aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Change the current working directory to be inside the jail created byreleng/7.2Colin Percival2010-05-275-5/+20
| | | | | | | | | | | | | | | | | the jail(8) command. [10:04] Fix a one-NUL-byte buffer overflow in libopie. [10:05] Correctly sanity-check a buffer length in nfs mount. [10:06] Approved by: so (cperciva) Approved by: re (kensmith) Security: FreeBSD-SA-10:04.jail Security: FreeBSD-SA-10:05.opie Security: FreeBSD-SA-10:06.nfsclient Notes: svn path=/releng/7.2/; revision=208586
* MFC r197223: Fix a deadlock in the ULE scheduler.Colin Percival2010-02-273-10/+19
| | | | | | | | Approved by: so (cperciva) Errata: FreeBSD-EN-10:02.sched_ule Notes: svn path=/releng/7.2/; revision=204409
* Fix BIND named(8) cache poisoning with DNSSEC validation.Simon L. B. Nielsen2010-01-0610-49/+149
| | | | | | | | | | | | | | | | | | | [SA-10:01] Fix ntpd mode 7 denial of service. [SA-10:02] Fix ZFS ZIL playback with insecure permissions. [SA-10:03] Various FreeBSD 8.0-RELEASE improvements. [EN-10:01] Security: FreeBSD-SA-10:01.bind Security: FreeBSD-SA-10:02.ntpd Security: FreeBSD-SA-10:03.zfs Errata: FreeBSD-EN-10:01.freebsd Approved by: so (simon) Notes: svn path=/releng/7.2/; revision=201679
* Bump the patch level in the kernel version number, which wasSimon L. B. Nielsen2009-12-031-1/+1
| | | | | | | | | | accidentally left out of main commit for SA-09:15, SA-09:15, and SA-09:17 in r200054. Approved by: so (simon) Notes: svn path=/releng/7.2/; revision=200057
* Disable SSL renegotiation in order to protect against a seriousColin Percival2009-12-037-11/+31
| | | | | | | | | | | | | | | | | | protocol flaw. [09:15] Correctly handle failures from unsetenv resulting from a corrupt environment in rtld-elf. [09:16] Fix permissions in freebsd-update in order to prevent leakage of sensitive files. [09:17] Approved by: so (cperciva) Security: FreeBSD-SA-09:15.ssl Security: FreeBSD-SA-09:16.rtld Security: FreeBSD-SA-09:17.freebsd-udpate Notes: svn path=/releng/7.2/; revision=200054
* MFC r197711 (partial) to 6.x and 7.x:Simon L. B. Nielsen2009-10-024-4/+19
| | | | | | | | | | | | | | | | | | | | | | | - Add no zero mapping feature, disabled by default. [EN-09:05] MFC 178913,178914,179242,179243,180336,180340 to 6.x: - Fix kqueue pipe race conditions. [SA-09:13] MFC r192301 to 7.x; 6.x has slightly different fix: - Fix devfs / VFS NULL pointer race condition. [SA-09:14] Security: FreeBSD-SA-09:13.pipe Security: FreeBSD-SA-09:14.devfs Errata: FreeBSD-EN-09:05.null Submitted by: kib [SA-09:13] [SA-09:14] Submitted by: bz [EN-09:05] In collaboration with: jhb, kib, alc [EN-09:05] Approved by: so (simon) Notes: svn path=/releng/7.2/; revision=197715
* Fix BIND named(8) dynamic update message remote DoS.Simon L. B. Nielsen2009-07-293-2/+9
| | | | | | | | | | Obtained from: ISC Security: FreeBSD-SA-09:12.bind Security: CVE-2009-0696 Approved by: so (simon) Notes: svn path=/releng/7.2/; revision=195935
* MFS r192477: Fix packet length calculation in bce(4). [EN-09:02]Colin Percival2009-06-245-13/+52
| | | | | | | | | | | | | | | | MFS r191867: Correctly set IP packet length for TSO in fxp(4). [EN-09:03] MFS r191767: Fix a lock order reversal bug that could cause deadlock during fork(2). [EN-09:04] Submitted by: re (kensmith) Approved by: so (cperciva) Errata: FreeBSD-SA-09:02.bce Errata: FreeBSD-SA-09:03.fxp Errata: FreeBSD-SA-09:04.fork Notes: svn path=/releng/7.2/; revision=194808
* Prevent integer overflow in direct pipe write code from circumventingColin Percival2009-06-105-19/+35
| | | | | | | | | | | | | | | | | virtual-to-physical page lookups. [09:09] Add missing permissions check for SIOCSIFINFO_IN6 ioctl. [09:10] Fix buffer overflow in "autokey" negotiation in ntpd(8). [09:11] Approved by: so (cperciva) Approved by: re (not really, but SVN wants this...) Security: FreeBSD-SA-09:09.pipe Security: FreeBSD-SA-09:10.ipv6 Security: FreeBSD-SA-09:11.ntpd Notes: svn path=/releng/7.2/; revision=193893
* Get ready for 7.2-RELEASE builds.release/7.2.0Ken Smith2009-05-011-1/+1
| | | | | | | | Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191714 svn path=/release/7.2.0/; revision=191715; tag=release/7.2.0
* Predict announcement day for 7.2-RELEASE.Ken Smith2009-05-011-0/+3
| | | | | | | Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191713
* Merge r191705 change in the English version.Hiroki Sato2009-04-301-10/+12
| | | | | | | | Submitted by: delphij Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191706
* Revise entry for superpages.Hiroki Sato2009-04-301-9/+10
| | | | | | | | Suggested by: rwatson Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191705
* Sync with English revisions.Xin LI2009-04-305-507/+1037
| | | | | | | Approved by: re (hrs) Notes: svn path=/releng/7.2/; revision=191680
* Various wording/grammar fixes.Hiroki Sato2009-04-291-122/+132
| | | | | | | | Suggested by: keramida Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191669
* - Update entries for increased KVA on amd64 and superpages onHiroki Sato2009-04-291-20/+52
| | | | | | | | | | | | | | | amd64/i386[1] - BTX loader improved[2] - Move sysctl node MPSAFE flag to the kernel section[3] - u3g(4) added[4] - Various grammer fixes[5] - MAKE_JOBS_SAFE added in bsd.port.mk. Suggested by: ivoras[1], gavin[2], kib[3], edwin[4], and schweikh[5]. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191667
* Fix a typo.Hiroki Sato2009-04-291-1/+1
| | | | | | | | Spotted by: pluknet at gmail.com Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191650
* Fix a typo.Hiroki Sato2009-04-291-2/+2
| | | | | | | Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191649
* - Updare release notes:Hiroki Sato2009-04-291-50/+56
| | | | | | | | | | | | | | | | | | | | | | | | | | | currently jail+cpuset allows superuser inside the jail to change the CPU bindings, atkbd(4) + kbdmux(4) duplicated/missing chars issue on MP systems fixed, ULE machdep.hyperthreading_enabled support, bce(4) update, cxgb(4) update, ixgbe(4) update, a typo fix: s/<varname>/<replaceable>/, ata(4) nForce MCP67/MCP73 support improved, GEOM label UFS ID support, GEOM journal rootfs support, hptmv(4) updated, twa(4) 64-bit DMA support, fsck -C (check clean mode) support, getaddrinfo(3) SCTP support, make(1) -p, -Q, ${.MAKE.JOB.PREFIX}, ${.MAKE.PID} added, and mount(8) -o mountprog=/foo added. - Various grammer and order fixes. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191647
* Updare release notes:Hiroki Sato2009-04-291-6/+88
| | | | | | | | | | | | | | | | | | | | | | | | | currently jail+cpuset allows superuser inside the jail to change the CPU bindings, atkbd(4) + kbdmux(4) duplicated/missing chars issue on MP systems fixed, ULE machdep.hyperthreading_enabled support, bce(4) update, cxgb(4) update, ixgbe(4) update, a typo fix: s/<varname>/<replaceable>/, ata(4) nForce MCP67/MCP73 support improved, GEOM label UFS ID support, GEOM journal rootfs support, hptmv(4) updated, twa(4) 64-bit DMA support, fsck -C (check clean mode) support, getaddrinfo(3) SCTP support, make(1) -p, -Q, ${.MAKE.JOB.PREFIX}, ${.MAKE.PID} added, and mount(8) -o mountprog=/foo added. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191646
* Update release notes:Hiroki Sato2009-04-281-2/+23
| | | | | | | | | | | schizo driver on sparc64, txp(4) various improvements, tap(4) SIOSIFMTU support. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191614
* Update release notes:Hiroki Sato2009-04-271-6/+86
| | | | | | | | | | | | | | | | | | | | | | | | | DDB show mount added, sparc64 US III support, DRM r600/r700, ae(4) WoL support, hardware MAC stats: cxgb(4), msk(4), nfe(4), re(4) hw.re.prefer_iomap, sis(4) VLAN tagging bugfix, txp(4) update, TCP MD5 signature option for IPv6, gpart(8) updated; APM and EBR scheme support, mpt(4) in GENERIC on sparc64, vfs.nfs.prime_access_cache for NFSv3, ncal(1) multibyte support, csup CVSMode support, du(1) -A and -B option added, makefs(8) added, and mergemaster(8) -F option added. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191602
* Document an issue of jail(8) in conjunction with cpuset(1).Christian Brueffer2009-04-272-0/+12
| | | | | | | | | Problem reported by: Miroslav Lachman <000.fbsd@quip.cz> Reviewed by: bz Approved by: re (kib) Notes: svn path=/releng/7.2/; revision=191598
* Add -C back.Xin LI2009-04-274-11/+24
| | | | | | | Approved by: re (kensmith) Notes: svn path=/releng/7.2/; revision=191588
* Add a missing space and remove a superfluous char.Marc Fonvieille2009-04-261-2/+2
| | | | | | | Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191530
* Update release note:Hiroki Sato2009-04-261-1/+58
| | | | | | | | | | | | | | | | | | | type of shm_segsz in struct shmid_ds to size_t from int, AltiVec support on powerpc, INTx disabled when MSI/MSIX enabled, sysctl leaf node now has an MPSAFE flag, hw.drm.msi tunable added, ale(4) in GENERIC on amd64 and i386, ata-raid(4) initial support for DDF metadata, cam(4) kern.cam.cd.retry_count sysctl, ciss(4) max device openings count fix, btpand(8) for NAP, GN, PANU profiles of bluetooth added, and improve description of the fetch(1) If-Modified-Since support. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191523
* Update release note:Hiroki Sato2009-04-261-7/+204
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | jail improvements: IPv4, IPv6, no address support, SCTP fix, cpuset(1) support, ddb show jails, version number bump, KTR_CALLOUT new tracepoint added, Superpages on amd64 and i386, acpu_asus(4) Asus A8Sr support added, axe(4) reduced csw for better performance, fxp(4) improvements including checksum offload, TSO, WoL, and VLAN, msk(4) hang up issue due to misalignment workaround, mxge(4) newer hardware support and media types, re(4) better miibus interaction support, rl(4) better miibus interaction support and fixes for >4GB system, IPv4 source address selection, tap(4) TAPGIFNAME ioctl added, unix(4) MPSAFE, sdhci(4) kernel dump support, EA semantics of [am]time update changed, atacontrol(8) minor nits fixed, dirname(1) multiple arguments support, dumpfs(8) -f flag added, fsck(8) s/-C/-D/, ln(1) -w flag added, netstat(1) unix sockets stats in -L flag, pciconf(8) -b flag added, and stat(1) octal s[gu]id in -x flag. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191522
* Update release notes:Hiroki Sato2009-04-261-1/+37
| | | | | | | | | | | | | | | | FREEBSD32 syscall translation layer now supports addition/removal of syscall from kernel module, VFS_AIO syscalls added to FREEBSD32, ktr(4) new tracepoint for callout added, cpufreq(4) hw.est.msr_info added, kern.timecounter.invariant_tsc for i386 and amd64 added, vfs.lookup_shared improvement and removal of LOOKUP_SHARED option, and netstat(1) -ss for icmp6 section fixed. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191521
* s/&os:/&os;/ wrongly added by myself (damn it builded fine even with theMarc Fonvieille2009-04-261-1/+1
| | | | | | | | | | wrong version:( ) Submitted by: marius Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191519
* Update release notes:Hiroki Sato2009-04-261-1/+47
| | | | | | | | | | | | | | | | | amd64 KVA space to 6GB, variable reference in loader(8) script fixed, debug.batt.batt_sleep_ms added, snd_au88x0(4) removed, typo in igb(4) hw.igb.ave_latency fixed, gvinum plex access permission issue fixed, du(1) -l flag added, "netstat -m -N foo" issue fixed, and wc(1) -L flag added. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191515
* - Add/usr trademarks for Windows;Marc Fonvieille2009-04-261-6/+7
| | | | | | | | | - Various typo fixes. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191514
* MFC:Marc Fonvieille2009-04-261-3/+3
| | | | | | | | | | | | | | r191509: Unbreak the build of relnotes. r191511: Bump copyright year; Add missing colon and fix broken entity. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191513
* Update release note:Hiroki Sato2009-04-261-3/+24
| | | | | | | | | | | | | | | | boot0 volume ID and F6 PXE invoke support, DHCP options via kenv, cpuctl(4) added, ciphy(4) VSC8211 support, jme(4) newer JMC250/260 support, rl(4) improved, ata(4) Marvell PATA M88SX6121 support, and config(8) multiple makeoption support. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191505
* Update release note:Hiroki Sato2009-04-251-13/+70
| | | | | | | | | | | | | | | | | | | | | | agp(4) Intel G4X support, DRM update, snd_hda(4) update, jail(8) FIB support, ng_netflow(4) egress netflow support, mmc(4) and mmcsd(4) improved, sdhci(4) added, mmc(4), mmcsd(4), and sdhci(4) as kernel module, fetch(1) -i flag, fsck(8) -C flag, ipfw(8) -q flag fixed, powerd(8) improved, rpc.yppasswdd(8) zombie process issue fixed, and pkg_create(1) -n fixed. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191503
* MFC: r191491, r191492Marius Strobl2009-04-251-14/+63
| | | | | | | | | | Sync the sparc64 hardware notes with reality, mainly regarding support of sun4u-machines based on USIII and beyond in 7.2-RELEASE. Approved by: re (blackend) Notes: svn path=/releng/7.2/; revision=191502
* - Use arch="" attr instead of literal [&arch.xxx;].Hiroki Sato2009-04-251-125/+127
| | | | | | | | | | - Bump copyright year. - Delete trailing whitespaces. Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191499
* Add &release.next;.Hiroki Sato2009-04-251-4/+2
| | | | | | | Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191497
* Bump version number for 7.2.Hiroki Sato2009-04-251-1/+1
| | | | | | | Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191496
* Trim errata document for 7.2.Hiroki Sato2009-04-251-181/+2
| | | | | | | Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191495
* Small attempt to update a bit relnotes:Marc Fonvieille2009-04-251-2/+17
| | | | | | | | | | | | ISC BIND 9.4.3-P2 timezone database tzdata2009f GNOME 2.26 KDE 4.2.2 Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191493
* Add following Security Advisories:Marc Fonvieille2009-04-251-1/+83
| | | | | | | | | | | | | | | | SA-09:01.lukemftpd SA-09:02.openssl SA-09:03.ntpd SA-09:04.bind SA-09:05.telnetd SA-09:06.ktimer SA-09:07.libc SA-09:08.openssl Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191489
* Remove footer belonging to -STABLE versionMarc Fonvieille2009-04-251-11/+0
| | | | | | | Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191488
* Update various entities required by release notes.Marc Fonvieille2009-04-251-12/+9
| | | | | | | Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191487
* Remove old (unmaintained) translations.Marc Fonvieille2009-04-25234-41095/+0
| | | | | | | Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191486
* Merge r191434 from stable/7 to releng/7.2:Robert Watson2009-04-231-3/+1
| | | | | | | | | | | | | | | | | | | | In sysctl_ifdata(), query the ifnet pointer using the index only once, rather than querying it, validating it, and then re-querying it without validating it. This may avoid a NULL pointer dereference and resulting kernel page fault if an interface is being deleted while bsnmp or other tools are querying data on the interface. The full fix, to properly refcount the interface for the duration of the sysctl, is in 8.x, but is considered too high-risk for 7.2, so instead will appear in 7.3 (if all goes well). Reported by: mdtancsa Approved by: re (kensmith) Notes: svn path=/releng/7.2/; revision=191435
* MFC r191414Christian Brueffer2009-04-2310-10/+10
| | | | | | | | | | Correct the information about when the respective functionality first appeared in FreeBSD. Approved by: re (kensmith) Notes: svn path=/releng/7.2/; revision=191427
* Adjust for the 7.2-RELEASE package set.Ken Smith2009-04-231-9/+9
| | | | | | | Approved by: re (kib) Notes: svn path=/releng/7.2/; revision=191420
* MFC r190822Christian Brueffer2009-04-231-1/+1
| | | | | | | | | Move an "end list" macro to the right place. Approved by: re (kensmith) Notes: svn path=/releng/7.2/; revision=191413
* Get ready for 7.2-RC2 builds.Ken Smith2009-04-231-1/+1
| | | | | | | Approved by: re (implicit) Notes: svn path=/releng/7.2/; revision=191411
* Merge 191274.Robert Noland2009-04-221-19/+22
| | | | | | | | | | | | Don't try to setup interrupts for drivers that don't support them. This causes sis and probably a couple of other driver to panic and fail. Tested by: cpghost <cpghost@cordula.ws> Approved by: re (kib) Notes: svn path=/releng/7.2/; revision=191406