From owner-dev-commits-doc-all@freebsd.org Wed Dec 9 18:26:17 2020
Return-Path:
Delivered-To: dev-commits-doc-all@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
by mailman.nyi.freebsd.org (Postfix) with ESMTP id 7BE9E4ABFD3
for ;
Wed, 9 Dec 2020 18:26:17 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org
[IPv6:2610:1c1:1:606c::19:3])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
client-signature RSA-PSS (4096 bits) client-digest SHA256)
(Client CN "mxrelay.nyi.freebsd.org",
Issuer "Let's Encrypt Authority X3" (verified OK))
by mx1.freebsd.org (Postfix) with ESMTPS id 4CrlqY38Lmz3hym;
Wed, 9 Dec 2020 18:26:17 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org (gitrepo.freebsd.org
[IPv6:2610:1c1:1:6068::e6a:5])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(Client did not present a certificate)
by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 5AE152C2C;
Wed, 9 Dec 2020 18:26:17 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org ([127.0.1.44])
by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 0B9IQHYo033404;
Wed, 9 Dec 2020 18:26:17 GMT (envelope-from git@gitrepo.freebsd.org)
Received: (from git@localhost)
by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 0B9IQHlr033403;
Wed, 9 Dec 2020 18:26:17 GMT (envelope-from git)
Date: Wed, 9 Dec 2020 15:54:32 GMT
Message-Id: <202012091554.0B9FsWNq078856@gitrepo.freebsd.org>
To: doc-committers@freebsd.org, dev-commits-doc-all@freebsd.org
From: Li-Wen Hsu
Subject: git: 3be01a4758 - Mark the repository has been converted to Git
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Git-Committer: lwhsu
X-Git-Repository: doc
X-Git-Refname: refs/heads/main
X-Git-Reftype: branch
X-Git-Commit: 3be01a475855e7511ad755b2defd2e0da5d58bbe
Auto-Submitted: auto-generated
X-BeenThere: dev-commits-doc-all@freebsd.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Commit messages for all branches of the doc repository."
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Wed, 09 Dec 2020 18:26:17 -0000
The branch main has been updated by lwhsu (ports, src committer):
URL: https://cgit.FreeBSD.org/doc/commit/?id=3be01a475855e7511ad755b2defd2e0da5d58bbe
commit 3be01a475855e7511ad755b2defd2e0da5d58bbe
Author: Li-Wen Hsu
AuthorDate: 2020-12-09 15:52:48 +0000
Commit: Li-Wen Hsu
CommitDate: 2020-12-09 15:52:48 +0000
Mark the repository has been converted to Git
This is the first Git commit to doc.
Approved by: gjb (doceng)
Sponsored by: The FreeBSD Foundation
---
README | 2 --
1 file changed, 2 deletions(-)
diff --git a/README b/README
index 6bb248b54f..4f09cd0ace 100644
--- a/README
+++ b/README
@@ -8,5 +8,3 @@ our toolchain in your own projects, please read
for information about the tools and formatting languages we use.
Chapter 1 has a Quick Start section, and Chapter 2 covers the software
and related items in more detail.
-
-This repository is being converted from Subversion to Git.
From owner-dev-commits-doc-all@freebsd.org Wed Dec 9 19:30:33 2020
Return-Path:
Delivered-To: dev-commits-doc-all@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
by mailman.nyi.freebsd.org (Postfix) with ESMTP id A0B354ADB91
for ;
Wed, 9 Dec 2020 19:30:33 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org
[IPv6:2610:1c1:1:606c::19:3])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
client-signature RSA-PSS (4096 bits) client-digest SHA256)
(Client CN "mxrelay.nyi.freebsd.org",
Issuer "Let's Encrypt Authority X3" (verified OK))
by mx1.freebsd.org (Postfix) with ESMTPS id 4CrnFj4CHkz3mYj;
Wed, 9 Dec 2020 19:30:33 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org (gitrepo.freebsd.org
[IPv6:2610:1c1:1:6068::e6a:5])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(Client did not present a certificate)
by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 8363D37E4;
Wed, 9 Dec 2020 19:30:33 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org ([127.0.1.44])
by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 0B9JUXKB006586;
Wed, 9 Dec 2020 19:30:33 GMT (envelope-from git@gitrepo.freebsd.org)
Received: (from git@localhost)
by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 0B9JUXgN006585;
Wed, 9 Dec 2020 19:30:33 GMT (envelope-from git)
Date: Wed, 9 Dec 2020 19:30:33 GMT
Message-Id: <202012091930.0B9JUXgN006585@gitrepo.freebsd.org>
To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org
From: Gordon.Tetlow@FreeBSD.org, +1-619-861-6239
Subject: git: 3bde30dfea - Add SA-20:33.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Git-Committer: gordon
X-Git-Repository: doc
X-Git-Refname: refs/heads/main
X-Git-Reftype: branch
X-Git-Commit: 3bde30dfeade63dd3ab4ec55e3a31e8b118b47f8
Auto-Submitted: auto-generated
X-BeenThere: dev-commits-doc-all@freebsd.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Commit messages for all branches of the doc repository."
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Wed, 09 Dec 2020 19:30:33 -0000
The branch main has been updated by gordon (src committer):
URL: https://cgit.FreeBSD.org/doc/commit/?id=3bde30dfeade63dd3ab4ec55e3a31e8b118b47f8
commit 3bde30dfeade63dd3ab4ec55e3a31e8b118b47f8
Author: Gordon Tetlow
AuthorDate: 2020-12-09 19:25:22 +0000
Commit: Gordon Tetlow
CommitDate: 2020-12-09 19:25:22 +0000
Add SA-20:33.
Approved by: so
---
.../advisories/FreeBSD-SA-20:33.openssl.asc | 144 ++++++++++++
share/security/patches/SA-20:33/openssl.patch | 241 +++++++++++++++++++++
share/security/patches/SA-20:33/openssl.patch.asc | 18 ++
share/xml/advisories.xml | 8 +
4 files changed, 411 insertions(+)
diff --git a/share/security/advisories/FreeBSD-SA-20:33.openssl.asc b/share/security/advisories/FreeBSD-SA-20:33.openssl.asc
new file mode 100644
index 0000000000..e5b703dcb6
--- /dev/null
+++ b/share/security/advisories/FreeBSD-SA-20:33.openssl.asc
@@ -0,0 +1,144 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-SA-20:33.openssl Security Advisory
+ The FreeBSD Project
+
+Topic: OpenSSL NULL pointer de-reference
+
+Category: contrib
+Module: openssl
+Announced: 2020-12-08
+Affects: All supported versions of FreeBSD.
+Corrected: 2020-12-08 18:28:49 UTC (stable/12, 12.2-STABLE)
+ 2020-12-08 19:10:40 UTC (releng/12.2, 12.2-RELEASE-p2)
+ 2020-12-08 19:10:40 UTC (releng/12.1, 12.1-RELEASE-p12)
+CVE Name: CVE-2020-1971
+
+Note: The OpenSSL project has published publicly available patches for
+versions included in FreeBSD 12.x. This vulnerability is also known to
+affect OpenSSL versions included in FreeBSD 11.4. However, the OpenSSL
+project is only giving patches for that version to premium support contract
+holders. The FreeBSD project does not have access to these patches and
+recommends FreeBSD 11.4 users to either upgrade to FreeBSD 12.x or leverage
+up to date versions of OpenSSL in the ports/pkg system. The FreeBSD Project
+may update this advisory to include FreeBSD 11.4 should patches become
+publicly available.
+
+For general information regarding FreeBSD Security Advisories,
+including descriptions of the fields above, security branches, and the
+following sections, please visit .
+
+I. Background
+
+FreeBSD includes software from the OpenSSL Project. The OpenSSL Project is a
+collaborative effort to develop a robust, commercial-grade, full-featured
+Open Source toolkit for the Transport Layer Security (TLS) protocol. It is
+also a general-purpose cryptography library.
+
+II. Problem Description
+
+The X.509 GeneralName type is a generic type for representing different types
+of names. One of those name types is known as EDIPartyName. OpenSSL
+provides a function GENERAL_NAME_cmp which compares different instances of a
+GENERAL_NAME to see if they are equal or not. This function behaves
+incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME.
+
+III. Impact
+
+An attacker who is able to control both items being compared can trigger a
+NULL pointer dereference and a crash may occur leading to a possible denial
+of service attack. As an example, if an attacker can trick a client of
+server to check a maliciously constructed certificate against a malicious CRL
+could trigger the NULL dereference.
+
+IV. Workaround
+
+No workaround is available.
+
+V. Solution
+
+Upgrade your vulnerable system to a supported FreeBSD stable or
+release / security branch (releng) dated after the correction date.
+
+Perform one of the following:
+
+1) To update your vulnerable system via a binary patch:
+
+Systems running a RELEASE version of FreeBSD on the i386 or amd64
+platforms can be updated via the freebsd-update(8) utility:
+
+# freebsd-update fetch
+# freebsd-update install
+
+2) To update your vulnerable system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+# fetch https://security.FreeBSD.org/patches/SA-20:33/openssl.patch
+# fetch https://security.FreeBSD.org/patches/SA-20:33/openssl.patch.asc
+# gpg --verify openssl.patch.asc
+
+b) Apply the patch. Execute the following commands as root:
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Recompile the operating system using buildworld and installworld as
+described in .
+
+Restart all daemons that use the library, or reboot the system.
+
+VI. Correction details
+
+The following list contains the correction revision numbers for each
+affected branch.
+
+Branch/path Revision
+- -------------------------------------------------------------------------
+stable/12/ r368459
+releng/12.2/ r368463
+releng/12.1/ r368463
+- -------------------------------------------------------------------------
+
+To see which files were modified by a particular revision, run the
+following command, replacing NNNNNN with the revision number, on a
+machine with Subversion installed:
+
+# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
+
+Or visit the following URL, replacing NNNNNN with the revision number:
+
+
+
+VII. References
+
+
+
+
+
+The latest revision of this advisory is available at
+
+-----BEGIN PGP SIGNATURE-----
+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+=5e1s
+-----END PGP SIGNATURE-----
diff --git a/share/security/patches/SA-20:33/openssl.patch b/share/security/patches/SA-20:33/openssl.patch
new file mode 100644
index 0000000000..b58161fddd
--- /dev/null
+++ b/share/security/patches/SA-20:33/openssl.patch
@@ -0,0 +1,241 @@
+--- crypto/openssl/crypto/asn1/asn1_err.c.orig
++++ crypto/openssl/crypto/asn1/asn1_err.c
+@@ -1,6 +1,6 @@
+ /*
+ * Generated by util/mkerr.pl DO NOT EDIT
+- * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
++ * Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License"). You may not use
+ * this file except in compliance with the License. You can obtain a copy
+@@ -49,6 +49,7 @@
+ "asn1_item_embed_d2i"},
+ {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_EMBED_NEW, 0),
+ "asn1_item_embed_new"},
++ {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_EX_I2D, 0), "ASN1_item_ex_i2d"},
+ {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_FLAGS_I2D, 0),
+ "asn1_item_flags_i2d"},
+ {ERR_PACK(ERR_LIB_ASN1, ASN1_F_ASN1_ITEM_I2D_BIO, 0), "ASN1_item_i2d_bio"},
+@@ -160,6 +161,7 @@
+ "asn1 sig parse error"},
+ {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_AUX_ERROR), "aux error"},
+ {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_BAD_OBJECT_HEADER), "bad object header"},
++ {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_BAD_TEMPLATE), "bad template"},
+ {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_BMPSTRING_IS_WRONG_LENGTH),
+ "bmpstring is wrong length"},
+ {ERR_PACK(ERR_LIB_ASN1, 0, ASN1_R_BN_LIB), "bn lib"},
+--- crypto/openssl/crypto/asn1/tasn_dec.c.orig
++++ crypto/openssl/crypto/asn1/tasn_dec.c
+@@ -182,6 +182,15 @@
+ tag, aclass, opt, ctx);
+
+ case ASN1_ITYPE_MSTRING:
++ /*
++ * It never makes sense for multi-strings to have implicit tagging, so
++ * if tag != -1, then this looks like an error in the template.
++ */
++ if (tag != -1) {
++ ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_BAD_TEMPLATE);
++ goto err;
++ }
++
+ p = *in;
+ /* Just read in tag and class */
+ ret = asn1_check_tlen(NULL, &otag, &oclass, NULL, NULL,
+@@ -199,6 +208,7 @@
+ ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_MSTRING_NOT_UNIVERSAL);
+ goto err;
+ }
++
+ /* Check tag matches bit map */
+ if (!(ASN1_tag2bit(otag) & it->utype)) {
+ /* If OPTIONAL, assume this is OK */
+@@ -215,6 +225,15 @@
+ return ef->asn1_ex_d2i(pval, in, len, it, tag, aclass, opt, ctx);
+
+ case ASN1_ITYPE_CHOICE:
++ /*
++ * It never makes sense for CHOICE types to have implicit tagging, so
++ * if tag != -1, then this looks like an error in the template.
++ */
++ if (tag != -1) {
++ ASN1err(ASN1_F_ASN1_ITEM_EMBED_D2I, ASN1_R_BAD_TEMPLATE);
++ goto err;
++ }
++
+ if (asn1_cb && !asn1_cb(ASN1_OP_D2I_PRE, pval, it, NULL))
+ goto auxerr;
+ if (*pval) {
+--- crypto/openssl/crypto/asn1/tasn_enc.c.orig
++++ crypto/openssl/crypto/asn1/tasn_enc.c
+@@ -103,9 +103,25 @@
+ return asn1_i2d_ex_primitive(pval, out, it, tag, aclass);
+
+ case ASN1_ITYPE_MSTRING:
++ /*
++ * It never makes sense for multi-strings to have implicit tagging, so
++ * if tag != -1, then this looks like an error in the template.
++ */
++ if (tag != -1) {
++ ASN1err(ASN1_F_ASN1_ITEM_EX_I2D, ASN1_R_BAD_TEMPLATE);
++ return -1;
++ }
+ return asn1_i2d_ex_primitive(pval, out, it, -1, aclass);
+
+ case ASN1_ITYPE_CHOICE:
++ /*
++ * It never makes sense for CHOICE types to have implicit tagging, so
++ * if tag != -1, then this looks like an error in the template.
++ */
++ if (tag != -1) {
++ ASN1err(ASN1_F_ASN1_ITEM_EX_I2D, ASN1_R_BAD_TEMPLATE);
++ return -1;
++ }
+ if (asn1_cb && !asn1_cb(ASN1_OP_I2D_PRE, pval, it, NULL))
+ return 0;
+ i = asn1_get_choice_selector(pval, it);
+--- crypto/openssl/crypto/err/openssl.txt.orig
++++ crypto/openssl/crypto/err/openssl.txt
+@@ -36,6 +36,7 @@
+ ASN1_F_ASN1_ITEM_DUP:191:ASN1_item_dup
+ ASN1_F_ASN1_ITEM_EMBED_D2I:120:asn1_item_embed_d2i
+ ASN1_F_ASN1_ITEM_EMBED_NEW:121:asn1_item_embed_new
++ASN1_F_ASN1_ITEM_EX_I2D:144:ASN1_item_ex_i2d
+ ASN1_F_ASN1_ITEM_FLAGS_I2D:118:asn1_item_flags_i2d
+ ASN1_F_ASN1_ITEM_I2D_BIO:192:ASN1_item_i2d_bio
+ ASN1_F_ASN1_ITEM_I2D_FP:193:ASN1_item_i2d_fp
+@@ -1771,6 +1772,7 @@
+ ASN1_R_ASN1_SIG_PARSE_ERROR:204:asn1 sig parse error
+ ASN1_R_AUX_ERROR:100:aux error
+ ASN1_R_BAD_OBJECT_HEADER:102:bad object header
++ASN1_R_BAD_TEMPLATE:230:bad template
+ ASN1_R_BMPSTRING_IS_WRONG_LENGTH:214:bmpstring is wrong length
+ ASN1_R_BN_LIB:105:bn lib
+ ASN1_R_BOOLEAN_IS_WRONG_LENGTH:106:boolean is wrong length
+--- crypto/openssl/crypto/x509v3/v3_genn.c.orig
++++ crypto/openssl/crypto/x509v3/v3_genn.c
+@@ -22,8 +22,9 @@
+ IMPLEMENT_ASN1_FUNCTIONS(OTHERNAME)
+
+ ASN1_SEQUENCE(EDIPARTYNAME) = {
+- ASN1_IMP_OPT(EDIPARTYNAME, nameAssigner, DIRECTORYSTRING, 0),
+- ASN1_IMP_OPT(EDIPARTYNAME, partyName, DIRECTORYSTRING, 1)
++ /* DirectoryString is a CHOICE type so use explicit tagging */
++ ASN1_EXP_OPT(EDIPARTYNAME, nameAssigner, DIRECTORYSTRING, 0),
++ ASN1_EXP(EDIPARTYNAME, partyName, DIRECTORYSTRING, 1)
+ } ASN1_SEQUENCE_END(EDIPARTYNAME)
+
+ IMPLEMENT_ASN1_FUNCTIONS(EDIPARTYNAME)
+@@ -57,6 +58,37 @@
+ (char *)a);
+ }
+
++static int edipartyname_cmp(const EDIPARTYNAME *a, const EDIPARTYNAME *b)
++{
++ int res;
++
++ if (a == NULL || b == NULL) {
++ /*
++ * Shouldn't be possible in a valid GENERAL_NAME, but we handle it
++ * anyway. OTHERNAME_cmp treats NULL != NULL so we do the same here
++ */
++ return -1;
++ }
++ if (a->nameAssigner == NULL && b->nameAssigner != NULL)
++ return -1;
++ if (a->nameAssigner != NULL && b->nameAssigner == NULL)
++ return 1;
++ /* If we get here then both have nameAssigner set, or both unset */
++ if (a->nameAssigner != NULL) {
++ res = ASN1_STRING_cmp(a->nameAssigner, b->nameAssigner);
++ if (res != 0)
++ return res;
++ }
++ /*
++ * partyName is required, so these should never be NULL. We treat it in
++ * the same way as the a == NULL || b == NULL case above
++ */
++ if (a->partyName == NULL || b->partyName == NULL)
++ return -1;
++
++ return ASN1_STRING_cmp(a->partyName, b->partyName);
++}
++
+ /* Returns 0 if they are equal, != 0 otherwise. */
+ int GENERAL_NAME_cmp(GENERAL_NAME *a, GENERAL_NAME *b)
+ {
+@@ -66,8 +98,11 @@
+ return -1;
+ switch (a->type) {
+ case GEN_X400:
++ result = ASN1_TYPE_cmp(a->d.x400Address, b->d.x400Address);
++ break;
++
+ case GEN_EDIPARTY:
+- result = ASN1_TYPE_cmp(a->d.other, b->d.other);
++ result = edipartyname_cmp(a->d.ediPartyName, b->d.ediPartyName);
+ break;
+
+ case GEN_OTHERNAME:
+@@ -114,8 +149,11 @@
+ {
+ switch (type) {
+ case GEN_X400:
++ a->d.x400Address = value;
++ break;
++
+ case GEN_EDIPARTY:
+- a->d.other = value;
++ a->d.ediPartyName = value;
+ break;
+
+ case GEN_OTHERNAME:
+@@ -149,8 +187,10 @@
+ *ptype = a->type;
+ switch (a->type) {
+ case GEN_X400:
++ return a->d.x400Address;
++
+ case GEN_EDIPARTY:
+- return a->d.other;
++ return a->d.ediPartyName;
+
+ case GEN_OTHERNAME:
+ return a->d.otherName;
+--- crypto/openssl/include/openssl/asn1err.h.orig
++++ crypto/openssl/include/openssl/asn1err.h
+@@ -1,6 +1,6 @@
+ /*
+ * Generated by util/mkerr.pl DO NOT EDIT
+- * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
++ * Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved.
+ *
+ * Licensed under the OpenSSL license (the "License"). You may not use
+ * this file except in compliance with the License. You can obtain a copy
+@@ -11,9 +11,7 @@
+ #ifndef HEADER_ASN1ERR_H
+ # define HEADER_ASN1ERR_H
+
+-# ifndef HEADER_SYMHACKS_H
+-# include
+-# endif
++# include
+
+ # ifdef __cplusplus
+ extern "C"
+@@ -53,6 +51,7 @@
+ # define ASN1_F_ASN1_ITEM_DUP 191
+ # define ASN1_F_ASN1_ITEM_EMBED_D2I 120
+ # define ASN1_F_ASN1_ITEM_EMBED_NEW 121
++# define ASN1_F_ASN1_ITEM_EX_I2D 144
+ # define ASN1_F_ASN1_ITEM_FLAGS_I2D 118
+ # define ASN1_F_ASN1_ITEM_I2D_BIO 192
+ # define ASN1_F_ASN1_ITEM_I2D_FP 193
+@@ -145,6 +144,7 @@
+ # define ASN1_R_ASN1_SIG_PARSE_ERROR 204
+ # define ASN1_R_AUX_ERROR 100
+ # define ASN1_R_BAD_OBJECT_HEADER 102
++# define ASN1_R_BAD_TEMPLATE 230
+ # define ASN1_R_BMPSTRING_IS_WRONG_LENGTH 214
+ # define ASN1_R_BN_LIB 105
+ # define ASN1_R_BOOLEAN_IS_WRONG_LENGTH 106
diff --git a/share/security/patches/SA-20:33/openssl.patch.asc b/share/security/patches/SA-20:33/openssl.patch.asc
new file mode 100644
index 0000000000..c6de85f2ed
--- /dev/null
+++ b/share/security/patches/SA-20:33/openssl.patch.asc
@@ -0,0 +1,18 @@
+-----BEGIN PGP SIGNATURE-----
+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+=MbZV
+-----END PGP SIGNATURE-----
diff --git a/share/xml/advisories.xml b/share/xml/advisories.xml
index 39cc0402c0..1c246c1e9d 100644
--- a/share/xml/advisories.xml
+++ b/share/xml/advisories.xml
@@ -9,6 +9,14 @@
12
+
+ 8
+
+
+ FreeBSD-SA-20:33.openssl
+
+
+ 1
From owner-dev-commits-doc-all@freebsd.org Wed Dec 9 20:51:48 2020
Return-Path:
Delivered-To: dev-commits-doc-all@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
by mailman.nyi.freebsd.org (Postfix) with ESMTP id D7D624AF372
for ;
Wed, 9 Dec 2020 20:51:48 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org
[IPv6:2610:1c1:1:606c::19:3])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
client-signature RSA-PSS (4096 bits) client-digest SHA256)
(Client CN "mxrelay.nyi.freebsd.org",
Issuer "Let's Encrypt Authority X3" (verified OK))
by mx1.freebsd.org (Postfix) with ESMTPS id 4Crq3S5r9Kz3s23;
Wed, 9 Dec 2020 20:51:48 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org (gitrepo.freebsd.org
[IPv6:2610:1c1:1:6068::e6a:5])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(Client did not present a certificate)
by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id BBA00476B;
Wed, 9 Dec 2020 20:51:48 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org ([127.0.1.44])
by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 0B9KpmTd097034;
Wed, 9 Dec 2020 20:51:48 GMT (envelope-from git@gitrepo.freebsd.org)
Received: (from git@localhost)
by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 0B9Kpm8R097033;
Wed, 9 Dec 2020 20:51:48 GMT (envelope-from git)
Date: Wed, 9 Dec 2020 20:51:48 GMT
Message-Id: <202012092051.0B9Kpm8R097033@gitrepo.freebsd.org>
To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org
From: Glen Barber
Subject: git: 70637319d2 - website build: update scripts to use the correct
Git host.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Git-Committer: gjb
X-Git-Repository: doc
X-Git-Refname: refs/heads/main
X-Git-Reftype: branch
X-Git-Commit: 70637319d20ccb42ef783bcde0ace496e9bb1176
Auto-Submitted: auto-generated
X-BeenThere: dev-commits-doc-all@freebsd.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Commit messages for all branches of the doc repository."
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Wed, 09 Dec 2020 20:51:48 -0000
The branch main has been updated by gjb:
URL: https://cgit.FreeBSD.org/doc/commit/?id=70637319d20ccb42ef783bcde0ace496e9bb1176
commit 70637319d20ccb42ef783bcde0ace496e9bb1176
Author: Glen Barber
AuthorDate: 2020-12-09 20:47:05 +0000
Commit: Glen Barber
CommitDate: 2020-12-09 20:51:42 +0000
website build: update scripts to use the correct Git host.
Sponsored by: Rubicon Communications, LLC (netgate.com)
---
share/tools/webupdate | 2 +-
share/tools/webupdate.wrapper | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/share/tools/webupdate b/share/tools/webupdate
index 8c310f4f8b..681aab4f85 100755
--- a/share/tools/webupdate
+++ b/share/tools/webupdate
@@ -47,7 +47,7 @@
#
DEFAULT_PATH=/bin:/usr/bin:/usr/local/bin;
DEFAULT_SVNROOT=svn://svn.FreeBSD.org
-DEFAULT_GITROOT=https://cgit-beta.FreeBSD.org
+DEFAULT_GITROOT=https://git.FreeBSD.org
DEFAULT_BUILDDIR=/usr/local/www/build;
#DEFAULT_LOGDIR=/usr/local/www/build/log;
DEFAULT_LOGDIR=/usr/local/www/logs/build;
diff --git a/share/tools/webupdate.wrapper b/share/tools/webupdate.wrapper
index f9d84ec3aa..9021b67a01 100755
--- a/share/tools/webupdate.wrapper
+++ b/share/tools/webupdate.wrapper
@@ -9,7 +9,7 @@
PATH=/bin:/usr/bin:/usr/local/bin
SVNROOT=svn://svn.FreeBSD.org
-GITROOT=https://cgit-beta.FreeBSD.org
+GITROOT=https://git.FreeBSD.org
PUBDIR=/usr/local/www/www.freebsd.org
DESTDIR="${PUBDIR}-clean"
RSYNC_FLAGS="-avH"
From owner-dev-commits-doc-all@freebsd.org Wed Dec 9 21:24:45 2020
Return-Path:
Delivered-To: dev-commits-doc-all@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
by mailman.nyi.freebsd.org (Postfix) with ESMTP id BEC254B03B3
for ;
Wed, 9 Dec 2020 21:24:45 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org
[IPv6:2610:1c1:1:606c::19:3])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
client-signature RSA-PSS (4096 bits) client-digest SHA256)
(Client CN "mxrelay.nyi.freebsd.org",
Issuer "Let's Encrypt Authority X3" (verified OK))
by mx1.freebsd.org (Postfix) with ESMTPS id 4CrqnT4nS5z3tkl;
Wed, 9 Dec 2020 21:24:45 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org (gitrepo.freebsd.org
[IPv6:2610:1c1:1:6068::e6a:5])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(Client did not present a certificate)
by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 972094FDB;
Wed, 9 Dec 2020 21:24:45 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org ([127.0.1.44])
by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 0B9LOjGs030967;
Wed, 9 Dec 2020 21:24:45 GMT (envelope-from git@gitrepo.freebsd.org)
Received: (from git@localhost)
by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 0B9LOjHL030966;
Wed, 9 Dec 2020 21:24:45 GMT (envelope-from git)
Date: Wed, 9 Dec 2020 21:24:45 GMT
Message-Id: <202012092124.0B9LOjHL030966@gitrepo.freebsd.org>
To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org
From: Glen Barber
Subject: git: e406313179 - Website build: reset fail-mail back to freebsd-doc.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Git-Committer: gjb
X-Git-Repository: doc
X-Git-Refname: refs/heads/main
X-Git-Reftype: branch
X-Git-Commit: e4063131791ddacfc4cadb9248ff0463547dac8e
Auto-Submitted: auto-generated
X-BeenThere: dev-commits-doc-all@freebsd.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Commit messages for all branches of the doc repository."
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Wed, 09 Dec 2020 21:24:45 -0000
The branch main has been updated by gjb:
URL: https://cgit.FreeBSD.org/doc/commit/?id=e4063131791ddacfc4cadb9248ff0463547dac8e
commit e4063131791ddacfc4cadb9248ff0463547dac8e
Author: Glen Barber
AuthorDate: 2020-12-09 21:24:27 +0000
Commit: Glen Barber
CommitDate: 2020-12-09 21:24:27 +0000
Website build: reset fail-mail back to freebsd-doc.
Sponsored by: Rubicon Communications, LLC (netgate.com)
---
share/tools/webupdate | 3 +--
share/tools/webupdate.wrapper | 3 +--
2 files changed, 2 insertions(+), 4 deletions(-)
diff --git a/share/tools/webupdate b/share/tools/webupdate
index 681aab4f85..ae008867c9 100755
--- a/share/tools/webupdate
+++ b/share/tools/webupdate
@@ -55,8 +55,7 @@ DEFAULT_DESTDIR=/usr/local/www;
DEFAULT_LOGFILE=webbuild.log
DEFAULT_BUILDARGS='';
DEFAULT_INSTARGS='';
-#DEFAULT_WEBMAILTO=freebsd-doc;
-DEFAULT_WEBMAILTO=gjb;
+DEFAULT_WEBMAILTO=freebsd-doc;
#
# Variable setup.
diff --git a/share/tools/webupdate.wrapper b/share/tools/webupdate.wrapper
index 9021b67a01..ab806c1a0f 100755
--- a/share/tools/webupdate.wrapper
+++ b/share/tools/webupdate.wrapper
@@ -14,8 +14,7 @@ PUBDIR=/usr/local/www/www.freebsd.org
DESTDIR="${PUBDIR}-clean"
RSYNC_FLAGS="-avH"
GEN_INDEX=yes
-#WEBMAILTO=freebsd-doc@FreeBSD.org
-WEBMAILTO=gjb@FreeBSD.org
+WEBMAILTO=freebsd-doc@FreeBSD.org
FLAGDIR=/usr/local/www/build
: ${PORTSDIR:=/usr/local/www/build/ports}; export PORTSDIR
: ${INDEXNUM:=$(make -C ${PORTSDIR} -V OSREL)}
From owner-dev-commits-doc-all@freebsd.org Thu Dec 10 17:49:31 2020
Return-Path:
Delivered-To: dev-commits-doc-all@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
by mailman.nyi.freebsd.org (Postfix) with ESMTP id E1EAB4B1773
for ;
Thu, 10 Dec 2020 17:49:31 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org
[IPv6:2610:1c1:1:606c::19:3])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
client-signature RSA-PSS (4096 bits) client-digest SHA256)
(Client CN "mxrelay.nyi.freebsd.org",
Issuer "Let's Encrypt Authority X3" (verified OK))
by mx1.freebsd.org (Postfix) with ESMTPS id 4CsLyg64msz4lbG;
Thu, 10 Dec 2020 17:49:31 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org (gitrepo.freebsd.org
[IPv6:2610:1c1:1:6068::e6a:5])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(Client did not present a certificate)
by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id C37331CBB3;
Thu, 10 Dec 2020 17:49:31 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org ([127.0.1.44])
by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 0BAHnVBe063212;
Thu, 10 Dec 2020 17:49:31 GMT (envelope-from git@gitrepo.freebsd.org)
Received: (from git@localhost)
by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 0BAHnVfM063211;
Thu, 10 Dec 2020 17:49:31 GMT (envelope-from git)
Date: Thu, 10 Dec 2020 17:49:31 GMT
Message-Id: <202012101749.0BAHnVfM063211@gitrepo.freebsd.org>
To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org
From: Glen Barber
Subject: git: d12549f3ff - Regen after r368517.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Git-Committer: gjb
X-Git-Repository: doc
X-Git-Refname: refs/heads/main
X-Git-Reftype: branch
X-Git-Commit: d12549f3ffa087cf55b58c99979751decf90f654
Auto-Submitted: auto-generated
X-BeenThere: dev-commits-doc-all@freebsd.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Commit messages for all branches of the doc repository."
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Thu, 10 Dec 2020 17:49:31 -0000
The branch main has been updated by gjb:
URL: https://cgit.FreeBSD.org/doc/commit/?id=d12549f3ffa087cf55b58c99979751decf90f654
commit d12549f3ffa087cf55b58c99979751decf90f654
Author: Glen Barber
AuthorDate: 2020-12-10 17:49:20 +0000
Commit: Glen Barber
CommitDate: 2020-12-10 17:49:20 +0000
Regen after r368517.
Sponsored by: Rubicon Communications, LLC (netgate.com)
---
en_US.ISO8859-1/htdocs/releases/11.4R/errata.html | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/en_US.ISO8859-1/htdocs/releases/11.4R/errata.html b/en_US.ISO8859-1/htdocs/releases/11.4R/errata.html
index 1b76fc06db..cd11b421fd 100644
--- a/en_US.ISO8859-1/htdocs/releases/11.4R/errata.html
+++ b/en_US.ISO8859-1/htdocs/releases/11.4R/errata.html
@@ -34,7 +34,9 @@
errata are located at https://www.FreeBSD.org/releases/, plus any
sites which keep up-to-date mirrors of this location.
Source and binary snapshots of FreeBSD 11.4-STABLE also
contain up-to-date copies of this document (as of the time of
- the snapshot).
[2020-06-11] Source-based upgrades from FreeBSD 11.2
on the i386 architecture may fail to compile
clang due to the amount of
RAM consumed.
Adding CFLAGS+=-O1 to
From owner-dev-commits-doc-all@freebsd.org Thu Dec 10 17:49:31 2020
Return-Path:
Delivered-To: dev-commits-doc-all@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
by mailman.nyi.freebsd.org (Postfix) with ESMTP id F20C84B1866
for ;
Thu, 10 Dec 2020 17:49:31 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org
[IPv6:2610:1c1:1:606c::19:3])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
client-signature RSA-PSS (4096 bits) client-digest SHA256)
(Client CN "mxrelay.nyi.freebsd.org",
Issuer "Let's Encrypt Authority X3" (verified OK))
by mx1.freebsd.org (Postfix) with ESMTPS id 4CsLyg6bNJz4lQk;
Thu, 10 Dec 2020 17:49:31 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org (gitrepo.freebsd.org
[IPv6:2610:1c1:1:6068::e6a:5])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(Client did not present a certificate)
by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id D54361CD8B;
Thu, 10 Dec 2020 17:49:31 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org ([127.0.1.44])
by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 0BAHnVVD063229;
Thu, 10 Dec 2020 17:49:31 GMT (envelope-from git@gitrepo.freebsd.org)
Received: (from git@localhost)
by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 0BAHnVTA063228;
Thu, 10 Dec 2020 17:49:31 GMT (envelope-from git)
Date: Thu, 10 Dec 2020 17:49:31 GMT
Message-Id: <202012101749.0BAHnVTA063228@gitrepo.freebsd.org>
To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org
From: Glen Barber
Subject: git: 15fbcdbe23 - Document recent SAs/ENs.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Git-Committer: gjb
X-Git-Repository: doc
X-Git-Refname: refs/heads/main
X-Git-Reftype: branch
X-Git-Commit: 15fbcdbe23ac9ac88a36c719f9640a6d1ba10c51
Auto-Submitted: auto-generated
X-BeenThere: dev-commits-doc-all@freebsd.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Commit messages for all branches of the doc repository."
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Thu, 10 Dec 2020 17:49:32 -0000
The branch main has been updated by gjb:
URL: https://cgit.FreeBSD.org/doc/commit/?id=15fbcdbe23ac9ac88a36c719f9640a6d1ba10c51
commit 15fbcdbe23ac9ac88a36c719f9640a6d1ba10c51
Author: Glen Barber
AuthorDate: 2020-12-10 17:47:50 +0000
Commit: Glen Barber
CommitDate: 2020-12-10 17:47:50 +0000
Document recent SAs/ENs.
Sponsored by: Rubicon Communications, LLC (netgate.com)
---
.../htdocs/releases/12.1R/share/xml/errata.xml | 24 +++++++++++++++++
.../htdocs/releases/12.1R/share/xml/security.xml | 22 +++++++++++++++
.../htdocs/releases/12.2R/share/xml/errata.xml | 31 +++++++++++++++++++---
.../htdocs/releases/12.2R/share/xml/security.xml | 22 ++++++++++++---
4 files changed, 93 insertions(+), 6 deletions(-)
diff --git a/en_US.ISO8859-1/htdocs/releases/12.1R/share/xml/errata.xml b/en_US.ISO8859-1/htdocs/releases/12.1R/share/xml/errata.xml
index 288c4faf54..ac0c9249d4 100644
--- a/en_US.ISO8859-1/htdocs/releases/12.1R/share/xml/errata.xml
+++ b/en_US.ISO8859-1/htdocs/releases/12.1R/share/xml/errata.xml
@@ -136,6 +136,30 @@
2 September 2020Kernel panic
+
+
+ FreeBSD-EN-20:19.audit
+ 1 December 2020
+ execve/fexecve system call
+ auditing
+
+
+
+ FreeBSD-EN-20:20.tzdata
+ 1 December 2020
+ Timezone database information
+ update
+
+
+
+ FreeBSD-EN-20:22.callout
+ 1 December 2020
+ Race condition in callout CPU
+ migration
+
diff --git a/en_US.ISO8859-1/htdocs/releases/12.1R/share/xml/security.xml b/en_US.ISO8859-1/htdocs/releases/12.1R/share/xml/security.xml
index 7ce1463bfc..17e192b1e2 100644
--- a/en_US.ISO8859-1/htdocs/releases/12.1R/share/xml/security.xml
+++ b/en_US.ISO8859-1/htdocs/releases/12.1R/share/xml/security.xml
@@ -221,6 +221,28 @@
15 September 2020Privilege escalation
+
+
+ FreeBSD-SA-20:31.icmp6
+ 1 December 2019
+ Use-after-free in error message
+ handling
+
+
+
+ FreeBSD-SA-20:32.rtsold
+ 1 December 2019
+ Multiple vulnerabilities
+
+
+
+ FreeBSD-SA-20:33.openssl
+ 8 December 2019
+ NULL pointer de-reference
+
diff --git a/en_US.ISO8859-1/htdocs/releases/12.2R/share/xml/errata.xml b/en_US.ISO8859-1/htdocs/releases/12.2R/share/xml/errata.xml
index dbbb5aa8b2..d56397b983 100644
--- a/en_US.ISO8859-1/htdocs/releases/12.2R/share/xml/errata.xml
+++ b/en_US.ISO8859-1/htdocs/releases/12.2R/share/xml/errata.xml
@@ -19,9 +19,34 @@
- No notices
-
-
+ FreeBSD-EN-20:19.audit
+ 1 December 2020
+ execve/fexecve system call
+ auditing
+
+
+
+ FreeBSD-EN-20:20.tzdata
+ 1 December 2020
+ Timezone database information
+ update
+
+
+
+ FreeBSD-EN-20:21.ipfw
+ 1 December 2020
+ Uninitialized variable
+
+
+
+ FreeBSD-EN-20:22.callout
+ 1 December 2020
+ Race condition in callout CPU
+ migration
diff --git a/en_US.ISO8859-1/htdocs/releases/12.2R/share/xml/security.xml b/en_US.ISO8859-1/htdocs/releases/12.2R/share/xml/security.xml
index 7f56a63207..8b1ad3cca9 100644
--- a/en_US.ISO8859-1/htdocs/releases/12.2R/share/xml/security.xml
+++ b/en_US.ISO8859-1/htdocs/releases/12.2R/share/xml/security.xml
@@ -19,9 +19,25 @@
- No advisories
-
-
+ FreeBSD-SA-20:31.icmp6
+ 1 December 2019
+ Use-after-free in error message
+ handling
+
+
+
+ FreeBSD-SA-20:32.rtsold
+ 1 December 2019
+ Multiple vulnerabilities
+
+
+
+ FreeBSD-SA-20:33.openssl
+ 8 December 2019
+ NULL pointer de-reference
From owner-dev-commits-doc-all@freebsd.org Thu Dec 10 18:45:08 2020
Return-Path:
Delivered-To: dev-commits-doc-all@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
by mailman.nyi.freebsd.org (Postfix) with ESMTP id 37E874B33A2
for ;
Thu, 10 Dec 2020 18:45:08 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org
[IPv6:2610:1c1:1:606c::19:3])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
client-signature RSA-PSS (4096 bits) client-digest SHA256)
(Client CN "mxrelay.nyi.freebsd.org",
Issuer "Let's Encrypt Authority X3" (verified OK))
by mx1.freebsd.org (Postfix) with ESMTPS id 4CsNBr16pxz4pjt;
Thu, 10 Dec 2020 18:45:08 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org (gitrepo.freebsd.org
[IPv6:2610:1c1:1:6068::e6a:5])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(Client did not present a certificate)
by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 1949A1D279;
Thu, 10 Dec 2020 18:45:08 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org ([127.0.1.44])
by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 0BAIj8uD028296;
Thu, 10 Dec 2020 18:45:08 GMT (envelope-from git@gitrepo.freebsd.org)
Received: (from git@localhost)
by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 0BAIj8K3028295;
Thu, 10 Dec 2020 18:45:08 GMT (envelope-from git)
Date: Thu, 10 Dec 2020 18:45:08 GMT
Message-Id: <202012101845.0BAIj8K3028295@gitrepo.freebsd.org>
To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org
From: Warner Losh
Subject: git: 7bbd7b58f8 - Remove $FreeBSD$ from my PGP key
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Git-Committer: imp
X-Git-Repository: doc
X-Git-Refname: refs/heads/main
X-Git-Reftype: branch
X-Git-Commit: 7bbd7b58f8a98ba1d854158fb42c0de007e00cc1
Auto-Submitted: auto-generated
X-BeenThere: dev-commits-doc-all@freebsd.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Commit messages for all branches of the doc repository."
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Thu, 10 Dec 2020 18:45:08 -0000
The branch main has been updated by imp:
URL: https://cgit.FreeBSD.org/doc/commit/?id=7bbd7b58f8a98ba1d854158fb42c0de007e00cc1
commit 7bbd7b58f8a98ba1d854158fb42c0de007e00cc1
Author: Warner Losh
AuthorDate: 2020-12-10 18:43:06 +0000
Commit: Warner Losh
CommitDate: 2020-12-10 18:43:06 +0000
Remove $FreeBSD$ from my PGP key
The $FreeBSD$ tag is obsolete. Remove it. Note: this is a test commit
to ensure that my instructions work end to end. If we do the rest,
then we should do it in bulk so individuals should hold off doing
similar commits unless changing their key.
---
share/pgpkeys/imp.key | 1 -
1 file changed, 1 deletion(-)
diff --git a/share/pgpkeys/imp.key b/share/pgpkeys/imp.key
index 519b1c6a83..44bd58176a 100644
--- a/share/pgpkeys/imp.key
+++ b/share/pgpkeys/imp.key
@@ -1,4 +1,3 @@
-
From owner-dev-commits-doc-all@freebsd.org Thu Dec 10 19:55:11 2020
Return-Path:
Delivered-To: dev-commits-doc-all@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
by mailman.nyi.freebsd.org (Postfix) with ESMTP id 47E084B47C1
for ;
Thu, 10 Dec 2020 19:55:11 +0000 (UTC)
(envelope-from cy.schubert@cschubert.com)
Received: from smtp-out-no.shaw.ca (smtp-out-no.shaw.ca [64.59.134.9])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(Client CN "Client", Issuer "CA" (not verified))
by mx1.freebsd.org (Postfix) with ESMTPS id 4CsPlf670Mz4tYJ;
Thu, 10 Dec 2020 19:55:07 +0000 (UTC)
(envelope-from cy.schubert@cschubert.com)
Received: from spqr.komquats.com ([70.67.229.168]) by shaw.ca with ESMTPA
id nS1lkUhZJ34axnS1nkA8c7; Thu, 10 Dec 2020 12:55:05 -0700
X-Authority-Analysis: v=2.4 cv=LvQsdlRc c=1 sm=1 tr=0 ts=5fd27d19
a=7AlCcx2GqMg+lh9P3BclKA==:117 a=7AlCcx2GqMg+lh9P3BclKA==:17
a=xqWC_Br6kY4A:10 a=kj9zAlcOel0A:10 a=zTNgK-yGK50A:10 a=6I5d2MoRAAAA:8
a=YxBL1-UpAAAA:8 a=EkcXrb_YAAAA:8 a=ymHzZgH7rRDwaUxClDMA:9 a=CjuIK1q_8ugA:10
a=IjZwj45LgO3ly-622nXo:22 a=Ia-lj3WSrqcvXOmTRaiG:22 a=LK5xJRSDVpKd5WXXoEvA:22
Received: from slippy.cwsent.com (slippy [IPv6:fc00:1:1:1::5b])
by spqr.komquats.com (Postfix) with ESMTPS id 8FC2C113A;
Thu, 10 Dec 2020 11:55:00 -0800 (PST)
Received: from slippy (localhost [127.0.0.1])
by slippy.cwsent.com (8.16.1/8.16.1) with ESMTP id 0BAJt0rT095551;
Thu, 10 Dec 2020 11:55:00 -0800 (PST)
(envelope-from Cy.Schubert@cschubert.com)
Message-Id: <202012101955.0BAJt0rT095551@slippy.cwsent.com>
X-Mailer: exmh version 2.9.0 11/07/2018 with nmh-1.7.1
Reply-to: Cy Schubert
From: Cy Schubert
X-os: FreeBSD
X-Sender: cy@cwsent.com
X-URL: http://www.cschubert.com/
To: Warner Losh
cc: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org
Subject: Re: git: 7bbd7b58f8 - Remove $FreeBSD$ from my PGP key
In-reply-to: <202012101845.0BAIj8K3028295@gitrepo.freebsd.org>
References: <202012101845.0BAIj8K3028295@gitrepo.freebsd.org>
Comments: In-reply-to Warner Losh
message dated "Thu, 10 Dec 2020 18:45:08 +0000."
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Thu, 10 Dec 2020 11:55:00 -0800
X-CMAE-Envelope: MS4xfM6vO6ezIYQv/ZczEoZces+djPXM1G4cCjKPlbKi94JQbrVsaBhDq//AUydxW2Y482UinFADDLfuNUU4AfjJqR5X1q4AB0sVwsZe4z8apufLRVORWjXa
qlEJS6ZhucRo7gLZCpu5EVgaCIwEmlY1cm3fQdjZNfifSVvhZg88PnuYfbi2B8AJ2O4Zo3bVk9E2X2S4MD9KEqH9mmFVb7gd9NddmY0CTK0COWHlUncVvfhc
VCvmeuhItUi61QW0Ubi0PT3ymxlhEek1KNQ7Glq5T13M/PwA8Fi0eHy/Ho2cygeo
X-Rspamd-Queue-Id: 4CsPlf670Mz4tYJ
X-Spamd-Bar: ----
Authentication-Results: mx1.freebsd.org;
none
X-Spamd-Result: default: False [-4.00 / 15.00];
REPLY(-4.00)[]
X-BeenThere: dev-commits-doc-all@freebsd.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Commit messages for all branches of the doc repository."
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Thu, 10 Dec 2020 19:55:11 -0000
In message <202012101845.0BAIj8K3028295@gitrepo.freebsd.org>, Warner Losh
write
s:
> The branch main has been updated by imp:
>
> URL: https://cgit.FreeBSD.org/doc/commit/?id=7bbd7b58f8a98ba1d854158fb42c0de0
> 07e00cc1
>
> commit 7bbd7b58f8a98ba1d854158fb42c0de007e00cc1
> Author: Warner Losh
> AuthorDate: 2020-12-10 18:43:06 +0000
> Commit: Warner Losh
> CommitDate: 2020-12-10 18:43:06 +0000
>
> Remove $FreeBSD$ from my PGP key
>
> The $FreeBSD$ tag is obsolete. Remove it. Note: this is a test commit
> to ensure that my instructions work end to end. If we do the rest,
> then we should do it in bulk so individuals should hold off doing
> similar commits unless changing their key.
Doing it in bulk makes most sense, avoiding unnecessary churn.
I think the whole tree should be done in one commit.
--
Cheers,
Cy Schubert
FreeBSD UNIX: Web: https://FreeBSD.org
NTP: Web: https://nwtime.org
The need of the many outweighs the greed of the few.
From owner-dev-commits-doc-all@freebsd.org Thu Dec 10 19:59:25 2020
Return-Path:
Delivered-To: dev-commits-doc-all@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
by mailman.nyi.freebsd.org (Postfix) with ESMTP id 50FEA4B4C39
for ;
Thu, 10 Dec 2020 19:59:25 +0000 (UTC)
(envelope-from wlosh@bsdimp.com)
Received: from mail-qk1-x72e.google.com (mail-qk1-x72e.google.com
[IPv6:2607:f8b0:4864:20::72e])
(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
client-signature RSA-PSS (2048 bits) client-digest SHA256)
(Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK))
by mx1.freebsd.org (Postfix) with ESMTPS id 4CsPrX3mqkz4tfM
for ; Thu, 10 Dec 2020 19:59:24 +0000 (UTC)
(envelope-from wlosh@bsdimp.com)
Received: by mail-qk1-x72e.google.com with SMTP id z188so6102438qke.9
for ; Thu, 10 Dec 2020 11:59:24 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=bsdimp-com.20150623.gappssmtp.com; s=20150623;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to
:cc; bh=T2cJ3L/StNr+8N3krDd0GlFzrs52DYNXKetxMtu6nhc=;
b=aii3TCzHxoasCvtMIQmXMUoIDx+uC6Jyc+sNAUxrryz0zuRw5mniWYDsR7iuFQLobH
Xoeuj11Bl5cYLzh4yoaVYe9I22U4QeDdYNCz+ktp/umggnP5e5qW9Iym7bEc4zCLAL2T
IWmXqVrt6DxrJKraNkm1psnVXen63bGWGYe/4ZRZGgOJLSAJTRg8tljnSGg7GN6O9HDk
q7CqQ7C+lNPmNTMPsyhMN5lvHgVEWdQK33JHm6JNLjHpmLBvMKXXAicQG+Xp09/SwTiW
IeoML2owzWuYuqTW41dZGw2RB+AcHToiiyCmnic+H8+/eFqlKQCvKPCdCNmeeDZjwjku
WGBQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to:cc;
bh=T2cJ3L/StNr+8N3krDd0GlFzrs52DYNXKetxMtu6nhc=;
b=TZt8IyVTx1eriGTOOvXfnDs2tyfXJj7lKvTTcxR4n5oO1oQew9zlFQirsHYah9q64O
oMMnty4WuLqTMJQZMNLdooYeC5CsPkPO0BOzhSl/QAl8tw0zXD1oS/EhhoBOkQoToKq3
fpNanenxU18LPEMqdbIHnbs8fduL6QHQbRjdoaSvSurgORiPsftQ8xswDqafHVOnKsq+
f6/eMfRQ+Z8Nwc5m8BRvijJO3A32Pp9fNXDjXJaWpN7ImDFZm9vhtK0Ui4yZ67EUCk0h
ZSnXC+8hGLuZXMp4XpIRR+iI5r7VGE17zhAevG29I5PTn34TGcEyWlqXYxrUB8TxZcRX
H9xQ==
X-Gm-Message-State: AOAM532T77VGxizLHG6+H3pNzzvrd9jjaSbada+/EcDKSq1ecco12wgY
AVWAlT/+9UhlfjjZLGPFtK4dKK97YC8gEa/niHMbRn27PASQdA==
X-Google-Smtp-Source: ABdhPJzYSnjNXRr/pOcgDeOFLJAgrsK9mU3UJWGlEDABHBbmu4a+rdHkwWClaGjaOEBaJEp+eya48wqTXpSsl/uIr9A=
X-Received: by 2002:ae9:f311:: with SMTP id p17mr10456224qkg.206.1607630363370;
Thu, 10 Dec 2020 11:59:23 -0800 (PST)
MIME-Version: 1.0
References: <202012101845.0BAIj8K3028295@gitrepo.freebsd.org>
<202012101955.0BAJt0rT095551@slippy.cwsent.com>
In-Reply-To: <202012101955.0BAJt0rT095551@slippy.cwsent.com>
From: Warner Losh
Date: Thu, 10 Dec 2020 12:59:12 -0700
Message-ID:
Subject: Re: git: 7bbd7b58f8 - Remove $FreeBSD$ from my PGP key
To: Cy Schubert
Cc: Warner Losh , doc-committers@freebsd.org,
dev-commits-doc-all@freebsd.org
X-Rspamd-Queue-Id: 4CsPrX3mqkz4tfM
X-Spamd-Bar: /
Authentication-Results: mx1.freebsd.org;
dkim=pass header.d=bsdimp-com.20150623.gappssmtp.com header.s=20150623
header.b=aii3TCzH; dmarc=none;
spf=none (mx1.freebsd.org: domain of wlosh@bsdimp.com has no SPF policy when
checking 2607:f8b0:4864:20::72e) smtp.mailfrom=wlosh@bsdimp.com
X-Spamd-Result: default: False [0.01 / 15.00]; RCVD_TLS_ALL(0.00)[];
ARC_NA(0.00)[];
R_DKIM_ALLOW(-0.20)[bsdimp-com.20150623.gappssmtp.com:s=20150623];
NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[];
RCPT_COUNT_THREE(0.00)[4]; TO_DN_SOME(0.00)[];
MIME_GOOD(-0.10)[multipart/alternative,text/plain];
SUBJECT_HAS_CURRENCY(1.00)[];
PREVIOUSLY_DELIVERED(0.00)[dev-commits-doc-all@freebsd.org];
DMARC_NA(0.00)[bsdimp.com];
SPAMHAUS_ZRD(0.00)[2607:f8b0:4864:20::72e:from:127.0.2.255];
TO_MATCH_ENVRCPT_SOME(0.00)[];
DKIM_TRACE(0.00)[bsdimp-com.20150623.gappssmtp.com:+];
NEURAL_SPAM_LONG(1.00)[1.000];
RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::72e:from];
NEURAL_HAM_SHORT(-0.99)[-0.994]; R_SPF_NA(0.00)[no SPF record];
FORGED_SENDER(0.30)[imp@bsdimp.com,wlosh@bsdimp.com];
MIME_TRACE(0.00)[0:+,1:+,2:~];
RBL_DBL_DONT_QUERY_IPS(0.00)[2607:f8b0:4864:20::72e:from];
RCVD_COUNT_TWO(0.00)[2];
ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US];
FROM_NEQ_ENVFROM(0.00)[imp@bsdimp.com,wlosh@bsdimp.com];
MAILMAN_DEST(0.00)[dev-commits-doc-all]
Content-Type: text/plain; charset="UTF-8"
X-Content-Filtered-By: Mailman/MimeDel 2.1.34
X-BeenThere: dev-commits-doc-all@freebsd.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Commit messages for all branches of the doc repository."
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Thu, 10 Dec 2020 19:59:25 -0000
On Thu, Dec 10, 2020 at 12:55 PM Cy Schubert
wrote:
> In message <202012101845.0BAIj8K3028295@gitrepo.freebsd.org>, Warner Losh
> write
> s:
> > The branch main has been updated by imp:
> >
> > URL:
> https://cgit.FreeBSD.org/doc/commit/?id=7bbd7b58f8a98ba1d854158fb42c0de0
> > 07e00cc1
> >
> > commit 7bbd7b58f8a98ba1d854158fb42c0de007e00cc1
> > Author: Warner Losh
> > AuthorDate: 2020-12-10 18:43:06 +0000
> > Commit: Warner Losh
> > CommitDate: 2020-12-10 18:43:06 +0000
> >
> > Remove $FreeBSD$ from my PGP key
> >
> > The $FreeBSD$ tag is obsolete. Remove it. Note: this is a test commit
> > to ensure that my instructions work end to end. If we do the rest,
> > then we should do it in bulk so individuals should hold off doing
> > similar commits unless changing their key.
>
> Doing it in bulk makes most sense, avoiding unnecessary churn.
>
> I think the whole tree should be done in one commit.
>
Yes. The doc tree should be since there's no mirroring. There's no MFC
issues so that makes sense. It would likely only be mildly intrusive for
translations, but I've not studied them enough to know how intrusive.
The src tree should not be done until stable/12 goes EOL since we're
replaying the src commits done to stable/12 branch to subversion until
then. This change isn't MFCable, and would create some level of heartburn
for MFCs that's likely to be a worse problem than putting up with them in
src for a couple of years. The policy for src should be 'don't remove ones
that are there, but you don't need it for every new file' or similar.
Warner
From owner-dev-commits-doc-all@freebsd.org Thu Dec 10 20:03:37 2020
Return-Path:
Delivered-To: dev-commits-doc-all@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
by mailman.nyi.freebsd.org (Postfix) with ESMTP id 2A1AC4B4EB3
for ;
Thu, 10 Dec 2020 20:03:37 +0000 (UTC) (envelope-from gjb@freebsd.org)
Received: from freefall.freebsd.org (freefall.freebsd.org
[IPv6:2610:1c1:1:6074::16:84])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
client-signature RSA-PSS (4096 bits) client-digest SHA256)
(Client CN "freefall.freebsd.org",
Issuer "Let's Encrypt Authority X3" (verified OK))
by mx1.freebsd.org (Postfix) with ESMTPS id 4CsPxP0lX3z4vSj;
Thu, 10 Dec 2020 20:03:37 +0000 (UTC) (envelope-from gjb@freebsd.org)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim;
t=1607630617;
h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
to:to:cc:cc:mime-version:mime-version:content-type:content-type:
in-reply-to:in-reply-to:references:references;
bh=euWwG6AvXvmBB85Fs9T/WHpsd1HAwTjAkQCkYcOtCGI=;
b=GccePaJMF06VbT7swXUI8XKgVJopoWYMGtmJlgKvT0l2q0JKSRBaSyac3nPoa6+4sY5oWH
zah8+qONKomKPTJQaBVn4jY77hRUxiChd3DW5k+x4J6M+2hQHzH4XKHord26S80QBCdslf
2JsojMTOleX4xc+DD8iyWgM/ibTESF4S+IWIkkU7HXzqUTXu70pGOgz/sZD8cQM3s7+VyO
bXHYYFAANPBYjLa/jJd/wN4OekaGSNdP5ndeFZz1SQ8NeQCJe0vMf5WcqkhOufNlY+E680
Wie95EFwri/43M+y1lW5ffhJTJkv+bO2LlNF5StpYZ8nDYt6xY3pbVF+pwvjPg==
Received: from FreeBSD.org (freefall.freebsd.org [IPv6:2610:1c1:1:6074::16:84])
(using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
(Client did not present a certificate)
by freefall.freebsd.org (Postfix) with ESMTPS id 97087136E7;
Thu, 10 Dec 2020 20:03:36 +0000 (UTC) (envelope-from gjb@freebsd.org)
Date: Thu, 10 Dec 2020 20:03:34 +0000
From: Glen Barber
To: Cy Schubert
Cc: Warner Losh , doc-committers@freebsd.org,
dev-commits-doc-all@freebsd.org
Subject: Re: git: 7bbd7b58f8 - Remove $FreeBSD$ from my PGP key
Message-ID: <20201210200334.GB26726@FreeBSD.org>
References: <202012101845.0BAIj8K3028295@gitrepo.freebsd.org>
<202012101955.0BAJt0rT095551@slippy.cwsent.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
protocol="application/pgp-signature"; boundary="uZyLg9CcYmNEsXnQ"
Content-Disposition: inline
In-Reply-To: <202012101955.0BAJt0rT095551@slippy.cwsent.com>
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org;
s=dkim; t=1607630617;
h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
to:to:cc:cc:mime-version:mime-version:content-type:content-type:
in-reply-to:in-reply-to:references:references;
bh=euWwG6AvXvmBB85Fs9T/WHpsd1HAwTjAkQCkYcOtCGI=;
b=AQYR0+HMNRWC6VobZmkzcjarKXBr/yB5EvyaaP3qfBPnE2HixMB94i4VyiEIkaSv1VcGxH
zGbDbOo/VZFkukkAVNc3cbiVq6tT/WbQY7vNx3/iqRy39pcSDb3XyOJCM2hcC7I2f/7xbY
B3n80fMavC9NmERtITTaD+YGLaF1YCGWd50nbNi130nyic+4E2QGsW99pRct4k2mxz72B+
kjUzeCYfoSdSyaa+DVu2qtZMVAvOcgx5CAypSQI/MY2BWMDs96o5oxrjVvzrAztGMxOnW1
PwsF0+UrFiKvVHLmZYKXK62vblh37pxw+JYI2mUV0vriM1A/nYzBorV7CHGdCg==
ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1607630617; a=rsa-sha256; cv=none;
b=KSXWITA6CaUFKP075LTJp9sY9f/XzkZTwMEVMccJmhXvIp+cqXoCyl7o+BD9URjwSMsnYo
ET2RZELvI2GnOLttmQJn5vuOC7pODuolGeOcIqQdySp2OgRvGXBqfoxsRWP708H+IoOJf1
gmYzU14wMKr6M6SdWPhOE4NbEAPX04HtRjaVc1mcVtdEW6P3yDiIUIseMqbDlJULviCdrq
gJ9seCW/MKt2umU5WJwtIXW3R4tVXjwGMvaMfTjt+YY7xFNIVtnWrC2RM73NL8mxPqDrvl
0e+o946e9KZ38ruceqAnZ7wN3q1wK54qHqLTOwy8vLJfWZTlrl+Z0nSbt3dP/A==
ARC-Authentication-Results: i=1;
mx1.freebsd.org;
none
X-BeenThere: dev-commits-doc-all@freebsd.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Commit messages for all branches of the doc repository."
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Thu, 10 Dec 2020 20:03:37 -0000
--uZyLg9CcYmNEsXnQ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Thu, Dec 10, 2020 at 11:55:00AM -0800, Cy Schubert wrote:
> In message <202012101845.0BAIj8K3028295@gitrepo.freebsd.org>, Warner Losh=
=20
> write
> s:
> > The branch main has been updated by imp:
> >
> > URL: https://cgit.FreeBSD.org/doc/commit/?id=3D7bbd7b58f8a98ba1d854158f=
b42c0de0
> > 07e00cc1
> >
> > commit 7bbd7b58f8a98ba1d854158fb42c0de007e00cc1
> > Author: Warner Losh
> > AuthorDate: 2020-12-10 18:43:06 +0000
> > Commit: Warner Losh
> > CommitDate: 2020-12-10 18:43:06 +0000
> >
> > Remove $FreeBSD$ from my PGP key
> > =20
> > The $FreeBSD$ tag is obsolete. Remove it. Note: this is a test comm=
it
> > to ensure that my instructions work end to end. If we do the rest,
> > then we should do it in bulk so individuals should hold off doing
> > similar commits unless changing their key.
>=20
> Doing it in bulk makes most sense, avoiding unnecessary churn.
>=20
> I think the whole tree should be done in one commit.
>=20
IMHO, this should be treated like copyright year bumps, where the change
is made as part of an actual change to specific files. I do not see the
benefit of a massive '$FreeBSD$' removal commit.
My $0.02 USD.
Glen
--uZyLg9CcYmNEsXnQ
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----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=hxZL
-----END PGP SIGNATURE-----
--uZyLg9CcYmNEsXnQ--
From owner-dev-commits-doc-all@freebsd.org Thu Dec 10 20:08:07 2020
Return-Path:
Delivered-To: dev-commits-doc-all@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
by mailman.nyi.freebsd.org (Postfix) with ESMTP id 8918F4B4FE0
for ;
Thu, 10 Dec 2020 20:08:07 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org
[IPv6:2610:1c1:1:606c::19:3])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
client-signature RSA-PSS (4096 bits) client-digest SHA256)
(Client CN "mxrelay.nyi.freebsd.org",
Issuer "Let's Encrypt Authority X3" (verified OK))
by mx1.freebsd.org (Postfix) with ESMTPS id 4CsQ2b3TNMz4vfw;
Thu, 10 Dec 2020 20:08:07 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org (gitrepo.freebsd.org
[IPv6:2610:1c1:1:6068::e6a:5])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(Client did not present a certificate)
by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 6A01C1E6C5;
Thu, 10 Dec 2020 20:08:07 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org ([127.0.1.44])
by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 0BAK87D0016354;
Thu, 10 Dec 2020 20:08:07 GMT (envelope-from git@gitrepo.freebsd.org)
Received: (from git@localhost)
by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 0BAK87MV016353;
Thu, 10 Dec 2020 20:08:07 GMT (envelope-from git)
Date: Thu, 10 Dec 2020 20:08:07 GMT
Message-Id: <202012102008.0BAK87MV016353@gitrepo.freebsd.org>
To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org
From: Glen Barber
Subject: git: 75c3fd757d - addkey.sh: remove adding $FreeBSD$ RCSID,
update adding key to repository.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Git-Committer: gjb
X-Git-Repository: doc
X-Git-Refname: refs/heads/main
X-Git-Reftype: branch
X-Git-Commit: 75c3fd757da758de565d7b91903c75a60fe54e1a
Auto-Submitted: auto-generated
X-BeenThere: dev-commits-doc-all@freebsd.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Commit messages for all branches of the doc repository."
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Thu, 10 Dec 2020 20:08:07 -0000
The branch main has been updated by gjb:
URL: https://cgit.FreeBSD.org/doc/commit/?id=75c3fd757da758de565d7b91903c75a60fe54e1a
commit 75c3fd757da758de565d7b91903c75a60fe54e1a
Author: Glen Barber
AuthorDate: 2020-12-10 20:07:06 +0000
Commit: Glen Barber
CommitDate: 2020-12-10 20:07:06 +0000
addkey.sh: remove adding $FreeBSD$ RCSID, update adding key to repository.
While here, remove $FreeBSD$ RCSID from the script itself.
Sponsored by: Rubicon Communications, LLC (netgate.com)
---
share/pgpkeys/addkey.sh | 6 +-----
1 file changed, 1 insertion(+), 5 deletions(-)
diff --git a/share/pgpkeys/addkey.sh b/share/pgpkeys/addkey.sh
index 4b98604318..36b0101c51 100755
--- a/share/pgpkeys/addkey.sh
+++ b/share/pgpkeys/addkey.sh
@@ -1,7 +1,5 @@
#!/bin/sh
#
-# $FreeBSD$
-#
progname=$(basename $(realpath $0))
@@ -116,7 +114,6 @@ fi
keyfile="${me}.key"
info "Generating ${keyfile}..."
(
- echo ''
echo ''
@@ -154,7 +151,6 @@ either pgpkeys-officers.xml or pgpkeys-core.xml instead.
If this is a new entry, don't forget to run the following commands
before committing:
-% svn add ${keyfile}
-% svn propset svn:keywords FreeBSD=%H ${keyfile}
+% git add ${keyfile}
EOF
From owner-dev-commits-doc-all@freebsd.org Thu Dec 10 21:46:31 2020
Return-Path:
Delivered-To: dev-commits-doc-all@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
by mailman.nyi.freebsd.org (Postfix) with ESMTP id 32E224B9483
for ;
Thu, 10 Dec 2020 21:46:31 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org
[IPv6:2610:1c1:1:606c::19:3])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
client-signature RSA-PSS (4096 bits) client-digest SHA256)
(Client CN "mxrelay.nyi.freebsd.org",
Issuer "Let's Encrypt Authority X3" (verified OK))
by mx1.freebsd.org (Postfix) with ESMTPS id 4CsSD633gbz3m3d;
Thu, 10 Dec 2020 21:46:30 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org (gitrepo.freebsd.org
[IPv6:2610:1c1:1:6068::e6a:5])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(Client did not present a certificate)
by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 211851FF20;
Thu, 10 Dec 2020 21:46:29 +0000 (UTC) (envelope-from git@FreeBSD.org)
Received: from gitrepo.freebsd.org ([127.0.1.44])
by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 0BALkSVx025766;
Thu, 10 Dec 2020 21:46:28 GMT (envelope-from git@gitrepo.freebsd.org)
Received: (from git@localhost)
by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 0BALkSop025765;
Thu, 10 Dec 2020 21:46:28 GMT (envelope-from git)
Date: Thu, 10 Dec 2020 21:46:28 GMT
Message-Id: <202012102146.0BALkSop025765@gitrepo.freebsd.org>
To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org
From: Mitchell Horne
Subject: git: f40145f8ba - Add riscv64 links to the download page
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Git-Committer: mhorne
X-Git-Repository: doc
X-Git-Refname: refs/heads/main
X-Git-Reftype: branch
X-Git-Commit: f40145f8ba1655b8e18126ce1637f8e4ffc66d35
Auto-Submitted: auto-generated
X-BeenThere: dev-commits-doc-all@freebsd.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: "Commit messages for all branches of the doc repository."
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Thu, 10 Dec 2020 21:46:31 -0000
The branch main has been updated by mhorne (src committer):
URL: https://cgit.FreeBSD.org/doc/commit/?id=f40145f8ba1655b8e18126ce1637f8e4ffc66d35
commit f40145f8ba1655b8e18126ce1637f8e4ffc66d35
Author: Mitchell Horne
AuthorDate: 2020-12-10 21:36:46 +0000
Commit: Mitchell Horne
CommitDate: 2020-12-10 21:36:46 +0000
Add riscv64 links to the download page
A slight reconfiguration of the SD Card section is necessary, as we now
have GENERICSD images for two architectures. Organize those links by
architecture.
Reviewed by: gjb
---
en_US.ISO8859-1/htdocs/where.xml | 22 +++++++++++++++++-----
1 file changed, 17 insertions(+), 5 deletions(-)
diff --git a/en_US.ISO8859-1/htdocs/where.xml b/en_US.ISO8859-1/htdocs/where.xml
index f04af9b1d0..1b91724cda 100644
--- a/en_US.ISO8859-1/htdocs/where.xml
+++ b/en_US.ISO8859-1/htdocs/where.xml
@@ -290,6 +290,7 @@