HardenedBSD-11-STABLE-v1100056.8 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
Highlights:
- HBSD MFC r340077: m_pulldown() may reallocate n. Update the oip pointer after the m_pulldown() call. (fec14b22fcff136c352237afb47036d1614ee692) [FreeBSD-SA-Candidate, CVE-2018-4407]
- MFC 338360,338415,338624,338630,338631,338725: Dynamic x86 IRQ layout. (160aee5ecc8a289fb54eb7b431cdab3017e9d9c3)
- MFC r339681: Allow the bhyve VNC server to listen on IPv6 for incoming connections. (5e060e63804e1ecc636b29714d32113e483d6c60)
- MFC 338408: Don't directly dereference a user pointer in the VPD ioctl. (b035f90113747066819a750566d008f6fae812be)
- hwpmc: Enable hwpmc support for AMD Family 17H devices (1235e4abcc9d407b7f094039bca7531f4444ccc5)
- MFC r339582: Drop sequencer mutex around uiomove() and make sure we don't move more bytes than is available, else a panic might happen. (4b875542b959aa18eb4a9a3594f6d548298fb59e) [FreeBSD-EN-Candidate, DoS]
- MFC r339581: Fix off-by-one which can lead to panics. [FreeBSD-SA-Candidate]
- elfcopy: avoid stripping relocations from static binaries (8e4b64478895d6b9ae0ea05d5962af093d757cfd)
- MFC r339509: Fix loader.conf(5) "password" feature (9a6d83553b2b9b32be437e7d0a79aeda1162384a)
- MFC r339547: vlan: Fix panic with lagg and vlan (1fda50699ae90ff2d1eb680f3e24c2f3d5324da6)
- MFC r339331: bhyve: emulate CLFLUSH and CLFLUSHOPT. (9e85f7a5bf64f3f8ba9db7ef8a9413e94e208652)
- LLD updates
- ZFS updates
- LinuxKPI updates
- VNET fixes
- libsysdecode fixes
Installer images:
http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/IS...
CHECKSUM.SHA512:
SHA512 (HardenedBSD-11-STABLE-v1100056.8-amd64-bootonly.iso) = e9b4dc37c3914f14573222c3bec8303ba2516783a7daadbba42d9c42cfd1b68c6ed55a9f50c8ff394038ed5885880adaa230e3f89ea335be2e728d09331eac70
SHA512 (HardenedBSD-11-STABLE-v1100056.8-amd64-disc1.iso) = 3a9d91a4b9ffb0c69cde6639bd39896c31e3d140f024b0f66fe113799daa8cf19622b7b06564dbe455481327cb4bf44e8763903f57e01ea2bd460a040b4e3b24
SHA512 (HardenedBSD-11-STABLE-v1100056.8-amd64-memstick.img) = aa7101825ff05262dc1eac97ac8fd34614f82263dc2825a2087c1faf1094cc708f7703e39503ba4469d78db385bb642a6899ee30d6c832c80dc8b267ace88a9a
SHA512 (HardenedBSD-11-STABLE-v1100056.8-amd64-mini-memstick.img) = 633bb097e6bacfe0c1fb6d6de8e8175fb3be91af1632e240aa6a96c237bd7aabae9157cf0d3ec41d1aebbdb40da53a0c2b5fa497e0f564f2670ee6b60a227a42
CHECKSUM.SHA512.asc:
-----BEGIN PGP SIGNATURE-----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=lzsa
-----END PGP SIGNATURE-----
Changelog:
Oliver Pinter (2):
- HBSD MFC r340077: m_pulldown() may reallocate n. Update the oip pointer after the m_pulldown() call.
- HBSD: explicitly initialize unprivileged_read_msgbuf to a known value
Oliver Pinter + (22):
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
- Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
Shawn Webb (6):
- HBSD: Delete the mtree temporary directory before creating it
- HBSD: Support bectl for HardenedBSD 12 users
- Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
- HBSD: Resolve merge conflict
- Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
- HBSD: Resolve merge conflict
ae (2):
- MFC r339357: Add extra parentheses to fix "versrcreach" opcode, (oif != NULL) should not be used as condition for ternary operator.
- MFC r339740: Use correct format specificator to print setdscp action.
avg (4):
- MFC r334189: Import CK as of commit 0f017230ccc86929f56bf44ef2dca93d7df8076b
- MFC r336634: MFV CK@r336629: Import CK as of commit 1c1f9901c2dea7a883342cd03d3906a1bc482583
- MFC r303648: Fix ddb "show proc" to show full arguments
- MFC r337528: add an option for ddb ps command to print process arguments
bz (7):
- MFC r339586:
- MFC r339930:
- MFC r339407:
- MFC r339431:
- MFC r339931,r339933
- MFC r330795:
- MFC r337904:
cy (1):
- Follow up on r331936. gets_s(3) will also fail in the same way that gets(3) does. This was missed in r331936.
davidcs (2):
- MFC r338734
- MFC r339366 Add support for Error Recovery
des (1):
- MFH (r305124): fix case where fd_lastfile is -1.
dim (1):
- MFC r339013:
dteske (1):
- MFC r339509: Fix loader.conf(5) "password" feature
emaste (1):
- elfcopy: avoid stripping relocations from static binaries
eugen (1):
- MFC r339462: make upgrade from previous FreeBSD versions less painful and make previously working configuration like this work again:
gjb (2):
- Document the krpc module requirement in 11.x that was not present in 10.x if the system has a custom kernel configuration that excludes NFS and, for example, uses MODULES_OVERRIDE="zfs opensolaris".
- MFC r339684: Reduce the GCE image size to 27G to be lower than the free quota limit.
glebius (1):
- MFhead r339643:
hselasky (8):
- MFC r339388: Fix for reception of large full speed isochronous frames via the transaction translator, when using the DWC OTG USB controller driver. Make sure to re-try getting the complete split packets until a DATA0 packet is received. Larger isochronous frames may be split into multiple MDATA packets terminated by a single DATA0 packet.
- MFC r339581: Fix off-by-one which can lead to panics.
- MFC r339582: Drop sequencer mutex around uiomove() and make sure we don't move more bytes than is available, else a panic might happen.
- MFC r339587: Added support for formula-based arbitrary baud rates, in contrast to the current fixed values, which enables use of rates above 1 Mbps. Improved the detection of HXD chips, and the status flag handling as well.
- MFC r339600: Make sure returned value is checked and assert a valid refcount. While at it fix a print: Unsigned types cannot be negative.
- MFC r339868: Implement dma_pool_zalloc() in the LinuxKPI.
- MFC r339923: Implement __KERNEL_DIV_ROUND_UP() function macro in the LinuxKPI.
- MFC r339924: Implement the dump_stack() function in the LinuxKPI.
jamie (1):
- MFC r339409, r339420:
jhb (6):
- MFC 338094: Fully retire the unimplemented -t option from vmstat(8).
- MFC 338101: Merge amd64 and i386 headers.
- MFC 338148: Remove 'imen' global variable from atpic(4).
- MFC 338408: Don't directly dereference a user pointer in the VPD ioctl.
- MFC 338360,338415,338624,338630,338631,338725: Dynamic x86 IRQ layout.
- MFC 338813: Clear all of the VFP state in fill_fpregs().
kib (2):
- MFC r339384: Add clwb().
- MFC r339331: bhyve: emulate CLFLUSH and CLFLUSHOPT.
kp (3):
- MFC r334375, r334379:
- MFC r338698:
- MFC r339547:
markj (2):
- MFC r339365: Typo.
- MFC r313557 (by bz): Allow Dtrace to be compiled into the kernel again after r313177.
mav (3):
- MFC r339335: Avoid zero-sized kmem_alloc() in vdev_compact_children().
- MFC r339329: Add ZIO_TYPE_FREE support for indirect vdevs.
- MFC r339372: Skip VDEV_IO_DONE stage only for ZIO_TYPE_FREE.
mmacy (3):
- hwpmc: Enable hwpmc support for AMD Family 17H devices
- fix i386 breakage caused by r339767
- fix up more issues introduced by failing to have run TB before r339767
philip (2):
- MFC r339503: Import tzdata 2018f
- MFC r339848: Import tzdata 2018g
slavash (1):
- MFC r339584 : mlx5: Notify user that the ConnectX-6 shutdown its port due to power limitation
tijl (1):
- MFC r339618:
whu (1):
- MFC: 339585