From owner-svn-doc-head@freebsd.org Tue May 12 20:10:25 2020
Return-Path:
The release notes for FreeBSD 11.4-RELEASE contain + “®” symbol.
The release notes for FreeBSD 11.4-RELEASE contain a summary of the changes made to the FreeBSD base system on the 11.4-STABLE development line. This document lists applicable security advisories that were issued since the last @@ -71,12 +71,65 @@ disclosure
Insufficient ioctl(2) privilege checking
Incorrect user-controlled pointer use
Kernel memory disclosure with nested - jails
Multiple denial of service
Invalid mbuf(9) handling
Errata | Date | Topic |
---|---|---|
FreeBSD-EN-19:13.mds | 24 July 2019 | System crash from Intel CPU vulnerability + jails |
FreeBSD-SA-20:09.ntp | 18 March 2020 | Multiple denial of service |
FreeBSD-SA-20:10.ipfw | 21 April 2020 | Invalid mbuf(9) handling |
FreeBSD-SA-20:12.libalias | 12 May 2020 | Insufficient packet length + validation |
FreeBSD-SA-20:13.libalias | 12 May 2020 | Memory disclosure vulnerability |
Errata | Date | Topic |
---|---|---|
FreeBSD-EN-19:13.mds | 24 July 2019 | System crash from Intel CPU vulnerability mitigation |
FreeBSD-EN-19:15.libunwind | 6 August 2019 | Incorrect exception handling |
FreeBSD-EN-19:16.bhyve | 20 August 2019 | Instruction emulation improvements |
FreeBSD-EN-19:17.ipfw | 20 August 2019 | "jail" keyword fix |
FreeBSD-EN-19:18.tzdata | 23 Oct ober 2019 | Timezone database information update |
FreeBSD-EN-20:01.ssp | 28 January 2020 | Imprecise orderring of canary initialization |
FreeBSD-EN-20:02.nmount | 28 January 2020 | Invalid pointer dereference |
FreeBSD-EN-20:04.pfctl | 18 March 2020 | Missing pfctl(8) tunable |
FreeBSD-EN-20:06.ipv6 | 18 March 2020 | Incorrect checksum calculations |
FreeBSD-EN-20:07.quotad | 21 April 2020 | Regression with certain NFS servers |
This section covers changes and additions to userland - applications, contributed software, and system utilities.
/etc/rc.d
+ applications, contributed software, and system utilities. The + camcontrol(8) utility has been updated to include support + for Accessible Max Address Configuration + (AMA). [r350801] + (Sponsored by + iXsystems)
The camcontrol(8) utility has been
+ updated to support block descriptors with the
+ modepage
subcommand. [r351582]
The usbconfig(8) utility has been
+ updated to include the detach_kernel_driver
+ command. [r351843]
The jot(1) utility has been updated + to allow an endless stream of random data within the specified + bounds. [r351873]
The freebsd-update(8) utility has
+ been updated to include two new commands,
+ updatesready
and
+ showconfig
. [r352758]
The cron(8) utility has been
+ updated to support two new flags in crontab(5),
+ -n
and -q
, which
+ suppress mail on successful runs and suppress logging of
+ command execution, respectively. [r353134]
The zfs(8) utility has been updated + to support renaming bookmarks. [r353759]
The usbconfig(8) utility has been
+ updated to include the dump_stats
+ command. [r356401]
The fsck_ffs(8) and newfs(8) + utilities has been updated to fix recovery information with + sector sizes up to 64k. [r356905]
The certctl(8) utility has been + added. [r357082]
The env(1) utility has been updated
+ to include the -L
and -U
+ options, which are used to set the environment of the
+ specified user from login.conf
and
+ ~/.login_conf
, respectively. [r357791]
The syslogd(8) utility has been + updated to add property-based filters. [r359740]
The bzip2(1) utility has been + updated to version 1.0.8. [r351007]
The WPA + utilities have been updated to version 2.9. [r351611]
The tcsh(1) utility has been + updated to version 6.21.0. [r354195]
The less(1) utility has been + updated to version 551. [r355504]
The libbsdxml(3) library has + been updated to version 2.2.9. [r355604]
OpenSSL has + been update to version 1.0.2u. [r356290]
The pcap(3) library has been + updated to version 1.9.1. [r356341]
The tcpdump(1) utility has been + updated to version 4.9.3. [r356341]
The unbound(8) utility has been + updated to version 1.9.6. [r356345]
The mtree(8) utility has been + updated to include several bug fixes. [r356533]
The archive(3) library has been + updated to version 3.4.2. [r358088]
The ntpd(8) utilities have been + updated to version 4.2.8p14. [r358659]
The timezone database files have been + updated to version 2020a. [r360362]
The file(1) utility has been + updated to version 5.38. [r360521]
The xz(1) utility has been updated + to version 5.2.5. [r360523]
The clang, + llvm, + lld, + lldb, + libunwind, + openmp, + compiler-rt utilities and + libc++ have been updated to version + 10.0.0. [r360822]
This section covers changes to kernel configurations, system tuning, and system control parameters that are not otherwise @@ -85,9 +138,14 @@ machines, hypervisors, and virtualization environments, as well as hardware changes and updates that do not otherwise fit in other sections of this document.
This section covers changes and additions to file systems - and other storage subsystems, both local and networked.
This section covers the boot loader, boot menu, and other + and other storage subsystems, both local and networked.
The ZFS + ZIL (ZFS intent log) + maximum block size is now tunable. [r359554]
This section covers the boot loader, boot menu, and other boot-related changes.
This section describes changes that affect networking in - FreeBSD.
This section covers changes to the FreeBSD Ports + FreeBSD.
The libalias(3) library and + ipfw(4) packet filter have been updated to add support + for RFC 6598/Carrier Grade + NAT subnets. [r359695]
This section covers changes to the FreeBSD Ports Collection, package infrastructure, and package maintenance and installation tools.
This section covers changes to the FreeBSD Documentation Project sources and toolchain.