Date: Sat, 21 Jun 2014 00:45:44 +0000 (UTC) From: Glen Barber <gjb@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-9@freebsd.org Subject: svn commit: r267696 - stable/9/release/doc/en_US.ISO8859-1/relnotes Message-ID: <201406210045.s5L0jis7034771@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: gjb Date: Sat Jun 21 00:45:44 2014 New Revision: 267696 URL: http://svnweb.freebsd.org/changeset/base/267696 Log: Purge information from the stable/9 relnotes that applied to 9.3-RELEASE, after releng/9.3 is branched. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation Modified: stable/9/release/doc/en_US.ISO8859-1/relnotes/article.xml Modified: stable/9/release/doc/en_US.ISO8859-1/relnotes/article.xml ============================================================================== --- stable/9/release/doc/en_US.ISO8859-1/relnotes/article.xml Sat Jun 21 00:35:20 2014 (r267695) +++ stable/9/release/doc/en_US.ISO8859-1/relnotes/article.xml Sat Jun 21 00:45:44 2014 (r267696) @@ -108,79 +108,9 @@ <tbody> <row> - <entry><link - xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:01.bsnmpd.asc">FreeBSD-SA-14:01.bsnmpd</link></entry>; - <entry>1 January 2014</entry> - <entry><para>Fix &man.bsnmpd.1; remote denial of service - vulnerability</para></entry> - </row> - - <row> - <entry><link - xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:02.ntpd.asc">FreeBSD-SA-14:02.ntpd</link></entry>; - <entry>1 January 2014</entry> - <entry><para>Disable <quote>monitor</quote> feature in - &man.ntpd.8; by default</para></entry> - </row> - - <row> - <entry><link - xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:04.bind.asc">FreeBSD-SA-14:04.bind</link></entry>; - <entry>1 January 2014</entry> - <entry><para>Remote denial of service - vulnerability</para></entry> - </row> - - <row> - <entry><link - xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:05.nfsserver.asc">FreeBSD-SA-14:05.nfsserver</link></entry>; - <entry>8 April 2014</entry> - <entry><para>Deadlock in the NFS server</para></entry> - </row> - - <row> - <entry><link - xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:06.openssl.asc">FreeBSD-SA-14:06.openssl</link></entry>; - <entry>8 April 2014</entry> - <entry><para>ECDSA side channel leak</para></entry> - </row> - - <row> - <entry><link - xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:08.tcp.asc">FreeBSD-SA-14:08.tcp</link></entry>; - <entry>30 April 2014</entry> - <entry><para>TCP reassembly vulnerability</para></entry> - </row> - - <row> - <entry><link - xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:11.sendmail.asc">FreeBSD-SA-14:11.sendmail</link></entry>; - <entry>26 May 2014</entry> - <entry><para><application>Sendmail</application> - improper close-on-exec flag handling</para></entry> - </row> - - <row> - <entry><link - xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:12.ktrace.asc">FreeBSD-SA-14:12.ktrace</link></entry>; - <entry>3 June 2014</entry> - <entry><para>&man.ktrace.1; kernel memory - disclosure</para></entry> - </row> - - <row> - <entry><link - xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:13.pam.asc">FreeBSD-SA-14:13.pam</link></entry>; - <entry>3 June 2014</entry> - <entry><para>Incorrect error handling in PAM policy - parser</para></entry> - </row> - - <row> - <entry><link - xlink:href="http://security.freebsd.org/advisories/FreeBSD-SA-14:14.openssl.asc">FreeBSD-SA-14:14.openssl</link></entry>; - <entry>5 June 2014</entry> - <entry><para>Multiple vulnerabilities</para></entry> + <entry><para>No security advisories</para></entry> + <entry><para> </para></entry> + <entry><para> </para></entry> </row> </tbody> </tgroup> @@ -190,536 +120,25 @@ <sect2 xml:id="kernel"> <title>Kernel Changes</title> - <para revision="256033">The &man.arcmsr.4; driver has been - updated to version 1.20.00.28.</para> - - <para revision="256437" contrib="sponsor" - sponsor="&ff;">The &man.isci.4; driver is now loadable - via &man.kldload.8;.</para> - - <para revision="256759">System-level &man.sysctl.8; values are - now exposed to the system for the &man.ixgbe.4; device.</para> - - <para revision="256924">The &man.mfi.4; driver has been updated - to support MegaRAID Invader controllers.</para> - - <para revision="257119">A kernel panic triggered in - <literal>zfs_root()</literal> after a failed rollback has - been fixed.</para> - - <para revision="257125" contrib="sponsor" - sponsor="&ff;">A new &man.sysctl.8;, - <literal>debug.devfs_iosize_max_clamp</literal> has been added - which enables and disables <literal>SSIZE_MAX</literal>-sized - I/O requests on &man.devfs.5; files.</para> - - <para revision="257126" contrib="sponsor" sponsor="&ff;">A new - &man.sysctl.8;, <literal>kern.disallow_high_osrel</literal>, - has been added which disables executing the images compiled on - a userland with a higher major version number than the major - version number of the running kernel.</para> - - <para revision="257253">A kernel panic triggered by unmounting - a busy &man.zfs.8; filesystem has been fixed.</para> - - <para revision="257373">A deadlock triggered by powering off - a USB device has been fixed.</para> - - <para revision="258214">The &man.ata.4; driver has been updated - to support Intel Lynx Point PCH SMBus devices.</para> - - <para revision="258215">The &man.ata.4; driver has been updated - to support Coleto Creek devices.</para> - - <para revision="258217">The &man.ahci.4; driver has been updated - to support the PCI-express solid state drive in the - &apple; MacBook Air (model A1465).</para> - - <para revision="258635">The &man.sysctl.8; - <literal>vfs.zfs.arc_meta_limit</literal> can now be changed - at runtime.</para> - - <para revision="258870">The &man.mmap.2; system call has been - updated to more optimally use superpages and provide support - for tweaking the alignment of virtual mappings.</para> - - <para revision="258962">A workaround has been implemented - in the &man.bge.4; driver for hung transmission on BCM5719 - and BCM5720 chipsets.</para> - - <para revision="259002">A kernel panic when listing sysctls - on a system with <literal>INVARIANTS</literal> enabled has - been fixed.</para> - - <para revision="259466">A new &man.sysctl.8;, - <literal>kern.supported_archs</literal> has been added, - which will list the <envar>MACHINE_ARCH</envar> values - whose binaries can be run on the system.</para> - - <para revision="259519" contrib="sponsor" - sponsor="&spectralogic;">Several problems that could trigger - kernel panic on &man.kldload.8; and &man.kldunload.8; have - been fixed.</para> - - <para revision="260082" contrib="sponsor" - sponsor="&ff;">A kernel panic triggered by some - multi-threaded applications has been fixed.</para> - - <para revision="260134">The &man.runfw.4; firmware has been - renamed from <literal>runfw</literal> to - <literal>run.fw</literal> for consistency with other firmware - files.</para> - - <para revision="260433">A new &man.sysctl.8;, - <literal>kern.panic_reboot_wait_time</literal>, has been - added. This allows tuning the amount of time the system - will wait before rebooting after &man.panic.9;. The - <literal>kern.panic_reboot_wait_time</literal> value defaults - to the kernel configuration option, - <literal>PANIC_REBOOT_WAIT_TIME</literal>.</para> - - <para revision="260644">Hardware Random Number Generators have - been disabled by default.</para> - - <para revision="261485">Support for GPS ports has been added - to the &man.uhso.4; driver.</para> - - <para revision="262116">A memory leak of compressed buffers - has been fixed in - <literal>l2arc_write_done()</literal>.</para> - - <para revision="262153">The &man.netmap.4; framework has been - updated to match the version in <literal>head/</literal>, - which includes netmap pipes, kqueue support, and enhanced - VALE switch port.</para> - - <para revision="262175">A deadlock triggered by sending - a mounted &man.zfs.8; snapshot has been fixed.</para> - - <para revision="262231">Support for SIIG X1 PCI-e has been added - to &man.ppc.4;.</para> - - <para revision="262564">Support for the ext4 filesystem - has been enabled, supporting read-only mounts.</para> - - <para revision="262594">A kernel panic triggered by inserting - a USB ethernet device on VIMAGE-enabled systems has been - fixed.</para> - - <para revision="262988" contrib="sponsor" sponsor="&ff;">TTM, - a memory manager used by video - drivers, has been merged.</para> - - <para revision="263103">Support for - <literal>/sys/kernel/random/uuid</literal> has been added - to &man.linprocfs.5;.</para> - - <para revision="263128">A memory leak in the - <literal>zpool_in_use()</literal> function has been - fixed.</para> - - <para revision="263391">The - <literal>extensible_dataset</literal> &man.zpool.8; feature - has been added. See &man.zpool-features.7; for more - information.</para> - - <para revision="263408">A memory leak has been fixed in - <literal>libzfs</literal>.</para> - - <para revision="263817,263818" contrib="sponsor" - sponsor="&ff;">The <literal>vt</literal> driver - has been merged from <literal>head/</literal>.</para> - - <para revision="265729" contrib="sponsor" - sponsor="&lsi;, &spectralogic;">The &man.mpr.4; device has - been added, providing support for LSI Fusion-MPT 3 12Gb - SCSI/SATA controllers.</para> - - <para revision="266167">A kernel bug that inhibited proper - functionality of the <literal>dev.cpu.0.freq</literal> - &man.sysctl.8; on &intel; processors with Turbo - Boost ™ enabled has been fixed.</para> - - <para revision="266269">Support for &man.xen.4; - hardware-assisted virtualization, <literal>XENHVM</literal>, - is now available as a loadable module, - <literal>xenhvm.ko</literal>.</para> - - <sect3 xml:id="proc"> - <title>Hardware Support</title> - - <para revision="261510">Trackpad support for - &apple; MacBook products has been added.</para> - - <para revision="261973">The &man.nve.4; driver has been - deprecated, and the &man.nfe.4; driver should be used - instead.</para> - - <para revision="262968">The &man.mfi.4; driver has been - updated to support MegaRAID Fury cards.</para> - - <para revision="263170,263171">The Radeon KMS driver has been - added.</para> - - <para revision="263340">The &man.aacraid.4; driver has been - updated to version 3.2.5.</para> - - <sect4 xml:id="net-if"> - <title>Network Interface Support</title> - - <para revision="257611">The &man.re.4; driver has been - updated to add preliminary support for the RTL8106E - chipset.</para> - - <para revision="257614,257616">The &man.re.4; driver has - been updated to support the RTL8168G, RTL8168GU and - RTL8411B chipsets.</para> - - <para revision="257618">The &man.re.4; driver has been - updated to add preliminary support for the RTL8168EP - chipset.</para> - - <para revision="258586">The &man.oce.4; driver has been - updated to version 10.0.664.0.</para> - - <para revision="258898">The &man.qlxgbe.4; driver has been - imported from <literal>head/</literal>.</para> - - <para revision="258936">The &man.qlxge.4; driver has been - imported from <literal>head/</literal>.</para> - - <para revision="258965">The &man.bge.4; driver has been - updated to support the BCM5725 chipset.</para> - - <para revision="258967">The &man.bge.4; driver has been - updated to support the BCM57764, BCM57767, BCM57782, - BCM57786 and BCM57787 chipsets.</para> - - <para revision="259457">The &man.run.4; driver has been - updated to support MediaTek/Ralink chipsets RT5370 and - RT5372.</para> - - <para revision="259460">The &man.usb.4; wireless radiotap - headers have been realigned, allowing wireless adapters - to work on &arch.arm;, &arch.mips;, and other similar - platforms where alignment is important.</para> - - <para revision="260119">The &man.run.4; firmware has been - updated to version 0.33.</para> - - <para revision="260252">The &man.bxe.4; driver has been - merged from <literal>head/</literal>, providing support - for Broadcom NetXtreme II 10Gb PCIe adapters.</para> - - <para revision="261865">The &man.run.4; driver has been - updated to include support for the MediaTek/Ralink RT3593 - chipset.</para> - - <para revision="261933">The &man.run.4; driver has been - updated to include support for the DLINK DWA-127 wireless - adapter.</para> - - <para revision="262153">The &man.axge.4; driver has been - added.</para> - - <para revision="262362">The &man.urndis.4; driver has been - imported from OpenBSD.</para> - - <para revision="263582">The &man.bxe.4; driver has been - updated to version 1.78.78.</para> - </sect4> - </sect3> - - <sect3 xml:id="fs"> - <title>File Systems</title> - - <para revision="263410">The &man.zfs.8; filesystem has been - updated to support the <literal>bookmarks</literal> - feature.</para> - </sect3> + <para> </para> </sect2> <sect2 xml:id="userland"> <title>Userland Changes</title> - <para revision="256054">A new flag <literal>-c</literal>, has - been added to &man.pgrep.1; and &man.pkill.1;, which restricts - the process lookup to the specified login class.</para> - - <para revision="257496">The &man.ddb.8; utility has been updated - to add <command>show ioapic</command> and <command>show all - ioapics</command>.</para> - - <para revision="258183">Setting <literal>nmbcluster</literal> - values to their current value will now be ignored, instead of - failing with an error.</para> - - <para revision="258763">The <filename - class="directory">/var/cache</filename> directory is now - created with mode <literal>0755</literal> instead of mode - <literal>0750</literal>, since this directory is used by - many third-party applications, which makes dropping group - privileges impossible.</para> - - <para revision="258818">The &man.uname.1; utility has been - updated to include the <literal>-U</literal> and - <literal>-K</literal> flags, which print the - <envar>__FreeBSD_version</envar> for the running userland - and kernel, respectively.</para> - - <para revision="258844">The &man.fetch.3; library has been - updated to support SNI (Server Name Identification), allowing - to use virtual hosts on HTTPS.</para> - - <para revision="259243">A segmentation fault and internal - compiler error bug in &man.gcc.1; triggered by throwing - a warning before parsing any tokens has been fixed.</para> - - <para revision="259269,259406" contrib="vendor" - vendor="&google;">Several updates to &man.gcc.1; - have been imported from Google.</para> - - <para revision="259448">A byte-order bug in the Heimdal - <literal>gss_pseudo_random()</literal> function which would - prevent interoperability with other - <application>Kerberos</application> implementations has been - fixed. In particular, this would prevent interoperability - with the MIT implementation.</para> - - <para revision="260007">The &man.hastctl.8; utility has been - updated to output the current queue sizes.</para> - - <para revision="260197">The &man.ps.1; utility will no longer - truncate the <literal>command</literal> output column.</para> - - <para revision="260208">The &man.protect.1; command has been - added, which allows exempting processes from being killed - when swap is exhausted.</para> - - <para revision="260507">The &man.gmirror.8; utility now prevents - deactivating the last component of a mirror.</para> - - <para revision="260507">A new &man.gmirror.8; command, - <command>gmirror destroy</command>, has been added, which will - destroy the &man.geom.8; and erase the &man.gmirror.8; - metadata.</para> - - <para revision="260650">The &man.etcupdate.8; utility, a tool - for managing updates to files in <filename - class="directory">/etc</filename>, has been merged from - <literal>head/</literal>.</para> - - <para revision="260651">The &man.find.1; utility has been - updated to fix incorrect behavior with the - <literal>-lname</literal> and <literal>-ilname</literal> - flags.</para> - - <para revision="260868,260869">The - <literal>hw.uart.console</literal> is now always updated when - the comconsole setup changes.</para> - - <para revision="260909">The &man.kldload.8; utility has been - updated to display a message directing to &man.dmesg.8;, - instead of the cryptic message <quote>Exec format - error</quote>.</para> - - <para revision="261674">A bug that could trigger an infinite - loop in KDE and X has been fixed.</para> - - <para revision="262076">The &man.newsyslog.8; utility has been - changed to use the size of the file, instead of the blocks the - file takes on the disk to match the behavior documented in - &man.newsyslog.conf.5;.</para> - - <para revision="262105">A bug in &man.zdb.8; which would cause - numeric parameters to a flag as being treated as additional - flags has been fixed.</para> - - <para revision="262124">The default number of &man.nfsd.8; - threads has been increased from <literal>4</literal> to - <literal>(8 * N)</literal>, where <literal>N</literal> is - the number of CPUs as reported by - <command>sysctl -n hw.ncpu</command>.</para> - - <para revision="262134">The &man.pciconf.8; utility now has - a <literal>-V</literal> flag, which lists information such - as serial numbers for each device.</para> - - <para revision="262158">A bug that would allow creating - a &man.zfs.8; snapshot of an inconsistent dataset has been - fixed.</para> - - <para revision="262160">Receiving a &man.zfs.8; dataset with - <command>zfs recv -F</command> now properly destroys any - snapshots that were created since the incremental source - snapshot.</para> - - <para revision="263031">Installation from a read-only - <envar>.OBJDIR</envar> has been fixed.</para> - - <para revision="263031">A new shared library directory, - <filename class="directory">/usr/lib/private</filename>, - has been added for internal-use shared libraries.</para> - - <para revision="263031">A default - <filename>libmap32.conf</filename> has been added, for 32-bit - applications.</para> - - <para revision="263032">The <literal>libucl</literal> library, - a JSON-compatible configuration file parsing library, has been - imported.</para> - - <para revision="263038">The &man.pkg.7; package management - utility has been syncronized with <literal>head/</literal>. - This implements binary package signature verification when - bootstrapping the system with <command>pkg - bootstrap</command>.</para> - - <para revision="263042">The system timezone data files have - been updated to version tzdata2014a.</para> - - <para revision="263212">The NetBSD &man.make.1; utility, - <command>bmake</command> has been imported for compatibility - with the &os; Ports Collection. It is installed as - <command>bmake</command>, and the <command>make</command> - remains the &os; version.</para> - - <para revision="263326">The &man.fetch.3; library now - supports <literal>Last-Modified</literal> timestamps which - return UTC instead of GMT.</para> - - <para revision="263404">Aliases for the &man.zfs.8; commands - <literal>list -t snap</literal> and <literal>snap</literal> - have been added to match &oracle; Solaris 11.</para> - - <para revision="263406">A new flag, <literal>-p</literal>, has - been added to the &man.zfs.8; <literal>list</literal> command, - providing output in a parseable form.</para> - - <para revision="263421"><application>OpenPAM</application> has - been updated to Nummularia (20130907), which incorporates - several bug fixes and documentation improvements. The - &man.openpam.ttyconv.3; library has been completely - rewritten.</para> - - <para revision="264423">The &man.sh.1; command interpreter has - been updated to expand assignments after - <literal>export</literal>, <literal>local</literal>, and - <literal>readonly</literal> differently. As result of this - change, variable assignment such as <literal>local - v=$1</literal> will assign the first positional - parameter to <literal>v</literal>, even if - <literal>$1</literal> contains spaces, and - <literal>local w=<replaceable>~/myfile</replaceable></literal> - will expand the tilde (<literal>~</literal>).</para> - - <para revision="264699">The &man.find.1; utility has been - updated to implement <literal>-ignore_readdir_race</literal>. - Prior to this change, <literal>-ignore_readdir_race</literal> - existed as an option for GNU &man.find.1; compatibility, and - was ignored if specified. A counter primary, - <literal>-noignore_readdir_race</literal> now also exists, and - is the default behavior.</para> - - <para revision="266286">The &man.ps.1; utility has been updated - to include the <literal>-J</literal> flag, used to filter - output by matching &man.jail.8; IDs and names. Additionally, - argument <literal>0</literal> can be used to - <literal>-J</literal> to only list processes running on the - host system.</para> - - <para revision="266287">The &man.top.1; utility has been updated - to filter by &man.jail.8; ID or name, in followup to the - &man.ps.1; change in <literal>r265229</literal>.</para> - - <para revision="266818">The Blowfish &man.crypt.3; default - format has been changed to - <literal>$2b$</literal>.</para> - - <para revision="267114">The default &man.newsyslog.conf.5; now - includes files in the - <filename>/etc/newsyslog.conf.d/</filename> and - <filename>/usr/local/etc/newsyslog.conf.d/</filename> - directories by default for &man.newsyslog.8;.</para> - - <para revision="267243">A new flag, <quote>onifconsole</quote> - has been added to <filename>/etc/ttys</filename>. This allows - the system to provide a login prompt via serial console if the - device is an active kernel console, otherwise it is equivalent - to <literal>off</literal>.</para> - - <para revision="267379">The &man.arc4random.3; library has been - updated to match that of &os;-CURRENT.</para> - - <para revision="267411">The &man.pmcstat.8; utility has been - updated to include a new flag, <literal>-l</literal>, which - ends event collection after the specified number of - seconds.</para> - - <sect3 xml:id="periodic-scripts"> - <title>&man.periodic.8; Scripts</title> - - <para revision="263662">The - <filename>/etc/periodic/security/800.loginfail</filename> - &man.periodic.8; script has been refined to catch more - authentication failures and reduce false positives.</para> - </sect3> - - <sect3 xml:id="rc-scripts"> - <title>&man.rc.8; Scripts</title> - - <para revision="256917">Support for <quote>first boot</quote> - scripts has been added to &man.rc.8;. See &man.rc.8; and - &man.rc.conf.5; for implementation details.</para> - - <para revision="260432">The &man.rc.8; system will now - re-source &man.rc.conf.5; on receipt of - <literal>SIGALRM</literal>.</para> - </sect3> + <para> </para> </sect2> <sect2 xml:id="contrib"> <title>Contributed Software</title> - <para revision="255934">The &man.readline.3; library has been - updated to version 1.104.</para> - - <para revision="266711"><application>Sendmail</application> has - been updated to version 8.14.9.</para> - - <para revision="262706" contrib="sponsor" - sponsor="&dkhostmaster;"><application>BIND</application> has - been updated to version 9.9.5.</para> - - <para revision="263286">The &man.xz.1; utility has been updated - to a post-5.0.5 snapshot.</para> - - <para revision="263970"><application>OpenSSH</application> has - been updated to version 6.6p1.</para> - - <para revision="267285"><application>OpenSSL</application> has - been updated to version 0.9.8za.</para> + <para> </para> </sect2> <sect2 xml:id="releng"> <title>Release Engineering and Integration</title> - <para revision="260891">As part of the release build, the - &man.etcupdate.8; utility will bootstrap the system, allowing - &man.etcupdate.8; to work after the first upgrade of a - system.</para> - - <para revision="262879" contrib="sponsor" - sponsor="&ff;">The <filename>release.sh</filename> - script and release <filename>Makefile</filename> have been - updated to use &man.pkg.7; to populate the dvd installation - medium.</para> - - <para revision="263028">The &man.services.mkdb.8; utility has - been updated to support multiple byte orders. Similar to - &man.cap.mkdb.1;, the <filename>services.db</filename> will - be created with proper endinanness as part of - cross-architecture release builds.</para> + <para> </para> </sect2> </sect1>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201406210045.s5L0jis7034771>