HardenedBSD-12-STABLE-v1200058.2
·
2225 commits
to hardened/12-stable/master
since this release
Highlights:
- MFC r343043: scp: disallow empty or current directory (40c2d4e) [CVE-2018-20685 FreeBSD-SA-candidate]
- MFC r342887: Stop setting if_linkmib in vlan(4) ifnets. (9752824) [FreeBSD-SA-candidate]
- MFC r342849: libbe(3): Don't allow bootfs to be destroyed (43c0259)
- MFC r342792, r342805: Provide rc_service variable for rc service scripts (43d929c)
- MFC r342966: net80211: fix possible panic for some drivers after r342463 (afe64a5)
- MFC r342883: net80211: fix panic when device is removed during initialization (86c8489)
- MFC r342787: Add a bounds check to the tws(4) passthrough ioctl handler. (09c4a5a) [FreeBSD-SA-candidate]
- MFC r342575, r342580: ar: detect and error out on 32-bit symbol table overflow (932f2a3)
- MFC r342686: Avoid setting PG_U unconditionally in pmap_enter_quick_locked(). (6a79026)
- MFC of 342135 and 342290 Properly respond to error from VFS_ROOT() during mount. (3d8c983)
- MFC r342362-r342363: config(8) duplicate option handling (b436018)
- MFC r341101-r341103, r341148, r341391, r341422-r341423, r341454, r341780-r341781, r341805, r342026 Make powerpc booke kernels boot from ubldr. (5f1960a)
- MFC 339899: Make battery emptying rate available as sysctl variable. (fcad6d3)
- MFC 339620: Add a "live" mode to ktrdump. (9eec96e)
- MFC 340460: Convert the number of MSI IRQs on x86 from a constant to a tunable. (38147ce)
- MFC: r342286 Fix the NFSv4 server to obey vfs.nfsd.nfs_privport. (9e714b0)
- MFC r341998: pf: Fix endless loop on NAT exhaustion with sticky-address (8df6e4a) [FreeBSD-SA-candidate]
- MFC r342211: net80211: fix out-of-bounds read in ieee80211_amrr(9) (d8b9265)
- MFC r341833: pf: Prevent integer overflow in PF when calculating the adaptive timeout. (4e14cef)
- MFC r339746,339751,339794,340866,340939,342042: Sync libarchive with vendor. (7e7a6e6)
- MFC r342183: Update sqlite3-3.23.1 --> sqlite3-3.26.0 (3260000) (5f41f06)
- HBSD: log pkg changes to /var/log/pkg.log (9135625)
- MFC r342030: Plug memory leak for AES_*_NIST_GMAC algorithms. (1f3faa4)
- amd64 string primitive optimizations
- asmc updates
- cxgbe updates
- ichwd updates
- loader updates
- mrsas updates
- netmap updates
- riscv updates
- rtwn updates
- sfxge updates
- tzdata updates
- zfs updates
Changelog
Oliver Pinter (7):
HBSD: update OP-HBSD kernel config
HBSD: add back radeon to OP-HBSD
HBSD: log pkg changes to /var/log/pkg.log
HBSD: bump copyright year to 2019
HBSD: update OP-HBSD kernel config
HBSD: disable DEADLKRES from OP-HBSD
HBSD: remove urtwn and urtwnfw from OP-HBSD
Oliver Pinter + (66):
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master
Shawn Webb (2):
Merge remote-tracking branch 'origin/freebsd/12-stable/master' into hardened/12-stable/master
HBSD: Resolve merge conflict
ae (3):
MFC r342030: Plug memory leak for AES_*_NIST_GMAC algorithms.
MFC r342298: Allow use underscores and dots in service names without escaping.
MFC r342925: Relax requirement to packet size of CARP protocol and remove version check.
arybchik (49):
MFC r340767
MFC r340826
MFC r340797
MFC r340805
MFC r340806
MFC r340799
MFC r340822
r340798
MFC r340800
r340796
MFC r340814
MFC r340875
MFC r340883
MFC r340884
MFC r340885
MFC r340886
MFC r340801
MFC r340802
MFC r340803
MFC r340804
MFC r340887
MFC r340888
MFC r340889
MFC r340890
MFC r340891
MFC r340892
MFC r340894
MFC r340895
MFC r340896
MFC r341197
MFC r341213
MFC r341214
MFC r341215
MFC r341290
MFC r341295
MFC r341301
MFC r341302
MFC r341309
MFC r341311
MFC r341326
MFC r341327
MFC r341297
MFC r341782
MFC r340831
MFC r340833
MFC r341038
MFC r341783
MFC r341784
MFC r341785
avg (9):
MFC r341632: acpi_{Device,Battery}IsPresent: restore pre-r330957 behaviour
MFC r341681: daprobedone: announce if a disk is write-protected
MFC r342204: cyapa.4, isl.4: cross-reference and document use of chromebook_platform(4)
MFC r342072: ichwd: add support for clearing No Reboot bit in TCOv4
MFC r342073: ichwd: add Sunrise Point-LP ID
MFC r342193: ichwd: add a few assertions about tco_version
MFC r342169: add a knob that disables detection of write protected disks
MFC r342541: MFV r342532: 5882 Temporary pool names
MFC r342525: MFV r342469: 9630 add lzc_rename and lzc_destroy to libzfs_core
avos (21):
MFC r341786, r342156 rtwn, rsu: add more USB ids.
MFC r342185: iwi(4): do not leak node reference when IWI_FLAG_ASSOCIATED flag is set.
MFC r342211: net80211: fix out-of-bounds read in ieee80211_amrr(9)
MFC r342604: net80211: fix duplicate sequence number bump for non-AMPDU QoS frames.
MFC r342672: rtwn_pci: fix excessive packet loss on Tx with RTL8188EE.
MFC r342673: rtwn(4): provide register definitions for RTL8188CE calibration routines.
MFC r342674: rtwn(4): add IQ calibration support for RTL8188E*
MFC r342677: rtwn_pci(4): add support for event-based Tx reports.
MFC r342678: Move USB-specific parts from rtwn(4) to rtwn_usb(4)
MFC r342679: rtwn(4): do not try to start RTL8188E* MCU during device shutdown.
MFC r342680: rtwn(4): rename common RTL8188E* structures.
MFC r342681: rtwn(4): rename set_name -> set_rom_opts method and reuse it for RTL8188E*
MFC r342682: rtwn_pci(4): add support for RTL8188EE chipset.
MFC r342759: rtwn_pci(4): sync r88ee_power_on() with OpenBSD
MFC r342684: Refresh sys/conf/files after recent rtwn(4) update.
MFC r342702: rtwn(4): refresh manpages.
MFC r342703: rtwn_usb(4): add USB id for TP-LINK TL-WN821N v5.
MFC r342810: powerd(8): allow to force a method of battery state query
MFC r342883: net80211: fix panic when device is removed during initialization
MFC r342912: rtwn_usb(4): add IQ calibration support for RTL8192CU
MFC r342966: net80211: fix possible panic for some drivers after r342463
bapt (1):
MFC r340933:
brooks (1):
MFC r342398:
chuck (1):
MFC r342046: nda(4) fix check for Dataset Management support
cperciva (1):
MFC r342875: Turn off ec2_ephemeralswap for now
cy (8):
MFC r342183:
MFC r342374:
MFC r341279:
MFC r342377:
MFC r342547:
MFC r342385:
MFC r342596:
MFC r342605:
dab (7):
MFC r341820:
MFC r341806:
MFC r341988
MFC r342171:
MFC r342218:
MFC r342770:
MFC r342822:
delphij (4):
MFC r342661: Happy New Year 2019!
MFC r340359:
MFC r342614, r342633
MFC r342640: Ensure buffer is nul-terminated.
dim (2):
Pull in r329671 from upstream clang trunk (by Akira Hatanaka):
Pull in r337861 from upstream llvm trunk (by Hideki Saito):
emaste (2):
MFC r342575, r342580: ar: detect and error out on 32-bit symbol table overflow
MFC r343043: scp: disallow empty or current directory
eugen (3):
MFC r342141: periodic/weekly/340.noid: do not use sysrc(8) that depends on bsdinstall(8) and may be non-functional for system built WITHOUT_BSDINSTALL. (*)
MFC r342367: ifconfig.8, lagg.4: fix documentation bug: -use_flowid needs to be used to force local hash computation and disable usage of RSS hash provided by driver.
MFC r340617,341006: unbreak ng_source(4) for 64-bit platforms
fsu (1):
MFC r342933: Fix errno values returned from DUMMY_XATTR linuxulator calls
gonzo (1):
MFC r341406, r342106
hselasky (5):
MFC r342456: Fix reading of USB sample rate descriptor for SPL Crimson Rev 1.
MFC r342549: Add USB quirk for SPL Crimson Rev 1.
MFC r342730: Improve USB generic debug messages. Print process ID and name when opening and closing usb/ugenX.Y character device nodes.
MFC r342778: Reduce timeout for reading the USB HUB port status to 1000ms and try to filter out dead USB HUB devices by implementing an error counter, so that the USB enumeration thread does not spend all its time reading from non-responding devices, blocking user-space access in the end.
MFC r342884: Fix loopback traffic when using non-lo0 link local IPv6 addresses.
jhb (19):
MFC 340304: Use tcp_state_change() in the cxgbe(4) TOE module.
MFC 340441: Revert r332735 and fix MSI-X to properly fail allocations when full.
MFC 340465: Use sbsndptr_adv() instead of sbsndptr() for TOE TLS.
MFC 340460: Convert the number of MSI IRQs on x86 from a constant to a tunable.
MFC 341800: Don't report stale signal information in ptrace_lwpinfo.
MFC 339620: Add a "live" mode to ktrdump.
MFC 341802: Validate the string size parameter passed to -s.
MFC 339894: Teach procstat -x about the AT_EHDRFLAGS ELF auxiliary vector.
MFC 339899: Make battery emptying rate available as sysctl variable.
MFC 339665: Add sha224 to the authctx union.
MFC 339666: Support the SHA224 HMAC algorithm in ccr(4).
MFC 339890: Add support for "plain" (non-HMAC) SHA digests.
MFC 340018: Compile cryptocheck with in-tree openssl again.
MFC 340021: Assert that reclaim_tx_descs() is always making forward progress.
MFC 340022: Add support for port unit wiring to cxgbe(4).
MFC 340206: Treat the memory lengths for CHELSIO_T4_GET_MEM as unsigned.
MFC 340466,340473: Move the TLS key map into the adapter softc.
MFC 340468: Change the quantum for TLS key addresses to 32 bytes.
MFC 340469: Remove bogus roundup2() of the key programming work request header.
jhibbits (2):
MFC r341751-r341752, r342025, r342107
MFC r341101-r341103, r341148, r341391, r341422-r341423, r341454, r341780-r341781, r341805, r342026
jilles (2):
MFC r342817: getconf(1): Minor mdoc fix
MFC r342816: thr_wake(2): Minor mdoc fixes
kadesai (3):
MFC r342059-r342069
Compilation failure on ppc and mips due to Revision 342066. Adding extra memset on chain frame.
MFC r342537-r342540
kevans (5):
MFC r340722-r340723, r342466: bectl(8)/libbe(3) fixes
MFC r342362-r342363: config(8) duplicate option handling
MFC r342792, r342805: Provide rc_service variable for rc service scripts
MFC r342849: libbe(3): Don't allow bootfs to be destroyed
MFC r342874: Fix bsdgrep manpage clobbering grep(1) with default build
kib (19):
MFC r342380: Properly test for vmio buffer in bnoreuselist().
MFC r342381: Allocate v_object for the new snapshot vnode.
MFC r342382: nvdimm SPA geom: Update bio fields needed for devstat_end_transaction_bio().
MFC r342594: i386: Fix allocation of the KVA frame for pmap_quick_enter_page().
MFC r342653, r342654: Update comments: paging is initialized in pmap_cold().
MFC r342595: For hw.{physmem,realmem,usermem} MIBs, clamp instead of truncating.
MFC r342711: Fix typo, use boolean operator instead of bit-wise.
MFC r342630: Add 'v' modifier to the ddb 'show pginfo' command to display vm_page backing the provided kernel virtual address.
MFC r342739: Fix typo in r342710.
MFC r342625, r342631: Use IDX_TO_OFF().
MFC r342627: Implement zap_vma_ptes() for managed device objects.
MFC r342628, r342670 (by cem): Fix linux_destroy_dev() behaviour when there are still files open from the destroying cdev.
MFC r342767: x86: Report per-cpu IPI TLB shootdown generation in ddb 'show pcpu' output.
MFC r342551, r342574: Bump sys_errlist size to keep ABI backward-compatible for some time.
MFC r342769, r342775: i386: Use atomic 64bit load to read PDE value from PAE pagetables in pmap_kextract().
MFC r342823: Clamp tuklib_physmem() return value to SIZE_T_MAX.
MFC r342826: Fix use of busdma(9) KPI in ahci(4).
MFC r342853: Add a tunable which changes mincore(2) algorithm to only report data from the local mapping.
MFC r340421 (by cem), r342934: cpucontrol(8): De-duplicate common update logic.
kp (8):
MFC r341834:
MFC r341835:
MFC r341833:
MFC r341998:
MFC r341999:
MFC r342000:
MFC r342784:
MFC r342591,342599:
manu (2):
MFC r340337:
MFC r342935:
markj (19):
MFC r342086: Add support for the nForce MCP89 adapter.
MFC r342214: Remove a use of a negative array index from fxp(4).
MFC r342207: Fix DDB's "show malloc" after r338899.
MFC r342182: Remove UMS support code from radeonkms.
MFC r342098: Assume that pmap_l1() will return a PTE.
MFC r342100: Add some more checking to the RISC-V page fault handler.
MFC r342099: Avoid needless TLB invalidations in pmap_remove_pages().
MFC r342097: Add a QEMU config for RISC-V.
MFC r342093: Clean up the riscv pmap_bootstrap() implementation.
MFC r342223: Replace uses of sbadaddr with stval.
MFC r342221: Implement cpu_halt() for RISC-V.
MFC r342688: Typo.
MFC r342687: Use g_handleattr() to reply to GEOM::candelete queries.
MFC r342686: Avoid setting PG_U unconditionally in pmap_enter_quick_locked().
MFC r342768: Support MSG_DONTWAIT in send*(2).
MFC r342888: Complete the removal of obsolete ioctl handlers.
MFC r342787: Add a bounds check to the tws(4) passthrough ioctl handler.
MFC r342863: Add termcap entries for TI Silent 703/707 terminals.
MFC r342887: Stop setting if_linkmib in vlan(4) ifnets.
mav (1):
MFC r342349: Fix passing wrong variables to nvlist_destroy() after r333446.
mckusick (2):
MFC of 342548
MFC of 342135 and 342290
mjg (7):
MFC r341364
MFC r341719
MFC r341272,r341273,r341351
MFC r340410
MFC r340482,r341724
MFC r340676,r340677,r340679,r340747,r340749,r341682
MFC r342053
mm (1):
MFC r339746,339751,339794,340866,340939,342042: Sync libarchive with vendor.
mmel (1):
MFC r342113:
ngie (1):
MFC r342597:
pfg (1):
MFC r342632: ext2fs.5: Update the manpage.
philip (1):
MFC r342613: Import tzdata 2018h MFC r342644: Import tzdata 2018i
rgrimes (1):
MFC: r342944 Fix spelling of identifier
rmacklem (2):
MFC: r342286 Fix the NFSv4 server to obey vfs.nfsd.nfs_privport.
Add an UPDATING entry for r342561.
sef (1):
MFC r341641: Reduce number of DNS queries in mountd.
shurd (1):
MFC r342855:
tsoome (9):
MFC: r341231
MFC r341328: loader: create separate lists for fd, cd and hd, merge bioscd with biosdisk
MFC r341329: loader.efi: fix EFI getchar() for multiple consoles
MFC r342151, r342161: loader: zfs reader should not probe partitionless disks
MFC r341438: zfs: we can boot from dataset with large_dnode enabled
With buggy int13 ah=15, we can mis-identify the floppy devices.
loader.efi: update memmap command to recognize new attributes
i386_parsedev() needs to support fd devices
MFC: r342619, r342626
tuexen (1):
MFC r342280:
vmaffione (9):
MFC r342299
MFC r342300
MFC r342301
MFC r342302
MFC r342368, r342369
MFC r342649, r342650
MFC r342737
netmap: fix sysctl variable in vale(4)
MFC r342886
Installer images: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/ISO-IMAGES/HardenedBSD-12-STABLE-v1200058.2/
CHECKSUM.SHA512:
SHA512 (HardenedBSD-12-STABLE-v1200058.2-amd64-bootonly.iso) = a962a3debf7fe72392e0d2f90bc2df3808f6c301f9ade0f5c6e197ce896723057431c8cd29df494c5ee071694a429c13354b2f34d0ae73cc1952a57f0da8bfec
SHA512 (HardenedBSD-12-STABLE-v1200058.2-amd64-disc1.iso) = a06cd6492e30f1cb121573da0a2e61cb8d0f14e131da26b86bd54fa5dccd62537c0927c950daf13127b39cc5ee476c48c5e6298d128803c6b86c314cf5db976d
SHA512 (HardenedBSD-12-STABLE-v1200058.2-amd64-memstick.img) = 21b4345d6389bb80f145bcfb47ffdfa4f44aef1e14752b4d1edfd867c5f4ecf9c54f6e7babfb422a30fb9a0e00237a1dd3abb2a333faaaee8b12abc5399f515c
SHA512 (HardenedBSD-12-STABLE-v1200058.2-amd64-mini-memstick.img) = 9e274ea3b563fca0b9ff190a876c450ef537248c6270bf14ffa257857da7326ecc1872b3d267f5566b6c13c73912a031e2a397f2f64af9177e519326a35b46d3
CHECKSUM.SHA512.asc:
-----BEGIN PGP SIGNATURE-----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=ld5O
-----END PGP SIGNATURE-----
shortlog-HardenedBSD-12-STABLE-v1200058.2.txt
CHECKSUM.SHA512.txt
CHECKSUM.SHA512.asc.txt