Stable release: HardenedBSD-stable 11-STABLE v1100056.12

HardenedBSD-11-STABLE-v1100056.12 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

Highlights:

  • MFC r305074-r305075, r327275, r327570: newfs_msdos updates (5c2dc4965571d306fec98cc07f59e3d9b0770f35)
  • MFC r342640: Ensure buffer is nul-terminated. (a5529f8274c6e262a96221ef07ceb11e0e0639bc)
  • MFC r342966: net80211: fix possible panic for some drivers after r342464 (d72ddcc7912e0b3078dcd31123a58ae3e5ab1014)
  • MFC r342883: net80211: fix panic when device is removed during initialization (7f8b81b93a714b7a8807d32e1bde933651f70f97)
  • MFC r342810: powerd(8): allow to force a method of battery state query (48d38e36ce7fd50398514fe106ae73ff57d84b0d)
  • MFC r342787: Add a bounds check to the tws(4) passthrough ioctl handler. (5a404946700fc485ddc81aa41a97bbe6333ac014)
  • MFC r342686: Avoid setting PG_U unconditionally in pmap_enter_quick_locked(). (6b926a8ea46f4dfac7d8d6d9a311de9ecd9bdcf7)
  • MFC r342362-r342363: config(8) duplicate option handling (0368474a6a610d15c7de92010fde161d9e465180)
  • MFC 339899: Make battery emptying rate available as sysctl variable. (6bb14494cc5721af5f373f1f6f82225e41c7d935)
  • MFC: r342286 Fix the NFSv4 server to obey vfs.nfsd.nfs_privport (4b9098849df19a547ce70e31e6bd5975a27abc03)
  • MFC r341998: pf: Fix endless loop on NAT exhaustion with sticky-address (955c6a36425f6f83bc210ca3178b73219555a550)
  • MFC r342211: net80211: fix out-of-bounds read in ieee80211_amrr(9) (a94de320dbe8ed631d21535fd5a797f757d3bb08)
  • MFC r339746,339751,339794,340866,340939,342042: Sync libarchive with vendor. (250ab274d51bec04e50452ba7196798e4336897f)
  • MFC r333352 & r342183: Update sqlite3-3.23.1 --> sqlite3-3.26.0 (3260000)
  • ZFS updates
  • sfxge updates
  • mrsas updates
  • netmap updates

Installer images:
http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/IS...

CHECKSUM.SHA512:

SHA512 (HardenedBSD-11-STABLE-v1100056.12-amd64-bootonly.iso) = 56ecd76d13f1dc47414681137fd2dfac2172c0fc2705d25eb4120adac5a60159f97e442d0bc0f45a52feef5c76f208f5d38dab569f48ecc57cf3e74d7b2ae543
SHA512 (HardenedBSD-11-STABLE-v1100056.12-amd64-disc1.iso) = 0b9440b1f6df1dd70601555d00135bfe6bb9fe3ac1ec2e079675dd6be3683710a994f1715c8e113a8aecf896e0ff218f6bae35bc596247854096a526bd0219e7
SHA512 (HardenedBSD-11-STABLE-v1100056.12-amd64-memstick.img) = eea300215730ea9cac2ebdeb6221116bae4b93ea0e5be6e86ceeadc3eb89918eb0d6b41d250bc4d3ee9f8206ee41f9228ca79e9a3bd0ce1712b122004fc54869
SHA512 (HardenedBSD-11-STABLE-v1100056.12-amd64-mini-memstick.img) = e913c02d3c9bcdb1274ceaba7e43a1abf422ebefa6a4d9915c02df1c36a1238748ff296266878e8ce3a1397ee69ed2a383a0123e54f1cacf5033714b9e68c883

CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----
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=RgXk
-----END PGP SIGNATURE-----


Changelog:

Oliver Pinter (1):

  • HBSD: bump copyright year to 2019


Oliver Pinter + (46):

  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
  • Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master


ae (1):

  • MFC r342298: Allow use underscores and dots in service names without escaping.


arybchik (55):

  • MFC r312866
  • MFC r312867
  • MFC r312868
  • MFC r312883
  • MFC r312884
  • MFC r312885
  • MFC r340767
  • MFC r340797
  • MFC r340798
  • MFC r340800
  • MFC r340796
  • MFC r340800
  • MFC r340801
  • MFC r340802
  • MFC r340803
  • MFC r340804
  • MFC r340805
  • MFC r340806
  • MFC r340814
  • MFC r340822
  • MFC r340826
  • MFC r340831
  • MFC r340833
  • MFC r340875
  • MFC r340883
  • MFC r340884
  • MFC r340885
  • MFC r340886
  • MFC r340887
  • MFC r340888
  • MFC r340889
  • MFC r340890
  • MFC r340891
  • MFC r340892
  • MFC r340894
  • MFC r340895
  • MFC r340896
  • MFC r341038
  • MFC r341197
  • MFC r341213
  • MFC r341214
  • MFC r341215
  • MFC r341290
  • MFC r341295
  • MFC r341297
  • MFC r341301
  • MFC r341302
  • MFC r341309
  • MFC r341311
  • MFC r341326
  • MFC r341327
  • MFC r341782
  • MFC r341783
  • MFC r341784
  • MFC r341785


avg (8):

  • MFC r341681: daprobedone: announce if a disk is write-protected
  • MFC r342204: cyapa.4, isl.4: cross-reference and document use of chromebook_platform(4)
  • MFC r342072: ichwd: add support for clearing No Reboot bit in TCOv4
  • MFC r342073: ichwd: add Sunrise Point-LP ID
  • MFC r342193: ichwd: add a few assertions about tco_version
  • MFC r342169: add a knob that disables detection of write protected disks
  • MFC r342541: MFV r342532: 5882 Temporary pool names
  • MFC r342525: MFV r342469: 9630 add lzc_rename and lzc_destroy to libzfs_core


avos (5):

  • MFC r342185: iwi(4): do not leak node reference when IWI_FLAG_ASSOCIATED flag is set.
  • MFC r342211: net80211: fix out-of-bounds read in ieee80211_amrr(9)
  • MFC r342810: powerd(8): allow to force a method of battery state query
  • MFC r342883: net80211: fix panic when device is removed during initialization
  • MFC r342966: net80211: fix possible panic for some drivers after r342464


cy (8):

  • MFC r333352 & r342183:
  • MFC r342374:
  • MFC r341279:
  • MFC r342377:
  • MFC r342547:
  • MFC r342385:
  • MFC r342596:
  • MFC r342605:


dab (2):

  • MFC r342171:
  • MFC r342218:


delphij (4):

  • MFC r333391 (imp): Remove 'All Rights Reserved' from the collection copyright and templates.
  • MFC r342661: Happy New Year 2019!
  • MFC r342614, r342633
  • MFC r342640: Ensure buffer is nul-terminated.


dim (1):

  • Pull in r329671 from upstream clang trunk (by Akira Hatanaka):


emaste (1):

  • MFC r342575, r342580: ar: detect and error out on 32-bit symbol table overflow


eugen (3):

  • MFC r342141: periodic/weekly/340.noid: do not use sysrc(8) that depends on bsdinstall(8) and may be non-functional for system built WITHOUT_BSDINSTALL. (*)
  • MFC r342367: ifconfig.8, lagg.4: fix documentation bug: -use_flowid needs to be used to force local hash computation and disable usage of RSS hash provided by driver.
  • MFC r340617,341006: unbreak ng_source(4) for 64-bit platforms


fsu (1):

  • MFC r342933: Fix errno values returned from DUMMY_XATTR linuxulator calls


gjb (2):

  • Document SA-18:15, EN-18:16, EN-18:17, EN-18:18.
  • Document EN-19:03-05.


hselasky (2):

  • MFC r342456: Fix reading of USB sample rate descriptor for SPL Crimson Rev 1.
  • MFC r342549: Add USB quirk for SPL Crimson Rev 1.


jhb (10):

  • MFC 340304: Use tcp_state_change() in the cxgbe(4) TOE module.
  • MFC 340441: Revert r332735 and fix MSI-X to properly fail allocations when full.
  • MFC 340460: Convert the number of MSI IRQs on x86 from a constant to a tunable.
  • MFC 341800: Don't report stale signal information in ptrace_lwpinfo.
  • MFC 339620: Add a "live" mode to ktrdump.
  • MFC 341802: Validate the string size parameter passed to -s.
  • MFC 339894: Teach procstat -x about the AT_EHDRFLAGS ELF auxiliary vector.
  • MFC 339899: Make battery emptying rate available as sysctl variable.
  • MFC 340021: Assert that reclaim_tx_descs() is always making forward progress.
  • MFC 340022: Add support for port unit wiring to cxgbe(4).


jilles (2):

  • MFC r342816: thr_wake(2): Minor mdoc fixes
  • MFC r342817: getconf(1): Minor mdoc fix


kadesai (3):

  • MFC r342059-r342069
  • MFC r342079 Compilation failure on ppc and mips due to Revision 342066. Adding extra memset on chain frame.
  • MFC r342537-r342540


kevans (5):

  • MFC r342362-r342363: config(8) duplicate option handling
  • Revert r342807, mistakenly including libbe(3)/bectl(8) MFC
  • MFC r342362-r342363: config(8) duplicate option handling
  • MFC r305074-r305075, r327275, r327570: newfs_msdos updates
  • MFC r342792, r342805: Provide rc_service variable for rc service scripts


kib (12):

  • MFC r342380: Properly test for vmio buffer in bnoreuselist().
  • MFC r342381: Allocate v_object for the new snapshot vnode.
  • MFC r342595: For hw.{physmem,realmem,usermem} MIBs, clamp instead of truncating.
  • MFC r342630: Add 'v' modifier to the ddb 'show pginfo' command to display vm_page backing the provided kernel virtual address.
  • MFC r342625, r342631: Use IDX_TO_OFF().
  • MFC r342627: Implement zap_vma_ptes() for managed device objects.
  • MFC r342628, r342670 (by cem): Fix linux_destroy_dev() behaviour when there are still files open from the destroying cdev.
  • MFC r342767: x86: Report per-cpu IPI TLB shootdown generation in ddb 'show pcpu' output.
  • MFC r342769, r342775: i386: Use atomic 64bit load to read PDE value from PAE pagetables in pmap_kextract().
  • MFC r342823: Clamp tuklib_physmem() return value to SIZE_T_MAX.
  • MFC r342826: Fix use of busdma(9) KPI in ahci(4).
  • MFC r342853: Add a tunable which changes mincore(2) algorithm to only report data from the local mapping.


kp (3):

  • MFC r341833:
  • MFC r341998:
  • MFC r342784:


marius (1):

  • MFC: r336610 (partial), r339207, r339267


markj (5):

  • MFC r342086: Add support for the nForce MCP89 adapter.
  • MFC r342182: Remove UMS support code from radeonkms.
  • MFC r342686: Avoid setting PG_U unconditionally in pmap_enter_quick_locked().
  • MFC r342888: Complete the removal of obsolete ioctl handlers.
  • MFC r342787: Add a bounds check to the tws(4) passthrough ioctl handler.


mckusick (2):

  • MFC of 342548
  • MFC of 342135 and 342290


mm (1):

  • MFC r339746,339751,339794,340866,340939,342042: Sync libarchive with vendor.


mr (1):

  • Merge forgotten r318577 to close PR.


philip (1):

  • MFC r342613: Import tzdata 2018h MFC r342644: Import tzdata 2018i


rmacklem (2):

  • MFC: r342286 Fix the NFSv4 server to obey vfs.nfsd.nfs_privport.
  • Add an UPDATING entry for r342562.


vmaffione (8):

  • MFC r342299
  • MFC r342300
  • MFC r342368, r342369
  • MFC r342649, r342650
  • MFC r342650
  • MFC r342737
  • MFC r342885
  • MFC r342886

Uploads: