HardenedBSD-11-STABLE-v1100056.1 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

Highlights:

• MFC r336273: pf: Fix panic on vnet jail shutdown with synproxy (0873e9ee23e89e484beda97e2df50de20eb5eb49)
• MFC r336275: pf: Fix synproxy (b21dc776778cd732b26ce6cbc6cc5d11b902815c)
• HBSD: Bring usr.sbin/hbsd-update current (7131affd05b24405930598458f21d5aed58372b2)
• MFC r335939, r336088: Add setproctitle_fast(3) for frequent callers. (b0161972b61f32e3939b1d00ed596a51f2d9df53)
• MFC r336195: unbreak dhclient(8) option 26 processing (6cf691c4162ca1b63686cf0168c7c7308abcf749)
• MFC r336060: Allow the use of slashes in process names of RFC 3164 formatted messages (1443b72deb5a8d24de24dca3c17f7584a1bcdc85)
• MFC r334296: Fix "Bad tailq" panic when auditing auditon(A_SETCLASS, ...) (2629e7874930097ab4606daa386c9c151be0855b)
• MFC: r333508 Add support for the TestStateID operation to the NFSv4.1 server. (63f6f19b0756b18f2e68d82cbe037f21f9a8c500)
• MFC r335921: Allow jail names (not just IDs) to be specified for: cpuset(1), ipfw(8), sockstat(1), ugidfw(8) (fbeac7fa845df8507cfd3ff4205e4edce5cd64a3)
• MFC r335595-r335596 r335595: Modernize usage of "restrict" keyword in ntp.conf (026ad5cf663bf4ef529f4e74337e0713b9f9c22b)
• llvm/clang/lldb update to 6.0.1 (b11d8bd84ca80f747465696403ade22f752ca6d7)
• libnv updates
• msun updates
• fsck_msdosfs updates

Installer images:
http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/IS...

CHECKSUM.SHA512:

SHA512 (HardenedBSD-11-STABLE-v1100056.1-amd64-bootonly.iso) = 7c7350a80f50ba19d7e1c64557ac0cb22c90f22a3124dd27a789c4c293d9ae5d3f895d8ab885ae6ca7236fb3d63236df9d6aa8c96cc3cf9475db070c8e5d71ed
SHA512 (HardenedBSD-11-STABLE-v1100056.1-amd64-disc1.iso) = 21ad6239b58e1e61217a81785f66180e1559a1e17cf239f3a2097e70a7b8e5e713bd47a0cb6ba9a00609874bb35806d4b4214cf73c01281e44f46c647caab4b2
SHA512 (HardenedBSD-11-STABLE-v1100056.1-amd64-memstick.img) = 07ef9e0229a81bf97fdd871cf45b3bda787a4a6e0ed60740d404e4915c1fa4b99108a27e299bed27c861830c64a48eafc145528ad9c2047aec857264572a68c9
SHA512 (HardenedBSD-11-STABLE-v1100056.1-amd64-mini-memstick.img) = ae6ea867c87c2dde581139a652ec648b2f0ba7b87337183c42d556d4a6383f41f4ef3bcaa7dfd7d9841d7bd78dfe50bfe5885dbe4dbc075b1d4af47d12246c7f


CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----
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=y6aK
-----END PGP SIGNATURE-----


Changelog:

Oliver Pinter + (38):


• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master

Shawn Webb (1):

• HBSD: Bring usr.sbin/hbsd-update current

ae (3):

• MFC r335759: Remove extra "ipfw" from example.
• MFC r335795,335796: Make debug output produced by `setkey -x` command a more human readable.
• MFC r336219: Use correct size when we are allocating array for skipto index.

araujo (5):

• MFC r334307, r335103-r335104
• MFC r335025:
• MFC r335030:
• MFC r335027, r335050
• MFC r335026:

asomers (6):

• MFC r334296:
• MFC r334390:
• MFC r334394:
• MFC r334403:
• MFC r334547:
• MFC r335287, r335290

brooks (1):

• MFC r336238:

cy (1):

• MFC r336151:

dab (1):

• MFC r335765, r335776, r336186:

davidcs (1):

• MFC r333004 Fix Issue with adding MultiCast Addresses. When multicast addresses are added/deleted, the delete the multicast addresses previously programmed in HW and reprogram the new set of multicast addresses.

delphij (6):

• MFC r335469: Don't leak tmpstr.
• MFC r335559:
• MFC r335655:
• MFC r335696,r335697:
• MFC r318355,318366: add -T (timestamp) option for reproducible builds
• MFC r335189:

dim (4):

• MFC r335799:
• MFC r332965 (by emaste):
• MFC r333401 (by emaste):
• MFC r336227:

dteske (1):

• MFC SVN r335750: Fix typo in top-level Makefile

ed (3):

• MFC r335861:
• MFC r335862:
• MFC r336060:

emaste (1):

• MFC r306098 (br): Use kqueue(2) instead of select(2).

eugen (1):

• MFC r336195: unbreak dhclient(8) option 26 processing

ian (6):

• MFC r335486:
• MFC r335489:
• MFC r335575, r335786-r335787
• MFC r335595-r335596
• MFC r333255, r333260
• MFC r335283:

jah (1):

• MFC r328489, r329232, r331836

jamie (1):

• MFC r335921:

kevans (5):

• MFC r335479, r335509
• MFC r335652-r335654
• MFC r335757:
• MFC r304908-r304909
• MFC r304910, r304912, r304915, r304952, r325019, r328164, r331094, r332664, r335341-r335345, r335347, r335379-r335380, r335382

kib (9):

• MFC r335975: Order the portion of the AMD-specific MSRs names definitions numerically.
• MFC r335976: Add a name for the MSR controlling standard extended features report on AMD.
• MFC r335980: Silence warnings about unused variables when RACCT is defined but RCTL is not.
• MFC r336029: Style.
• MFC r335935: Add a way for the process to request cleanup of the kernel cache of the process arguments.
• MFC r335937: top: do not fall to the thread name if kernel cache of the process args is empty.
• MFC r336030: Save a call to pmap_remove() if entry cannot have any pages mapped.
• MFC r335969,r335996,r335999,r336008,r336010: Improvements to x86 pmap_extract_and_hold().
• MFC r335939, r336088: Add setproctitle_fast(3) for frequent callers.

kp (5):

• MFC r335816:
• pflog/pfsync: Fix module build with VIMAGE=yes
• MFC r335886:
• MFC r336275:
• MFC r336273:

markj (10):

• MFC r335580: Re-count available PV entries after reclaiming a PV chunk.
• MFC r335660: Add missing MLINK.
• MFC r336089: Fix whitespace issues in bessel function routines.
• MFC r336199: Remove a duplicate check.
• MFC r336090: Reduce diff between msun/src/e_pow.c and msun/src/e_powf.c.
• MFC r336257, r336258, r336263: Use the MSR name.
• MFC r336226: Pass the right sizes to malloc() and realloc().
• MFC r336225: Add PCI IDs for AMD X370 AHCI and XHCI.
• MFC r335784, r335971: Invalidate the mapping before updating its physical address.
• MFC r336417: Add a FALLTHROUGH comment to kvprintf().

mav (1):

• MFC r335874: Cut currdev dev and path fields for ZFS on the last colon.

peterj (1):

• Retrospectively document SVN branch points for stable-11 and its releases.

pfg (2):

• MFC r336115; libiconv: correct undefined behavior.
• MFC r336113: gzip: fix for undefined behavior.

rmacklem (4):

• MFC: r333508 Add support for the TestStateID operation to the NFSv4.1 server.
• MFC: r333579 The NFSv4.1 server should return NFSERR_BACKCHANBUSY instead of NFS_OK.
• MFC: r333645 End grace for the NFSv4 server if all mounts do ReclaimComplete.
• MFC: r333766 Add a missing nfsrv_freesession() call for an unlikely failure case.