HardenedBSD-10-STABLE-v46.2 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
This is a security update, but by default none of the currently released FreeBSD SAs affect HardenedBSD, since we fixed the libarchive issue in v46.1 and the COMPAT layers are disabled by default.
https://security.freebsd.org/advisories/FreeBSD-SA-16:22.libarchive.asc
https://security.freebsd.org/advisories/FreeBSD-SA-16:21.43bsd.asc
https://security.freebsd.org/advisories/FreeBSD-SA-16:20.linux.asc
Oliver Pinter (3):
Merge remote-tracking branch 'origin/freebsd/10-stable/master' into hardened/10-stable/master
HBSD: fix merge conflict in contrib/bsnmp/snmp_usm/usm_snmp.c
HBSD: fix hbsd-update-build's hbsd_version
Oliver Pinter + (16):
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
Shawn Webb (10):
HBSD: Add option to show version information
HBSD: Intelligently discover the kernel config in hbsd-update.
HBSD: Build obsolete file and dir lists in hbsd-update-build.
HBSD: Allow building of unsigned update archives in hbsd-upate-build.
HBSD: Remove obsolete files when applying updates.
HBSD: Optionally output build log to stderr
HBSD: Fix typo in hardening(4).
HBSD: Update aslr(4) manpage.
HBSD: Document shared library loading order randomization bugs.
HBSD: aslr(4) manpage cleanup
ache (1):
MFC: r300397
avg (2):
MFC r300024: zfs_ioc_rename: fix a reversed condition
MFC r299916: vfs_read_dirent: increment ncookies after adding a cookie
cy (2):
MFC r300177 and r300179: fix two typos in man page.
MFC r300638:
delphij (1):
MFC r298192,299234,299238,299736:
glebius (1):
Merge r301053:
ian (2):
MFC r297147, r297148, r297149, r297150, r297151:
MFC r297323,r297324, r297325, r297326:
jah (1):
MFC r300258:
jhb (1):
MFC 299310: Don't store generated firmware object files in the source directory.
jilles (1):
MFC r300420: vfork(2): Mention some risks of calling vfork() from application code.
kadesai (2):
MFC r284872 - 284873
MFC r299666 - r299672
ken (2):
MFC r300224:
MFC r300327:
kib (6):
MFC r300027: Fix typo in the message.
MFC r300030: Fix comments.
MFC r300082: For async UFS mounts, shrink the directory asynchronously, at least do not pass IO_SYNC to ffs_truncate() unneccessary.
MFC r300083: If IO_SYNC was passed to ffs_truncate(), request synchronous inode update from the final ffs_update().
MFC r300084: Do enable io accounting for read-only mounts and mounts which are remounted to writeable after initial read-only. Assign to dev->si_mountpt earlier to account the accesses done at the mount time.
MFC r300432: Giant is dropped by mi_startup() before passing the control to swapper.
kp (2):
MFC 300307:
MFC 300501, 300508
loos (3):
MFC r297984:
MFC r297985:
MFC r298270:
mav (17):
Add respective tunables to all sysctls.
MFC r299691: Fix FCP_CMD LENGTH mask in ATIO7 IOCB.
MFC r299955: No need to check login status for ZOMBIE ports.
MFC r299957: Reduce verbosity of "now sending synthesized status" message.
MFC r300052: Completely remove broken now autologin port flag.
MFC r300058: Make RQCS_PORT_LOGGED_OUT for ZOMBIE ports retriable.
MFC r300157: Unify Multi ID target code by reusing isp_find_chan_by_did().
MFC r300217: Add IOCB debugging for ISPCTL_RESET_DEV and ISPCTL_ABORT_CMD.
MFC r300218: Add proper reporting for early task management errors.
MFC r300072: Fix NULL-dereference panic if VESA reports zero modes.
MFC r299329: Improve validation of some POPULATE TOKEN parameters.
MFC r299346: More XCOPY parameters validation.
MFC r299347, r299348: Validate XCOPY range offsets and lengths.
MFC r299373: Allow sleepable allocations in enclosure daemon threads.
MFC ioat(4) driver in its present state.
Add ioat.4 missed in r300661.
Fix build on stable/10.
n_hibma (1):
MFC 299559:
ngie (2):
MFC r299764,r299765,r299767,r299769,r299770,r299774,r299802,r299803,r299805,r299814:
MFC r299465,r299807,r299808,r299817,r299831,r299832,r300167:
pfg (3):
MFV r299377: sed.1: Correction for the case insensitive case.
sed: rewrite the main loop.
MFC r300378: libc/regex: fix two buffer underruns.
rmacklem (4):
MFC: r299514 Fix use-after-free in NFS4 lock test service.
MFC: r299753 Fix fuse to use DIRECT_IO when required.
MFC: r299816 Fix fuse so that stale buffer cache data isn't read.
MFC: r299872 Fix fuse for "cp" of a mode 0444 file to the file system.
sephe (1):
MFC r299505
