HardenedBSD-11-STABLE-v1100056.12 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

Highlights:

• MFC r305074-r305075, r327275, r327570: newfs_msdos updates (5c2dc4965571d306fec98cc07f59e3d9b0770f35)
• MFC r342640: Ensure buffer is nul-terminated. (a5529f8274c6e262a96221ef07ceb11e0e0639bc)
• MFC r342966: net80211: fix possible panic for some drivers after r342464 (d72ddcc7912e0b3078dcd31123a58ae3e5ab1014)
• MFC r342883: net80211: fix panic when device is removed during initialization (7f8b81b93a714b7a8807d32e1bde933651f70f97)
• MFC r342810: powerd(8): allow to force a method of battery state query (48d38e36ce7fd50398514fe106ae73ff57d84b0d)
• MFC r342787: Add a bounds check to the tws(4) passthrough ioctl handler. (5a404946700fc485ddc81aa41a97bbe6333ac014)
• MFC r342686: Avoid setting PG_U unconditionally in pmap_enter_quick_locked(). (6b926a8ea46f4dfac7d8d6d9a311de9ecd9bdcf7)
• MFC r342362-r342363: config(8) duplicate option handling (0368474a6a610d15c7de92010fde161d9e465180)
• MFC 339899: Make battery emptying rate available as sysctl variable. (6bb14494cc5721af5f373f1f6f82225e41c7d935)
• MFC: r342286 Fix the NFSv4 server to obey vfs.nfsd.nfs_privport (4b9098849df19a547ce70e31e6bd5975a27abc03)
• MFC r341998: pf: Fix endless loop on NAT exhaustion with sticky-address (955c6a36425f6f83bc210ca3178b73219555a550)
• MFC r342211: net80211: fix out-of-bounds read in ieee80211_amrr(9) (a94de320dbe8ed631d21535fd5a797f757d3bb08)
• MFC r339746,339751,339794,340866,340939,342042: Sync libarchive with vendor. (250ab274d51bec04e50452ba7196798e4336897f)
• MFC r333352 & r342183: Update sqlite3-3.23.1 --> sqlite3-3.26.0 (3260000)
• ZFS updates
• sfxge updates
• mrsas updates
• netmap updates

Installer images:
http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/IS...

CHECKSUM.SHA512:

SHA512 (HardenedBSD-11-STABLE-v1100056.12-amd64-bootonly.iso) = 56ecd76d13f1dc47414681137fd2dfac2172c0fc2705d25eb4120adac5a60159f97e442d0bc0f45a52feef5c76f208f5d38dab569f48ecc57cf3e74d7b2ae543
SHA512 (HardenedBSD-11-STABLE-v1100056.12-amd64-disc1.iso) = 0b9440b1f6df1dd70601555d00135bfe6bb9fe3ac1ec2e079675dd6be3683710a994f1715c8e113a8aecf896e0ff218f6bae35bc596247854096a526bd0219e7
SHA512 (HardenedBSD-11-STABLE-v1100056.12-amd64-memstick.img) = eea300215730ea9cac2ebdeb6221116bae4b93ea0e5be6e86ceeadc3eb89918eb0d6b41d250bc4d3ee9f8206ee41f9228ca79e9a3bd0ce1712b122004fc54869
SHA512 (HardenedBSD-11-STABLE-v1100056.12-amd64-mini-memstick.img) = e913c02d3c9bcdb1274ceaba7e43a1abf422ebefa6a4d9915c02df1c36a1238748ff296266878e8ce3a1397ee69ed2a383a0123e54f1cacf5033714b9e68c883

CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----
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=RgXk
-----END PGP SIGNATURE-----


Changelog:

Oliver Pinter (1):


• HBSD: bump copyright year to 2019

Oliver Pinter + (46):

• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
• Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master

ae (1):

• MFC r342298: Allow use underscores and dots in service names without escaping.

arybchik (55):

• MFC r312866
• MFC r312867
• MFC r312868
• MFC r312883
• MFC r312884
• MFC r312885
• MFC r340767
• MFC r340797
• MFC r340798
• MFC r340800
• MFC r340796
• MFC r340800
• MFC r340801
• MFC r340802
• MFC r340803
• MFC r340804
• MFC r340805
• MFC r340806
• MFC r340814
• MFC r340822
• MFC r340826
• MFC r340831
• MFC r340833
• MFC r340875
• MFC r340883
• MFC r340884
• MFC r340885
• MFC r340886
• MFC r340887
• MFC r340888
• MFC r340889
• MFC r340890
• MFC r340891
• MFC r340892
• MFC r340894
• MFC r340895
• MFC r340896
• MFC r341038
• MFC r341197
• MFC r341213
• MFC r341214
• MFC r341215
• MFC r341290
• MFC r341295
• MFC r341297
• MFC r341301
• MFC r341302
• MFC r341309
• MFC r341311
• MFC r341326
• MFC r341327
• MFC r341782
• MFC r341783
• MFC r341784
• MFC r341785

avg (8):

• MFC r341681: daprobedone: announce if a disk is write-protected
• MFC r342204: cyapa.4, isl.4: cross-reference and document use of chromebook_platform(4)
• MFC r342072: ichwd: add support for clearing No Reboot bit in TCOv4
• MFC r342073: ichwd: add Sunrise Point-LP ID
• MFC r342193: ichwd: add a few assertions about tco_version
• MFC r342169: add a knob that disables detection of write protected disks
• MFC r342541: MFV r342532: 5882 Temporary pool names
• MFC r342525: MFV r342469: 9630 add lzc_rename and lzc_destroy to libzfs_core

avos (5):

• MFC r342185: iwi(4): do not leak node reference when IWI_FLAG_ASSOCIATED flag is set.
• MFC r342211: net80211: fix out-of-bounds read in ieee80211_amrr(9)
• MFC r342810: powerd(8): allow to force a method of battery state query
• MFC r342883: net80211: fix panic when device is removed during initialization
• MFC r342966: net80211: fix possible panic for some drivers after r342464

cy (8):

• MFC r333352 & r342183:
• MFC r342374:
• MFC r341279:
• MFC r342377:
• MFC r342547:
• MFC r342385:
• MFC r342596:
• MFC r342605:

dab (2):

• MFC r342171:
• MFC r342218:

delphij (4):

• MFC r333391 (imp): Remove 'All Rights Reserved' from the collection copyright and templates.
• MFC r342661: Happy New Year 2019!
• MFC r342614, r342633
• MFC r342640: Ensure buffer is nul-terminated.

dim (1):

• Pull in r329671 from upstream clang trunk (by Akira Hatanaka):

emaste (1):

• MFC r342575, r342580: ar: detect and error out on 32-bit symbol table overflow

eugen (3):

• MFC r342141: periodic/weekly/340.noid: do not use sysrc(8) that depends on bsdinstall(8) and may be non-functional for system built WITHOUT_BSDINSTALL. (*)
• MFC r342367: ifconfig.8, lagg.4: fix documentation bug: -use_flowid needs to be used to force local hash computation and disable usage of RSS hash provided by driver.
• MFC r340617,341006: unbreak ng_source(4) for 64-bit platforms

fsu (1):

• MFC r342933: Fix errno values returned from DUMMY_XATTR linuxulator calls

gjb (2):

• Document SA-18:15, EN-18:16, EN-18:17, EN-18:18.
• Document EN-19:03-05.

hselasky (2):

• MFC r342456: Fix reading of USB sample rate descriptor for SPL Crimson Rev 1.
• MFC r342549: Add USB quirk for SPL Crimson Rev 1.

jhb (10):

• MFC 340304: Use tcp_state_change() in the cxgbe(4) TOE module.
• MFC 340441: Revert r332735 and fix MSI-X to properly fail allocations when full.
• MFC 340460: Convert the number of MSI IRQs on x86 from a constant to a tunable.
• MFC 341800: Don't report stale signal information in ptrace_lwpinfo.
• MFC 339620: Add a "live" mode to ktrdump.
• MFC 341802: Validate the string size parameter passed to -s.
• MFC 339894: Teach procstat -x about the AT_EHDRFLAGS ELF auxiliary vector.
• MFC 339899: Make battery emptying rate available as sysctl variable.
• MFC 340021: Assert that reclaim_tx_descs() is always making forward progress.
• MFC 340022: Add support for port unit wiring to cxgbe(4).

jilles (2):

• MFC r342816: thr_wake(2): Minor mdoc fixes
• MFC r342817: getconf(1): Minor mdoc fix

kadesai (3):

• MFC r342059-r342069
• MFC r342079 Compilation failure on ppc and mips due to Revision 342066. Adding extra memset on chain frame.
• MFC r342537-r342540

kevans (5):

• MFC r342362-r342363: config(8) duplicate option handling
• Revert r342807, mistakenly including libbe(3)/bectl(8) MFC
• MFC r342362-r342363: config(8) duplicate option handling
• MFC r305074-r305075, r327275, r327570: newfs_msdos updates
• MFC r342792, r342805: Provide rc_service variable for rc service scripts

kib (12):

• MFC r342380: Properly test for vmio buffer in bnoreuselist().
• MFC r342381: Allocate v_object for the new snapshot vnode.
• MFC r342595: For hw.{physmem,realmem,usermem} MIBs, clamp instead of truncating.
• MFC r342630: Add 'v' modifier to the ddb 'show pginfo' command to display vm_page backing the provided kernel virtual address.
• MFC r342625, r342631: Use IDX_TO_OFF().
• MFC r342627: Implement zap_vma_ptes() for managed device objects.
• MFC r342628, r342670 (by cem): Fix linux_destroy_dev() behaviour when there are still files open from the destroying cdev.
• MFC r342767: x86: Report per-cpu IPI TLB shootdown generation in ddb 'show pcpu' output.
• MFC r342769, r342775: i386: Use atomic 64bit load to read PDE value from PAE pagetables in pmap_kextract().
• MFC r342823: Clamp tuklib_physmem() return value to SIZE_T_MAX.
• MFC r342826: Fix use of busdma(9) KPI in ahci(4).
• MFC r342853: Add a tunable which changes mincore(2) algorithm to only report data from the local mapping.

kp (3):

• MFC r341833:
• MFC r341998:
• MFC r342784:

marius (1):

• MFC: r336610 (partial), r339207, r339267

markj (5):

• MFC r342086: Add support for the nForce MCP89 adapter.
• MFC r342182: Remove UMS support code from radeonkms.
• MFC r342686: Avoid setting PG_U unconditionally in pmap_enter_quick_locked().
• MFC r342888: Complete the removal of obsolete ioctl handlers.
• MFC r342787: Add a bounds check to the tws(4) passthrough ioctl handler.

mckusick (2):

• MFC of 342548
• MFC of 342135 and 342290

mm (1):

• MFC r339746,339751,339794,340866,340939,342042: Sync libarchive with vendor.

mr (1):

• Merge forgotten r318577 to close PR.

philip (1):

• MFC r342613: Import tzdata 2018h MFC r342644: Import tzdata 2018i

rmacklem (2):

• MFC: r342286 Fix the NFSv4 server to obey vfs.nfsd.nfs_privport.
• Add an UPDATING entry for r342562.

vmaffione (8):

• MFC r342299
• MFC r342300
• MFC r342368, r342369
• MFC r342649, r342650
• MFC r342650
• MFC r342737
• MFC r342885
• MFC r342886