HardenedBSD-10-STABLE-v46.16 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

Warning: this is a security update!

Highlights:

• The argument validation in r296956 was not enough to close all possible overflows in sysarch(2). (c4ea095d31613b4c6ba16691ee347e97ed30899f) [FreeBSD SA-16:15]
• HBSD MFC: MFV r307859: Update libarchive to 3.2.2 (e80aebeed4230b7c49bbfcaa58a20d666dc3983f) [FreeBSD SA Candidate]
• Lot of hyper-v update
• Lot of ZFS update

Installer images:
http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/IS...

CHECKSUM.SHA512:

SHA512 (HardenedBSD-10-STABLE-v46.16-amd64-bootonly.iso) = 5d77d660366900d971d7de05fdb9118370b387f03035ee906fc761cc28bb44f2a962e40df68e0bc614f1bb4e395728c4dcfac414afc513b2be1570b164f82523
SHA512 (HardenedBSD-10-STABLE-v46.16-amd64-disc1.iso) = 6103602bfc3769ae9f0e334b1b8f8ea793bbd71c698fc8fd85ed5b90c2ddbf24e21e553884810fa78d77ea67653ce014621d9bdc0d3e5e54cecb02cffea6e964
SHA512 (HardenedBSD-10-STABLE-v46.16-amd64-memstick.img) = 82711413b5f1452e1ab05dcd3b1f499091a44dea5e49d4f4ec0d3e7eed783dd20af34404c1ca22786962da6e6d089544dd8c7b9a86c55d9d0bf300038a518f94
SHA512 (HardenedBSD-10-STABLE-v46.16-amd64-mini-memstick.img) = f54fab1ad12985c141a05c68c417ec16f24397738a4132745001c40c6ff0d468baa3ee870d523b7f9d6c5ecb8de3c3d9dfcc39b952037374a7b82409ca154425
SHA512 (HardenedBSD-10-STABLE-v46.16-amd64-uefi-bootonly.iso) = d1f1e5fa15a22fa30388e1fd048f0632d223bb06d0b8fb74c7cae6fe8ea5e6a3de2ac813e53d12cd4c2947190135eee5322b34c04981b18a81c26d9180e3af1d
SHA512 (HardenedBSD-10-STABLE-v46.16-amd64-uefi-disc1.iso) = 435954520a1f166b35570c11c4f4557554973e8f3c13d753c296dfc675f469513291d989b1befb7ad7449b12e2901e97d650bf5dd93344044d1ef0846aec369b
SHA512 (HardenedBSD-10-STABLE-v46.16-amd64-uefi-memstick.img) = 8714b6027aec32e82490aa6db21cd7c1a2f8fc3e44321d0a7429063649941524d42b8e6d1b4490f3a3d45a6c23e3f4ca62da03ac9d72d78aaa1d19c1f9162cf1
SHA512 (HardenedBSD-10-STABLE-v46.16-amd64-uefi-mini-memstick.img) = f64e4f3914c48f8e100901f0597b6623c3e1987ead9de6bb1f1e210d61e87078b2262c729ff457018e050f1a661d4fa8371ef62d5f06a1458988c7eccb2956aa


CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=y+h9
-----END PGP SIGNATURE-----


Changelog:

Oliver Pinter (1):


• HBSD MFC: MFV r307859: Update libarchive to 3.2.2

Oliver Pinter + (23):

• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
• Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master

Shawn Webb (1):

• HBSD: Fix typo

arybchik (2):

• MFC r306944
• MFC r307038

asomers (1):

• MFC r306276, but don't remove findwin95

bapt (4):

• MFC r297289, r300542, r306854
• MFC r306852
• MFC r306853
• MFC r307783:

davidcs (1):

• MFC r306790 Add support for adding up to 64 Multicast addresses with a single mailbox command

emaste (3):

• MFC r307145:
• MFC r307520: elfdump: correct DT_AUXILIARY / DT_USED / DT_FILTER definitions
• MFC r307522: makesyscalls.sh: remove trailing space on the "created from" line

glebius (1):

• Merge r307936: The argument validation in r296956 was not enough to close all possible overflows in sysarch(2).

grog (1):

• Spelling, title.

jch (1):

• MFC r307551:

jtl (1):

• MFC r306766: Remove declaration of un-defined function tcp_seq_subtract().

kib (2):

• MFC r307064: When downgrading exclusively busied page to shared-busy state, wakeup waiters.
• MFC r307218: Fix a race in vm_page_busy_sleep(9).

markj (2):

• MFC r306571: rtsold: Log messages about unexpected RAs at LOG_DEBUG.
• MFC r307236: Plug a vnode lock leak in vm_fault_hold().

mav (20):

• MFC r305323: MFV r302991: 6950 ARC should cache compressed data
• MFC r305324: MFV r303077: 7072 zfs fails to expand if lun added when os is in shutdown state
• MFC r305325: MFV r303078: 7086 ztest attempts dva_get_dsize_sync on an embedded blockpointer
• MFC r305326: MFV r303079: 7147 ztest: ztest_ddt_repair fails with ztest_pattern_match assertion
• MFC r305327: MFV r303080: 6451 ztest fails due to checksum errors
• MFC r305328: MFV r303081: 7163 ztest failures due to excess error injection
• MFC r305331: MFV r304155: 7090 zfs should improve allocation order and throttle allocations
• MFC r305332: MFV r304159: 7277 zdb should be able to print zfs_dbgmsg's
• MFC r305333: MFV r304156: 7235 remove unused func dsl_dataset_set_blkptr
• MFC r305334: MFV r304157: 7230 add assertions to dmu_send_impl() to verify that stream includes BEGIN and END records
• MFC r305338: MFV r305335: 7003 zap_lockdir() should tag hold
• MFC r305339: MFV r305336: 7247 zfs receive of deduplicated stream fails
• MFC r305340: MFC r305337: 7004 dmu_tx_hold_zap() does dnode_hold() 7x on same object
• MFC r305342: Missed FreeBSD-specific piece of r305338.
• MFC r305456 (by avg): fix zfs pool creation accidentally broken by r305331
• MFC r305561: MFV r305560: 7278 tuning zfs_arc_max does not impact arc_c_min
• MFC r305563: MFV r305562: 7259 DS_FIELD_LARGE_BLOCKS is unused
• Bump __FreeBSD_version for todays ZFS merges.
• MFC r282970: Close some potential races around socket start/close.
• MFC r306762: Fix possible geom destruction before final provider close.

mckusick (2):

• MFC r304230: Add two new macros, SLIST_CONCAT and LIST_CONCAT.
• MFC 304438:

mm (1):

• MFC r307215: Sync libarchive with vendor. Style and tests fixes.

ngie (3):

• MFstable/11 r307715:
• MFstable/11 r307718:
• MFstable/11 r307721:

np (1):

• bhyve(8): Fix typo from r294294 that prevented bhyve from working with vmnet devices. This is a direct commit to stable/10.

pfg (1):

• MFC r306332: btree(3): don't shortcut closing if the metadata is dirty.

royger (1):

• MFC r303491:

sephe (55):

• MFC 303822-303824
• MFC 303867,303901
• MFC 303944
• MFC 303945,303947-303949,303989,303992,303998,304001,304002,304109,304111
• MFC 304204-304206,304252-304256
• MFC 304270,304273
• MFC 304327,304329,304330
• MFC 304331
• MFC 304441,304444,304446,304447,304591,304593-304595
• MFC 304654,304722,304723
• MFC 304724,304728
• MFC 304730
• MFC 304783-304785
• MFC 304786,304788
• MFC 304790,304791
• MFC 304832-304834,304972
• MFC 304973,304975,304976,304979,305044-305048
• MFC 305049,305050
• MFC 305052-305054,305110
• MFC 305111
• MFC 305173,305174
• MFC 305175,305176,305179,305182,305268,305270,305276
• MFC 305277,305278
• MFC 305279-305281
• MFC 305405,305407,305408,305410,305411,305453
• MFC 305454,305455,305521,305524-305526
• MFC 305578-305581
• MFC 305585
• MFC 305586,305587
• MFC 305588
• MFC 305724,305725,305727-305730,305760,305761,305763,305788
• MFC 305789
• MFC 305790-305793
• MFC 305794
• MFC 305801,305923,305924
• MFC 305925,305926,305960
• MFC 305722
• MFC 305962,305964-305967
• MFC 306013,306014
• MFC 306072-306074,306076
• MFC 306359
• MFC 306360,306387,306389
• MFC 306390-306392
• MFC 306393
• MFC 306396
• MFC 306426
• MFC 306431,306432
• MFC 306433
• MFC 306481
• MFC 306482,306483
• MFC 306484,306485
• MFC 306936-306939
• MFC 307012,307013,307262
• MFC 307078
• MFC 307261

sevan (22):

• MFC r267667: use .Mt to mark up email addresses consistently (part1)
• MFC r306611: Amend history to mention predecessor originated from 386BSD[1] & current implementation from NetBSD[2]. Reword history since the utility was renamed once more in FreeBSD 5.0. Separate out author & historical information regarding character code conversion. Add AUTHORS section.
• MFC r306612: Note the name change from mount_null to mount_nullfs in FreeBSD 5.0.
• MFC r306613: Note the change of name in FreeBSD 5.0.
• MFC r306614: Note the version PF first appeared in FreeBSD & from which version it was ported from. Address the contractions raised by igor.
• MFC r306615: sconfig appeared in FreeBSD 5.2.
• MFC r306718: Add history section for echo(1) Sourced using the draft copy of the second edition manual http://www.tuhs.org/Archive/PDP-11/Distributions/research/1972_stuff/unix_2nd_edition_manual.pdf
• MFC r306719: Document origins of expr & authors http://minnie.tuhs.org/cgi-bin/utree.pl?file=PWB1/usr/man/man1/expr.1
• MFC r306720: Add history section of pwd(1) http://minnie.tuhs.org/cgi-bin/utree.pl?file=V5/usr/source/s2/pwd.c
• MFC r306721: Add history section for stty(1) http://minnie.tuhs.org/cgi-bin/utree.pl?file=V3/man/man1/stty.1
• MFC r306722: Add history section for test(1) http://minnie.tuhs.org/cgi-bin/utree.pl?file=V7/usr/src/cmd/test.c
• MFC r306723: Add history section for atmconfig(8)
• MFC r306724: Add history section for bsdlabel(8) http://minnie.tuhs.org/cgi-bin/utree.pl?file=4.3BSD-Tahoe/usr/man/cat8/disklabel.0 Remove tab after space, highlighted by igor
• MFC r306725: Add history section for clri(8) http://minnie.tuhs.org/cgi-bin/utree.pl?file=V6/usr/man/man8/clri.8
• MFC r306727: Add history section for devd(8) Move sentence to a new line as advised by igor
• MFC r306728: Add history section for devfs(8) Move sentence to a new line as advised by igor.
• MFC r306731: Document the history of fdisk based on the original post to comp.unix.bsd by Julian Elischer [1] and the Mach 2.5 Installation notes [2]. I was unable to pin point the exact version of Mach the fdisk utility appeared as I could not find documentation older than version 2.5 & no source code or repo history. fdisk utility appears as a separate utility[3] in v2.5. Due to this, I have avoided stating the exact version fdisk first appeared in Mach. Add authors section. Make correction pointed by igor [1] https://groups.google.com/d/topic/comp.unix.bsd/Hhi45vAHxDg/discussion [2] ftp://ftp.mcs.vuw.ac.nz/doc/misc/mach-i386-doc/i386_install.ps [3] ftp://ftp.mcs.vuw.ac.nz/doc/misc/mach-i386-doc/i386_manpages.ps PR: 212469 Approved by: bcr (mentor) Differential Revision: https://reviews.freebsd.org/D8104
• MFC r306732: Document the history of fdisk based on the original post to comp.unix.bsd by Julian Elischer [1] and the Mach 2. 5 Installation notes [2]. I was unable to pin point the exact version of Mach the fdisk utility appeared as I could not find documentation older than version 2.5 & no source code or repo history. fdisk utility appears as a separate utility[3] in v2.5. Due to this, I have avoided stating the exact version fd isk first appeared in Mach. Add authors section.
• MFC r306734: Add history section to fsck_ffs(8) Move sentence to a new line as advised by igor.
• MFC r306735: Add history section to natd(8) Fix back sentence raised by igor.
• MFC r306736: Add history section to nos-tun(8)
• MFC r306840: Sort SEE ALSO section sequentially. Highlighted by mandoc -Tlint

vangyzen (1):

• MFC r306346