Skip to content

Latest commit

 

History

History
751 lines (532 loc) · 23.1 KB

ReleaseNotes.md

File metadata and controls

751 lines (532 loc) · 23.1 KB

Release Notes for OmniOSce v11 r151024

r151024aw (2018-10-08)

Weekly release for w/c 8th of October 2018.

This is a non-reboot update.

Security fixes

  • Git updated to 2.14.5 CVE-2018-17456

  • Mercurial updated to fix a potential out-of-bounds read in manifest parsing C code.



r151024ar (2018-09-05)

Weekly release for w/c 3rd of September 2018.

This is a non-reboot update.

Security fixes

Other changes

  • system/cpuid updated to introduce detection of features listed in the May 2018 Intel ISA extensions manual.


r151024ap (2018-08-20)

Weekly release for w/c 20th of August 2018.

This is a non-reboot update.

Security fixes



r151024ao (2018-08-15)

Weekly release for w/c 13th of August 2018.

This is a non-reboot update.

Security fixes



r151024am (2018-07-30)

Weekly release for w/c 30th of July 2018.

This update requires a reboot.

Bug Fixes



r151024ak (2018-07-16)

Weekly release for w/c 16th of July 2018.

This is a non-reboot update.

Security fixes



r151024ai (2018-07-02)

Weekly release for w/c 2nd of July 2018.

This is a non-reboot update.

Security fixes

Other Changes

  • Add support for recursive pkg set-publisher operations


r151024ae (2018-06-04)

Weekly release for w/c 4th of June 2018.

This is a non-reboot update.

Security fixes



r151024ac (2018-05-17)

Weekly release for w/c 17th of May 2018.

This is a non-reboot update.

Security fixes



r151024aa (2018-05-07)

Weekly release for w/c 7th of May 2018.

This is a non-reboot update.

Security fixes



r151024z (2018-05-01)

Weekly release for w/c 30th of April 2018.

This is a non-reboot update.

Security fixes

  • python upgraded to 2.7.15, fixing various security issues.

Bug fixes

  • Update openssh to work properly with SMF-based ipfilter.


r151024x (2018-04-16)

Weekly release for w/c 16th of April 2018.

This is a non-reboot update.

Security fixes



r151024v (2018-04-03)

Weekly release for w/c 2nd of April 2018.

This is a non-reboot update.

Security fixes



r151024u (2018-03-28)

Weekly release for w/c 26th of March 2018.

This is a non-reboot update.

Security fixes



r151024t (2018-03-19)

Weekly release for w/c 19th of March 2018.

This is a non-reboot update.

Security fixes



r151024r (2018-03-05)

Weekly release for w/c 5th of March 2018.

This is a non-reboot update.

Security fixes



r151024q (2018-02-26)

Weekly release for w/c 26th of Februrary 2018.

This update requires a reboot.

Security fixes

Bug fixes

If you use ZFS ACLs (i.e. more than just the standard permissions set with chmod) and use ACL inheritance, then it is possible that this bug will have resulted in files with overly permissive permissions. To check a data-store for this problem, you can use a script similar to that at https://downloads.omniosce.org/misc/8984-acl-check If you need any help with this, please get in touch via the lobby or #omnios on Freenode

Enhancements

  • New package command to easily install a hotfix from a local package archive or remote web site, for example:
% pfexec pkg apply-hot-fix --be-name=hotfix1234 \
    https://downloads.omniosce.org/pkg/r151022/1234_hotfix.p5p


r151024n (2018-02-06)

Weekly release for w/c 5th of Februrary 2018.

This is a non-reboot update.

Security fixes

Other Changes

  • Re-synchronise /etc/motd with uname -v.


r151024m (2018-01-29)

Weekly release for w/c 29th of January 2018.

This update requires a reboot. uname -v shows omnios-r151024-32f54f0308

This update rolls up the following outstanding hot-fixes:

Other Changes

  • Update rsync to 3.13
  • Update timezone data to 2018c release
  • Update certificate authority database to NSS 3.5
  • Re-synchronise CTF data between kernel and kernel modules


r151024l (2018-01-24)

Weekly release for w/c 22nd of January 2018.

This is a non-reboot update.

Security fixes

Other Changes

  • Update system/cpuid package. Amongst other improvements, this new version can report on support for the new speculation control and branch predictor instructions added via microcode updates.

      # cpuid | egrep 'IBRS|STI'
        Speculation Control (IBRS and IBPB)
        Single Thread Indirect Branch Predictors (STIBP)
    
  • Fix IPv6 multicast related kernel panic. This is a rare problem which has only been reported by one OmniOS user. Therefore we have not published the updated package to the IPS repository as it would force a reboot; it will be included in the next reboot update for r151024. If you need this fix in the meantime, it is available for download. See illumos issue 8653.

  • Support booting from RAIDZ2 or RAIDZ3 ZFS pools. This change has not been published to the repository as it would force a reboot for all users and only benefits new installations; new installation media have been prepared incorporating the fix. See illumos issue 8969

  • Fix extended attribute related kernel panic. This change has not yet been published to the repository as it would force a reboot for all users and has only been reported by one user. It will be rolled up into the next release. If you need this fix in the meantime, it is available for download. See illumos issue 8806.

Instructions for applying the interim updates



r151024j (2018-01-08)

Weekly release for w/c 8th of January 2018.

This update requires a reboot. uname -v shows omnios-r151024-e482f10563

Changes

  • ZFS fixes:
    • 8909 Use-after-free kernel panic
    • 8930 do not remove the node if the filesystem is readonly
  • CIFS/SMB - Improve ioctl() bounds checking
  • Improvements to page scanner performance under low memory conditions
  • pkg - prevent UUIDs being shared between IPS images so they are truly unique
  • Add system/cpuid package providing the cpuid command - "A simple CPUID decoder/dumper for x86/x86_64""


r151024g (2017-12-18)

Weekly release for w/c 18th of December 2017.

This is a non-reboot update.

Changes

  • Fix crash in nscd related to ldap maps and hardware acceleration.


r151024f (2017-12-07)

Early weekly release for w/c 11th of December 2017.

This is a non-reboot update.

Security fixes



r151024e (2017-12-04)

Weekly release for w/c 4th of December 2017.

This update requires a reboot.

Security fixes

Other changes

  • 8880 Improve DTrace error checking


r151024d (2017-11-29)

Weekly release for w/c 27th of November 2017.

This is a non-reboot update.

Security fixes



r151024c (2017-11-20)

Weekly release for w/c 20th of November 2017.

This update requires a reboot.

Changes

  • Fix crash in prctl() within an lx zone.

  • Update intltool to fix warnings generated by perl.



r151024 (2017-11-06)

Stable Release, 6th of November 2017

uname -v shows omnios-r151024-c2a1589567

r151024 release repository: https://pkg.omniosce.org/r151024/core

Upgrade instructions - https://omniosce.org/upgrade

Help wanted

OmniOS Community Edition has no major company behind it, just a small team of people who spend their precious spare time keeping it up-to-date. If you rely on OmniOS for fun or business, and you want to help secure its future, you can contribute by becoming an OmniOS patron. Alternatively, if you have some time and would like to help with development, please get in touch via the lobby.

New features since r151022

System Features

  • Support for SuSE linux images within lx zones, courtesy of Joyent.

  • Better support for systemd within lx zones.

  • Improvements to zone RSS tracking and speed of memory usage determination.

  • Loader can now handle disks with native 4k sectors.

  • svcs -Z no longer emits an error message for zones which do not have SMF.

  • The GCC C++ compiler now supports __cxa_atexit which is required for fully standards-compliant handling of static destructors.

  • Java is now an optional package, only required if you use the dynamic resource pools feature. After upgrade to r151024, you can remove java if desired as follows:

    omnios# pkg uninstall runtime/java java/jdk service/resource-pools/poold

  • The openssl package now contains both OpenSSL 1.0.2 and 1.1.0, managed by a versioned variant. This is the first step on the two year plan to upgrade to OpenSSL 1.1 before the end-of-life date for 1.0. Note that OmniOS itself does not yet build with OpenSSL 1.1. For more information and a list of affected parts of OmniOS, see the repository README file

  • The package/pkg/depot, package/pkg/system-repository and package/pkg/zones-proxy packages have been removed from OmniOS. The first two were not previously installable without work and the latter could only be installed in a non-global zone, where it did no good without the corresponding part in the global zone. package/pkg/zones-proxy has been marked as obsolete so will be automatically removed from non-global zones as they are upgraded.

  • pkg/server can now serve repositories for publisher names containing a hyphen.

  • mountd and statd can now be run on a fixed port.

Hardware Support

  • Support for AVX-512 processor extensions.

  • Support for Chelsio T6 Ethernet devices.

  • Support for the LSI 9305-24i controller.

  • Support for the Intel X722 Ethernet controller.

  • Fixes for panic/hang on Xen 4.x

  • The audiovia97 driver has been removed.

Commands and Command Options

  • zpool scrub -p to pause a scrub.

  • ipadm -T dhcp -h <hostname> to specify a hostname that will be sent to the DHCP server in order to request an association. Existing DHCP addresses can have this added via ipadm set-addrprop -p reqhost=<hostname> <if>.

  • New nvmeadm utility to manage NVMe controllers and namespaces.

  • New zfs program facility to run lua scripts to perform batch administrative ZFS operations. See Issue 7431 for more details, man page and examples.

  • xargs has a new option -P <maxprocs> to run up to maxprocs parallel child processes.

  • last has a new option -l to show longer dates and times, including the current year.

  • svcadm now handles multiple partial FMRI arguments as long as each is unambiguous.

  • tail now properly supports -[cb] <num> as an alternative syntax for -<num>[cb].

Developer Features

  • ld now handles arguments of the form -Wl,-z,aslr (two commas). This is a compiler argument which should result in the linker being called with -z aslr but some buggy build systems pass it directly to the linker.

  • GCC 5 has been upgraded to 5.5.0 and moved to /opt/gcc-5 to reflect the new numbering scheme used from version 5 onwards. The mediated symlinks in /usr/bin are still the best way to invoke GCC but you may need to update your $PATH or scripts if you have previously explicitly used /opt/gcc-5.1.0.

  • GCC version 6 is now available - pkg install developer/gcc6 - and can be found in /opt/gcc-6. Note that GCC 6's default standard for C++ is -std=gnu++14. This is a change from GCC 5 which used -std=gnu++98. Some software may assume gnu++98 and to compile it with GCC 6 you will need to specify --std=gnu++98 or update the software. More detail on the changes in GCC 6 can be found on the gcc web site.

  • Perl has been upgraded to 5.24.3 and the components have been renamed to remove the minor version from paths. This means that modules no longer have to be rebuilt/moved following minor perl upgrades. The version of perl shipped with OmniOS is for internal system use and should not be relied on for anything else.

  • All of the constraints delivered under incorporation/jeos/omnios-userland are now protected with version-lock facets. This allows each constraint to be selectively disabled. This is most useful for people developing OmniOS but can also aid temporary local package updates. Example:

    omnios# pkg change-facet version-lock.web/wget=false

    To revert, set the facet to none

    omnios# pkg change-facet version-lock.web/wget=none

  • New omnios-build-tools package to easily install everything required to build OmniOS userland.

  • It is now possible to build OmniOS in a non-global zone (with the caveat that it is not possible to build release media in a NGZ).

Deprecated features

  • The calendar utility has been removed.
  • The audiovia97 driver has been removed.
  • GCC version 5 will be removed in the next stable version of OmniOS, r151026.

Package changes

Package Old Version New Version
data/iso-codes 3.74 3.76
database/sqlite-3 3.18.0 3.20.1
developer/bmake 20160926 20170812
developer/build/automake 1.15 1.15.1
developer/gcc5 5.1.0 5.5.0
developer/gcc5/libgmp-gcc5 6.0.0 6.1.2
developer/gcc5/libmpfr-gcc5 3.1.2 3.1.5
developer/gcc6 New 6.4.0
developer/gcc6/libgmp-gcc6 New 6.1.2
developer/gcc6/libmpc-gcc6 New 1.0.3
developer/gcc6/libmpfr-gcc6 New 3.1.5
developer/java/jdk 1.7.0.141.2 1.7.0.151.1
developer/lexer/flex 2.6.0 2.6.4
developer/swig 2.0.12 3.0.12
developer/versioning/git 2.13.5 2.14.2
developer/versioning/mercurial 4.2.3 4.3.3
editor/vim 8.0.567 8.0.586
file/gnu-coreutils 8.27 8.28
library/c++/sigcpp 2.99.8 2.99.9
library/expat 2.2.2 2.2.4
library/glib2 2.34.3 2.54.0
library/idnkit 1.0 2.3
library/idnkit/header-idnkit 1.0 2.3
library/libxml2 2.9.5 2.9.6
library/libxslt 1.1.29 1.1.30
library/ncurses 6.0.20170722 6.0.20171014
library/nghttp2 1.21.1 1.26.0
library/pcre 8.40 8.41
library/python-2/asn1crypto-27 New 0.23.0
library/python-2/cffi-27 New 1.11.1
library/python-2/cheroot-27 New 5.8.3
library/python-2/cherrypy-27 3.2.2 11.0.0
library/python-2/coverage-27 4.3.4 4.4.1
library/python-2/cryptography-27 New 2.0.3
library/python-2/enum-27 New 0.4.6
library/python-2/idna-27 New 2.6
library/python-2/ipaddress-27 New 1.0.18
library/python-2/jsonschema-27 2.5.1 2.6.0
library/python-2/lxml-27 3.7.2 4.0.0
library/python-2/m2crypto-27 0.24.0 0.27.0
library/python-2/mako-27 1.0.6 1.0.7
library/python-2/numpy-27 1.12.1 1.13.3
library/python-2/portend-27 New 2.2
library/python-2/pylint-27 1.7.1 1.7.4
library/python-2/pyopenssl-27 0.11 17.3.0
library/python-2/pytz-27 New 2017.2
library/python-2/setuptools-27 0.6.11 36.5.0
library/python-2/simplejson-27 3.10.0 3.11.1
library/python-2/six-27 New 1.11.0
library/python-2/tempora-27 New 1.9
library/python-2/typing-27 New 3.6.2
library/security/trousers 0.3.8 0.3.14
media/cdrtools 3.0 3.1
network/dns/idnconv 1.0 2.3
network/openssh 7.4.1 7.5.1
network/openssh-server 7.4.1 7.5.1
network/service/isc-dhcp 4.3.5 4.3.6
package/pkg/depot 0.5.11 Removed
package/pkg/system-repository 0.5.11 Removed
runtime/java 1.7.0.141.2 1.7.0.151.1
runtime/perl 5.24.1 5.24.3
runtime/perl-64 5.24.1 5.24.3
runtime/perl/manual 5.24.1 5.24.3
shell/pipe-viewer 1.6.0 1.6.6
shell/zsh 5.3.1 5.4.2
system/data/console/fonts New 0.5.11
system/library/boot-management 0.5.11 Removed
system/library/dbus 1.11.12 1.11.20
system/library/g++-5-runtime 5.1.0 5.5.0
system/library/g++-6-runtime New 6.4.0
system/library/gcc-5-runtime 5.1.0 5.5.0
system/library/gcc-6-runtime New 6.4.0
system/library/libdbus 1.11.12 1.11.20
system/management/ipmitool 1.8.16 1.8.18
system/pciutils 3.5.4 3.5.5
system/test/fio 2.12 3.1
system/virtualization/open-vm-tools 9.4.0 10.1.15
terminal/screen 4.5.1 4.6.1
terminal/tmux 2.3 2.6
text/gnu-diffutils 3.5 3.6
text/gnu-grep 3.0 3.1