302623,302629-302631
MFC 302632-302634
MFC 302636-302638
MFC 302692
MFC 302693-302697
MFC 302698-302704,302706
MFC 302707-302709
MFC 302710,302713
MFC 302723,302726,302731
MFC 302733,302737,302801-302806
MFC 302808-302815
MFC 302816-302818
MFC 302864
MFC 302867-302870
MFC 302871,302872
MFC 302873,302874
MFC 302875,302876,302878-302881
MFC 302882-302884
MFC 302885,302886
MFC 302887
MFC 302888-302892,302986,303020-303022
MFC 303023
MFC 303066-303072,303127-303129,303131
MFC 303178,303180,303182
MFC 303283
MFC 303284,303329,303361,303362,303366,303368-303370
MFC 303379
MFC 303421,303422,303470-303473
MFC 303474
MFC 303603-303605,303764
MFC 303822-303824
MFC 303867,303901
MFC 303944
MFC 303945,303947-303949,303989,303992,303998,304001,304002,304109,304111
MFC 304204-304206,304252-304256
MFC 304270,304273
MFC 304327,304329,304330
MFC 304331
MFC 304441,304444,304446,304447,304591,304593-304595
MFC 304654,304722,304723
MFC 304724,304728
MFC 304730
MFC 304783-304785
MFC 304786,304788
MFC 304790,304791
MFC 304832-304834,304972
MFC 304973,304975,304976,304979,305044-305048
MFC 305049,305050
MFC 305052-305054,305110
MFC 305111
MFC 305173,305174
MFC 305175,305176,305179,305182,305268,305270,305276
MFC 305277,305278
MFC 305279-305281
MFC 305405,305407,305408,305410,305411,305453
MFC 305454,305455,305521,305524-305526
MFC 305578-305581
MFC 305585
MFC 305586,305587
MFC 305588
MFC 305722
MFC 305724,305725,305727-305730,305760,305761,305763,305788
MFC 305789
MFC 305790-305793
MFC 305794
MFC 305795,305796
MFC 305801,305923,305924
MFC 305925,305926,305960
MFC 305962,305964-305967
MFC 306013,306014
MFC 306072-306074,306076
MFC 306359
MFC 306360,306387,306389
MFC 306390-306392
MFC 306393
MFC 306396
MFC 306426
MFC 306431,306432
MFC 306433
MFC 306481
MFC 306482,306483
MFC 306484,306485
MFC 306936-306939
MFC 307012,307013,307262
MFC 307078
MFC 307261
MFC 307263
sevan (38):
MFC r306584: Move the description of CHANGER variable to ENVIRONMENT section rather than in the DESCRIPTION section. From OpenBSD src/bin/chio/chio.1 r1.23
MFC r306714: Document where chio(1) originated from & which version of FreeBSD first included it.
MFC r306581: Use .At macro instead of specifying AT&T UNIX literaly.
MFC r306582: "POSIX doesn't specify -h." - r1.27 from NetBSD http://man.openbsd.org/?query=chmod&apropos=0&sec=0&arch=default&manpath=POSIX-2013
MFC r306598 ccdconfig first appeared in NetBSD 1.1 From NetBSD man page, confirmed with repo tags in CVS [1] (there was also no 1.0a release according to [2])
MFC r306600: dump(8) first appeared in V4 UNIX http://minnie.tuhs.org/cgi-bin/utree.pl?file=V4/man/man8
MFC r306601: dumpon(8) appears to be present in FreeBSD 2.0.5, despite initial import of man page listed FreeBSD 2.1.
MFC r306602: Mention the version of NetBSD the utility originated from.
MFC r306603: Document which version of BSD first showed up in and add the version info for NetBSD & FreeBSD.
MFC r306604: gbde first appeared in FreeBSD 5.0
MFC r306605: init was there in UNIX from V1 http://minnie.tuhs.org/cgi-bin/utree.pl?file=V1/init.s
MFC r306606: mknod appeared in V4 UNIX http://minnie.tuhs.org/cgi-bin/utree.pl?file=V4/man/man8/mknod.8
MFC r306607: mksnap_ffs appeared in FreeBSD 5.1.
MFC r306610: Note mount_fusefs appeared in FreeBSD 10. Move note regarding implementation to caveats. Address issued raised by Igor.
MFC r306611: Amend history to mention predecessor originated from 386BSD[1] & current implementation from NetBSD[2]. Reword history since the utility was renamed once more in FreeBSD 5.0. Separate out author & historical information regarding character code conversion. Add AUTHORS section.
MFC r306612: Note the name change from mount_null to mount_nullfs in FreeBSD 5.0.
MFC r306613: Note the change of name in FreeBSD 5.0.
MFC r306614: Note the version PF first appeared in FreeBSD & from which version it was ported from. Address the contractions raised by igor.
MFC r306615: sconfig appeared in FreeBSD 5.2.
MFC r306616: setkey appeared in FreeBSD 4.0
MFC r306617: shutdown appeared as a standalone utility in 4.1BSD. http://mail-index.netbsd.org/source-changes-d/2016/09/13/msg008686.html http://mail-index.netbsd.org/source-changes-d/2016/09/14/msg008691.html PR: 212552 Approved by: bcr (mentor) Obtained from: NetBSD Differential Revision: https://reviews.freebsd.org/D8105
MFC r306718: Add history section for echo(1) Sourced using the draft copy of the second edition manual http://www.tuhs.org/Archive/PDP-11/Distributions/research/1972_stuff/unix_2nd_edition_manual.pdf
MFC r306719: Document origins of expr & authors http://minnie.tuhs.org/cgi-bin/utree.pl?file=PWB1/usr/man/man1/expr.1
MFC r306720: Add history section of pwd(1) http://minnie.tuhs.org/cgi-bin/utree.pl?file=V5/usr/source/s2/pwd.c
MFC r306721: Add history section for stty(1) http://minnie.tuhs.org/cgi-bin/utree.pl?file=V3/man/man1/stty.1
MFC r306722: Add history section for test(1) http://minnie.tuhs.org/cgi-bin/utree.pl?file=V7/usr/src/cmd/test.c
MFC r306723: Add history section for atmconfig(8)
MFC r306724: Add history section for bsdlabel(8) http://minnie.tuhs.org/cgi-bin/utree.pl?file=4.3BSD-Tahoe/usr/man/cat8/disklabel.0 Remove tab after space, highlighted by igor
MFC r306725: Add history section for clri(8) http://minnie.tuhs.org/cgi-bin/utree.pl?file=V6/usr/man/man8/clri.8
MFC r306727: Add history section for devd(8) Move sentence to a new line as advised by igor
MFC r306728: Add history section for devfs(8) Move sentence to a new line as advised by igor.
MFC r306731: Document the history of fdisk based on the original post to comp.unix.bsd by Julian Elischer [1] and the Mach 2. 5 Installation notes [2]. I was unable to pin point the exact version of Mach the fdisk utility appeared as I could not find documentation older than version 2.5 & no source code or repo history. fdisk utility appears as a separate utility[3] in v2.5. Due to this, I have avoided stating the exact version fd isk first appeared in Mach. Add authors section. Make correction pointed by igor [1] https://groups.google.com/d/topic/comp.unix.bsd/Hhi45vAHxDg/discussion [2] ftp://ftp.mcs.vuw.ac.nz/doc/misc/mach-i386-doc/i386_install.ps [3] ftp://ftp.mcs.vuw.ac.nz/doc/misc/mach-i386-doc/i386_manpages.ps PR: 212469 Approved by: bcr (mentor) Differential Revision: https://reviews.freebsd.org/D8104
MFC r306732: Document the history of fdisk based on the original post to comp.unix.bsd by Julian Elischer [1] and the Mach 2.5 Installation notes [2]. I was unable to pin point the exact version of Mach the fdisk utility appeared as I could not find documentation older than version 2.5 & no source code or repo history. fdisk utility appears as a separate utility[3] in v2.5. Due to this, I have avoided stating the exact version fdisk first appeared in Mach. Add authors section.
MFC r306733: Add history section to fsck(8)
MFC r306734: Add history section to fsck_ffs(8) Move sentence to a new line as advised by igor.
MFC r306735: Add history section to natd(8) Fix back sentence raised by igor.
MFC r306736: Add history section to nos-tun(8)
MFC r306840: Sort SEE ALSO section sequentially. Highlighted by mandoc -Tlint
tijl (1):
MFC: r306318
vangyzen (1):
MFC r306346
Installer images: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/ISO-IMAGES/HardenedBSD-11-STABLE-v46.7/
CHECKSUM.SHA512:
SHA512 (HardenedBSD-11-STABLE-v46.7-amd64-bootonly.iso) = a0f656e33b0c48223d2f9c769a9d872c846e6d541571b2d74f3092b3ded69a7e15309e8a748dd778139c7d86c7c27b1e965a9d3bc7d8c3ae24d5c0a34a069e03
SHA512 (HardenedBSD-11-STABLE-v46.7-amd64-disc1.iso) = 136e50041c9762ee210f807c078d485225e862020954259ae4164b7a34991a1e79839625a52b06bfc9bfb956b7ddd03d536e92b52a5c3e5a1929c1381969070c
SHA512 (HardenedBSD-11-STABLE-v46.7-amd64-memstick.img) = 21e2028f3d202b9ebbd1c8676b59e3ed165493424980dee9f13d1794acd37cb71c7f04c5d14b0ee95c2e543bac3395a996f8a50568c2d7b216c37ed511febc91
SHA512 (HardenedBSD-11-STABLE-v46.7-amd64-mini-memstick.img) = 24c2bda9d60a2abe127091684e8db98ea5de5b60ef079298cb4c2a8adfe7e23c7017ed14a77a1cff32210af3a18e7dfd7619286b1ca988314e2cdb50e42ed3d9
CHECKSUM.SHA512.asc:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=U9ny
-----END PGP SIGNATURE-----
shortlog-HardenedBSD-11-STABLE-v46.7.txt
CHECKSUM.SHA512.txt
CHECKSUM.SHA512.asc.txt