svn commit: r368643 - in releng/11.4: . crypto/openssl/crypto/asn1 crypto/openssl/crypto/x509v3 sys/conf

Author: gordon Date: Mon Dec 14 21:20:55 2020 New Revision: 368643 URL: https://svnweb.freebsd.org/changeset/base/368643 Log: Fix OpenSSL NULL pointer de-reference. Approved by: so Security: FreeBSD-SA-20:33.openssl Security: CVE-2020-1971 Modified: releng/11.4/UPDATING re

svn commit: r368463 - in releng: 12.1 12.1/crypto/openssl/crypto/asn1 12.1/crypto/openssl/crypto/err 12.1/crypto/openssl/crypto/x509v3 12.1/crypto/openssl/include/openssl 12.1/sys/conf 12.2 12.2/cr...

Author: gordon Date: Tue Dec 8 19:10:40 2020 New Revision: 368463 URL: https://svnweb.freebsd.org/changeset/base/368463 Log: Fix OpenSSL NULL pointer de-reference. Approved by: so Security: FreeBSD-SA-20:33.openssl Security: CVE-2020-1971 Modified: releng/12.1/UPDATING re

svn commit: r368257 - in releng: 11.4 11.4/sys/conf 12.1 12.1/sys/conf 12.2 12.2/sys/conf

Author: gordon Date: Tue Dec 1 19:40:58 2020 New Revision: 368257 URL: https://svnweb.freebsd.org/changeset/base/368257 Log: Add UPDATING entries and bump version. Approved by: so Modified: releng/11.4/UPDATING releng/11.4/sys/conf/newvers.sh releng/12.1/UPDATING releng/12.1/sys/

svn commit: r368256 - in releng: 11.4/usr.sbin/rtsold 12.1/usr.sbin/rtsold 12.2/usr.sbin/rtsold

Author: gordon Date: Tue Dec 1 19:39:44 2020 New Revision: 368256 URL: https://svnweb.freebsd.org/changeset/base/368256 Log: Fix multiple vulnerabilities in rtsold. Approved by: so Security: FreeBSD-SA-20:32.rtsold Security: CVE-2020-25577 Modified: releng/11.4/usr.sbin/rts

svn commit: r368255 - in releng: 11.4/sys/netinet6 12.1/sys/netinet6 12.2/sys/netinet6

Author: gordon Date: Tue Dec 1 19:38:52 2020 New Revision: 368255 URL: https://svnweb.freebsd.org/changeset/base/368255 Log: Fix ICMPv6 use-after-free in error message handling. Approved by: so Security: FreeBSD-SA-20:31.icmp6 Security: CVE-2020-7469 Modified: releng/11.4/s

svn commit: r368254 - in releng: 12.1/sys/kern 12.2/sys/kern

Author: gordon Date: Tue Dec 1 19:37:33 2020 New Revision: 368254 URL: https://svnweb.freebsd.org/changeset/base/368254 Log: Fix race condition in callout CPU migration. Approved by: so Security: FreeBSD-EN-20:22.callout Modified: releng/12.1/sys/kern/kern_timeout.c releng/12.2

svn commit: r368252 - releng/12.2/sbin/ipfw

Author: gordon Date: Tue Dec 1 19:36:36 2020 New Revision: 368252 URL: https://svnweb.freebsd.org/changeset/base/368252 Log: Fix uninitialized variable in ipfw. Approved by: so Security: FreeBSD-EN-20:21.ipfw Modified: releng/12.2/sbin/ipfw/dummynet.c releng/12.2/sbin/ipfw/ipfw

svn commit: r368251 - in releng: 11.4/contrib/tzdata 12.1/contrib/tzdata 12.2/contrib/tzdata

Author: gordon Date: Tue Dec 1 19:35:48 2020 New Revision: 368251 URL: https://svnweb.freebsd.org/changeset/base/368251 Log: Update timezone database information. Approved by: so Security: FreeBSD-EN-20:20.tzdata Modified: releng/11.4/contrib/tzdata/Makefile releng/11.4/contrib

svn commit: r368249 - in releng: 12.1/sys/amd64/linux 12.1/sys/amd64/linux32 12.1/sys/arm64/linux 12.1/sys/compat/freebsd32 12.1/sys/i386/linux 12.1/sys/kern 12.2/sys/amd64/linux 12.2/sys/amd64/lin...

Author: gordon Date: Tue Dec 1 19:34:45 2020 New Revision: 368249 URL: https://svnweb.freebsd.org/changeset/base/368249 Log: Fix execve/fexecve system call auditing. Approved by: so Security: FreeBSD-EN-20:19.audit Modified: releng/12.1/sys/amd64/linux/linux_machdep.c releng/12

svn commit: r365782 - in releng: 11.3 11.3/sys/conf 11.4 11.4/sys/conf 12.1 12.1/sys/conf 12.2 12.2/sys/conf

Author: gordon Date: Tue Sep 15 21:48:24 2020 New Revision: 365782 URL: https://svnweb.freebsd.org/changeset/base/365782 Log: Add UPDATING entries and bump version. Approved by: so Approved by: re (implicit for releng/12.2) Modified: releng/11.3/UPDATING releng/11.3/sys/conf/newver

svn commit: r365781 - in releng: 11.3/libexec/ftpd 11.4/libexec/ftpd 12.1/libexec/ftpd 12.2/libexec/ftpd

Author: gordon Date: Tue Sep 15 21:47:44 2020 New Revision: 365781 URL: https://svnweb.freebsd.org/changeset/base/365781 Log: Fix ftpd privilege escalation via ftpchroot. Approved by: so Approved by: re (implicit for releng/12.2) Security: FreeBSD-SA-20:30.ftpd Security: CVE

svn commit: r365780 - in releng: 11.3/sys/amd64/vmm/amd 11.4/sys/amd64/vmm/amd 12.1/sys/amd64/vmm/amd 12.2/sys/amd64/vmm/amd

Author: gordon Date: Tue Sep 15 21:46:39 2020 New Revision: 365780 URL: https://svnweb.freebsd.org/changeset/base/365780 Log: Fix bhyve SVM guest escape. This actually has a patch to sys/amd64/vmm/amd/svm.c that was accidentally committed as part of r365779. Approved by: so Approv

svn commit: r365779 - in releng: 11.3/sys/amd64/vmm/amd 11.3/sys/amd64/vmm/intel 11.4/sys/amd64/vmm/amd 11.4/sys/amd64/vmm/intel 12.1/sys/amd64/vmm/amd 12.1/sys/amd64/vmm/intel 12.2/sys/amd64/vmm/a...

Author: gordon Date: Tue Sep 15 21:43:41 2020 New Revision: 365779 URL: https://svnweb.freebsd.org/changeset/base/365779 Log: Fix bhyve privilege escalation via VMCS access. Approved by: so Approved by: re (implicit for releng/12.2) Security: FreeBSD-SA-20:28.bhyve_vmcs Security

svn commit: r365778 - in releng: 11.3/sys/dev/usb/net 11.4/sys/dev/usb/net 12.1/sys/dev/usb/net 12.2/sys/dev/usb/net

Author: gordon Date: Tue Sep 15 21:42:05 2020 New Revision: 365778 URL: https://svnweb.freebsd.org/changeset/base/365778 Log: Fix ure device driver susceptible to packet-in-packet attack. Approved by: so Approved by: re (implicit for releng/12.2) Security: FreeBSD-SA-20:27.ure S

svn commit: r365720 - head/sys/conf

Author: gordon Date: Mon Sep 14 14:45:30 2020 New Revision: 365720 URL: https://svnweb.freebsd.org/changeset/base/365720 Log: Partially revert r346018 and use the if/then construct instead of shell. There are a couple of places in the tree that directly parse the newvers.sh script looking

svn commit: r365258 - in releng: 11.3 11.3/sys/conf 11.4 11.4/sys/conf 12.1 12.1/sys/conf

Author: gordon Date: Wed Sep 2 16:29:40 2020 New Revision: 365258 URL: https://svnweb.freebsd.org/changeset/base/365258 Log: Add UPDATING entries and bump version. Approved by: so Modified: releng/11.3/UPDATING releng/11.3/sys/conf/newvers.sh releng/11.4/UPDATING releng/11.4/sys/

svn commit: r365257 - in releng: 11.3/sbin/dhclient 11.4/sbin/dhclient 12.1/sbin/dhclient

Author: gordon Date: Wed Sep 2 16:25:31 2020 New Revision: 365257 URL: https://svnweb.freebsd.org/changeset/base/365257 Log: Fix dhclient heap overflow. Approved by: so Security: FreeBSD-SA-20:26.dhclient Security: CVE-2020-7461 Modified: releng/11.3/sbin/dhclient/options.c

svn commit: r365256 - in releng: 11.3/sys/netinet 11.4/sys/netinet 12.1/sys/netinet

Author: gordon Date: Wed Sep 2 16:24:32 2020 New Revision: 365256 URL: https://svnweb.freebsd.org/changeset/base/365256 Log: Fix SCTP socket use-after-free. Approved by: so Security: FreeBSD-SA-20:25.sctp Security: CVE-2020-7463 Modified: releng/11.3/sys/netinet/sctp_input.

svn commit: r365255 - releng/11.3/sys/netinet6

Author: gordon Date: Wed Sep 2 16:23:15 2020 New Revision: 365255 URL: https://svnweb.freebsd.org/changeset/base/365255 Log: Fix IPv6 Hop-by-Hop options use-after-free. Approved by: so Security: FreeBSD-SA-20:24.ipv6 Security: CVE-2020-7462 Modified: releng/11.3/sys/netinet

svn commit: r365254 - in releng: 11.3/sys/kern 11.4/sys/kern

Author: gordon Date: Wed Sep 2 16:22:14 2020 New Revision: 365254 URL: https://svnweb.freebsd.org/changeset/base/365254 Log: Fix getfsstat compatibility system call panic. Approved by: so Security: FreeBSD-EN-20:18.getfsstat Modified: releng/11.3/sys/kern/vfs_syscalls.c releng/

svn commit: r365253 - in releng: 11.3/sys/compat/linux 11.4/sys/compat/linux 12.1/sys/compat/linux

Author: gordon Date: Wed Sep 2 16:21:27 2020 New Revision: 365253 URL: https://svnweb.freebsd.org/changeset/base/365253 Log: Fix FreeBSD Linux ABI kernel panic. Approved by: so Security: FreeBSD-EN-20:17.linuxthread Modified: releng/11.3/sys/compat/linux/linux_emul.c releng/11.

svn commit: r363924 - in releng: 11.3 11.3/sys/conf 11.4 11.4/sys/conf 12.1 12.1/sys/conf

Author: gordon Date: Wed Aug 5 17:14:37 2020 New Revision: 363924 URL: https://svnweb.freebsd.org/changeset/base/363924 Log: Add UPDATING entries and bump version. Approved by: so Modified: releng/11.3/UPDATING releng/11.3/sys/conf/newvers.sh releng/11.4/UPDATING releng/11.4/sys/

svn commit: r363922 - in releng: 11.3/contrib/sqlite3 11.3/contrib/sqlite3/tea 11.3/contrib/sqlite3/tea/generic 11.3/contrib/sqlite3/tea/win 11.4/contrib/sqlite3 11.4/contrib/sqlite3/tea 11.4/contr...

Author: gordon Date: Wed Aug 5 17:13:08 2020 New Revision: 363922 URL: https://svnweb.freebsd.org/changeset/base/363922 Log: Fix multiple vulnerabilities in sqlite3. Approved by: so Security: FreeBSD-SA-20:22.sqlite Security: CVE-2020-11655 Security: CVE-2020-11656 Sec

svn commit: r363923 - in releng: 11.3/sys/compat/freebsd32 11.4/sys/compat/freebsd32 12.1/sys/compat/freebsd32

Author: gordon Date: Wed Aug 5 17:14:01 2020 New Revision: 363923 URL: https://svnweb.freebsd.org/changeset/base/363923 Log: Fix sendmsg(2) privilege escalation. Approved by: so Security: FreeBSD-SA-20:23.sendmsg Security: CVE-2020-7460 Modified: releng/11.3/sys/compat/free

svn commit: r363921 - in releng: 11.3/sys/dev/usb/net 11.4/sys/dev/usb/net 12.1/sys/dev/usb/net

Author: gordon Date: Wed Aug 5 17:11:18 2020 New Revision: 363921 URL: https://svnweb.freebsd.org/changeset/base/363921 Log: Fix memory corruption in USB network device drivers. Approved by: so Security: FreeBSD-SA-20:21.usb_net Security: CVE-2020-7459 Modified: releng/11.3

svn commit: r363920 - releng/12.1/sys/dev/vmware/vmxnet3

Author: gordon Date: Wed Aug 5 17:09:54 2020 New Revision: 363920 URL: https://svnweb.freebsd.org/changeset/base/363920 Log: Fix vmx driver packet loss and degraded performance. Approved by: so Security: FreeBSD-EN-20:16.vmx Modified: releng/12.1/sys/dev/vmware/vmxnet3/if_vmx.c

svn commit: r363030 - in releng: 11.3 11.3/sys/conf 11.4 11.4/sys/conf 12.1 12.1/sys/conf

Author: gordon Date: Wed Jul 8 20:26:19 2020 New Revision: 363030 URL: https://svnweb.freebsd.org/changeset/base/363030 Log: Add UPDATING entries and bump version. Approved by: so Modified: releng/11.3/UPDATING releng/11.3/sys/conf/newvers.sh releng/11.4/UPDATING releng/11.4/sys/

svn commit: r363029 - in releng/12.1: contrib/unbound contrib/unbound/.github contrib/unbound/cachedb contrib/unbound/compat contrib/unbound/contrib contrib/unbound/daemon contrib/unbound/dns64 con...

Author: gordon Date: Wed Jul 8 20:25:06 2020 New Revision: 363029 URL: https://svnweb.freebsd.org/changeset/base/363029 Log: Fix multiple vulnerabilities in unbound. Approved by: so Security: FreeBSD-SA-20:19.unbound Security: CVE-2020-12662 Security: CVE-2020-12663 Add

svn commit: r363028 - in releng/11.4: contrib/unbound contrib/unbound/.github contrib/unbound/cachedb contrib/unbound/compat contrib/unbound/contrib contrib/unbound/daemon contrib/unbound/doc contr...

Author: gordon Date: Wed Jul 8 20:22:38 2020 New Revision: 363028 URL: https://svnweb.freebsd.org/changeset/base/363028 Log: Fix multiple vulnerabilities in unbound. Approved by: so Security: FreeBSD-SA-20:19.unbound Security: CVE-2020-12662 Security: CVE-2020-12663 Add

svn commit: r363027 - in releng/11.3: . contrib/unbound contrib/unbound/.github contrib/unbound/cachedb contrib/unbound/compat contrib/unbound/contrib contrib/unbound/daemon contrib/unbound/dns64 c...

Author: gordon Date: Wed Jul 8 20:20:59 2020 New Revision: 363027 URL: https://svnweb.freebsd.org/changeset/base/363027 Log: Fix multiple vulnerabilities in unbound. Approved by: so Security: FreeBSD-SA-20:19.unbound Security: CVE-2020-12662 Security: CVE-2020-12663 Add

svn commit: r363026 - in releng: 11.3/sys/netinet6 11.4/sys/netinet6 12.1/sys/netinet6

Author: gordon Date: Wed Jul 8 20:11:40 2020 New Revision: 363026 URL: https://svnweb.freebsd.org/changeset/base/363026 Log: Fix IPv6 socket option race condition and use after free. Approved by: so Security: FreeBSD-SA-20:20.ipv6 Security: CVE-2020-7457 Modified: releng/11

svn commit: r363025 - in releng/11.4/lib/libc: gen tests/gen

Author: gordon Date: Wed Jul 8 20:08:05 2020 New Revision: 363025 URL: https://svnweb.freebsd.org/changeset/base/363025 Log: Fix posix_spawnp(3) buffer overflow. Approved by: so Security: FreeBSD-SA-20:18.posix_spawnp Security: CVE-2020-7458 Added: releng/11.4/lib/libc/test

svn commit: r363024 - in releng: 11.3/sys/dev/mps 11.4/sys/dev/mps 12.1/sys/dev/mps

Author: gordon Date: Wed Jul 8 19:58:00 2020 New Revision: 363024 URL: https://svnweb.freebsd.org/changeset/base/363024 Log: Fix kernel panic in mps(4) driver. Approved by: so Security: FreeBSD-EN-20:15.mps Modified: releng/11.3/sys/dev/mps/mps_user.c releng/11.4/sys/dev/mps/mp

svn commit: r363023 - in releng: 11.3/sys/compat/linuxkpi/common/src 12.1/sys/compat/linuxkpi/common/src

Author: gordon Date: Wed Jul 8 19:57:24 2020 New Revision: 363023 URL: https://svnweb.freebsd.org/changeset/base/363023 Log: Fix kernel panic in LinuxKPI subsystem. Approved by: so Security: FreeBSD-EN-20:14.linuxpki Modified: releng/11.3/sys/compat/linuxkpi/common/src/linux_comp

svn commit: r363022 - in releng/12.1: sys/amd64/vmm/intel usr.sbin/bhyve

Author: gordon Date: Wed Jul 8 19:56:34 2020 New Revision: 363022 URL: https://svnweb.freebsd.org/changeset/base/363022 Log: Fix host crash in bhyve with PCI device passthrough. Approved by: so Security: FreeBSD-EN-20:13.bhyve Modified: releng/12.1/sys/amd64/vmm/intel/vtd.c rel

svn commit: r362620 - head/secure/lib/libcrypto

Author: gordon Date: Thu Jun 25 19:35:37 2020 New Revision: 362620 URL: https://svnweb.freebsd.org/changeset/base/362620 Log: Revert OPENSSL_NO_SSL3_METHOD to keep ABI compatibility. This define caused a couple of symbols to disappear. To keep ABI compatibility, we are going to keep the s

svn commit: r361973 - in releng: 11.3 11.3/sys/conf 11.4 11.4/sys/conf 12.1 12.1/sys/conf

Author: gordon Date: Tue Jun 9 16:15:07 2020 New Revision: 361973 URL: https://svnweb.freebsd.org/changeset/base/361973 Log: Add UPDATING entries and bump version. Approved by: so Approved by: re (implicit) Modified: releng/11.3/UPDATING releng/11.3/sys/conf/newvers.sh releng/11

svn commit: r361972 - in releng: 11.3/lib/libusbhid 11.3/sys/dev/usb 11.4/lib/libusbhid 11.4/sys/dev/usb 12.1/lib/libusbhid 12.1/sys/dev/usb

Author: gordon Date: Tue Jun 9 16:13:54 2020 New Revision: 361972 URL: https://svnweb.freebsd.org/changeset/base/361972 Log: Fix USB HID descriptor parsing error. Approved by: so Approved by: re (implicit) Security: FreeBSD-SA-20:17.usb Security: CVE-2020-7456 Modified:

svn commit: r361971 - releng/12.1/sys/net

Author: gordon Date: Tue Jun 9 16:11:54 2020 New Revision: 361971 URL: https://svnweb.freebsd.org/changeset/base/361971 Log: Fix iflib watchdog timeout resetting idle queues. Approved by: so Security: FreeBSD-EN-20:12.iflib Modified: releng/12.1/sys/net/iflib.c Modified: releng/

svn commit: r361970 - releng/12.1/sys/dev/ena

Author: gordon Date: Tue Jun 9 16:10:57 2020 New Revision: 361970 URL: https://svnweb.freebsd.org/changeset/base/361970 Log: Fix stability issues in ena(4) driver. Approved by: so Security: FreeBSD-EN-20:11.ena Modified: releng/12.1/sys/dev/ena/ena.c releng/12.1/sys/dev/ena/ena

svn commit: r361392 - head/secure/lib/libcrypto

Author: gordon Date: Fri May 22 16:53:39 2020 New Revision: 361392 URL: https://svnweb.freebsd.org/changeset/base/361392 Log: Remove support for SSLv3 from the OpenSSL build. This is the default configuration in OpenSSL 1.1.1 already. This moves to align with that default. Reported b

svn commit: r360978 - in releng: 11.3 11.3/sys/conf 11.4 11.4/sys/conf 12.1 12.1/sys/conf

Author: gordon Date: Tue May 12 17:00:23 2020 New Revision: 360978 URL: https://svnweb.freebsd.org/changeset/base/360978 Log: Add UPDATING entries and bump version. Approved by: so Approved by: re (implicit) Modified: releng/11.3/UPDATING releng/11.3/sys/conf/newvers.sh releng/11

svn commit: r360977 - releng/12.1/sys/opencrypto

Author: gordon Date: Tue May 12 16:59:09 2020 New Revision: 360977 URL: https://svnweb.freebsd.org/changeset/base/360977 Log: Fix insufficient cryptodev MAC key length check. Approved by: so Security: FreeBSD-SA-20:16.cryptodev Security: CVE-2019-15880 Modified: releng/12.1/

svn commit: r360976 - in releng: 11.3/sys/opencrypto 12.1/sys/opencrypto

Author: gordon Date: Tue May 12 16:57:47 2020 New Revision: 360976 URL: https://svnweb.freebsd.org/changeset/base/360976 Log: Fix use after free in cryptodev module. Approved by: so Security: FreeBSD-SA-20:15.cryptodev Security: CVE-2019-15879 Modified: releng/11.3/sys/openc

svn commit: r360975 - releng/11.3/sys/netinet

Author: gordon Date: Tue May 12 16:55:32 2020 New Revision: 360975 URL: https://svnweb.freebsd.org/changeset/base/360975 Log: Fix improper checking in SCTP-AUTH shared key update. Approved by: so Security: FreeBSD-SA-20:14.sctp Security: CVE-2019-15878 Modified: releng/11.3/

svn commit: r360974 - in releng: 11.3/sys/netinet/libalias 11.4/sys/netinet/libalias 12.1/sys/netinet/libalias

Author: gordon Date: Tue May 12 16:54:39 2020 New Revision: 360974 URL: https://svnweb.freebsd.org/changeset/base/360974 Log: Fix memory disclosure vulnerability in libalias. Approved by: so Approved by: re (implicit) Security: FreeBSD-SA-20:13.libalias Security: CVE-2020-74

svn commit: r360972 - in releng: 11.3/sys/netinet/libalias 11.4/sys/netinet/libalias 12.1/sys/netinet/libalias

Author: gordon Date: Tue May 12 16:51:11 2020 New Revision: 360972 URL: https://svnweb.freebsd.org/changeset/base/360972 Log: Fix insufficient packet length validation in libalias. Approved by: so Approved by: re (implicit) Security: FreeBSD-SA-20:12.libalias Security: CVE-2

svn commit: r360970 - releng/12.1/sys/dev/e1000

Author: gordon Date: Tue May 12 16:46:14 2020 New Revision: 360970 URL: https://svnweb.freebsd.org/changeset/base/360970 Log: Fix igb interfaces failing to switch to inactive state. Approved by: so Security: FreeBSD-EN-20:09.igb Modified: releng/12.1/sys/dev/e1000/if_em.c Modifie

svn commit: r360969 - in releng: 11.3/contrib/tzdata 12.1/contrib/tzdata

Author: gordon Date: Tue May 12 16:44:13 2020 New Revision: 360969 URL: https://svnweb.freebsd.org/changeset/base/360969 Log: Update to tzdata 2020a. Approved by: so Security: EN-20:08.tzdata Modified: releng/11.3/contrib/tzdata/Makefile releng/11.3/contrib/tzdata/NEWS releng/

svn commit: r360151 - in releng: 11.3 11.3/sys/conf 12.1 12.1/sys/conf

Author: gordon Date: Tue Apr 21 15:54:08 2020 New Revision: 360151 URL: https://svnweb.freebsd.org/changeset/base/360151 Log: Add UPDATING entries and bump version. Approved by: so Modified: releng/11.3/UPDATING releng/11.3/sys/conf/newvers.sh releng/12.1/UPDATING releng/12.1/sys/

svn commit: r360150 - releng/12.1/crypto/openssl/ssl

Author: gordon Date: Tue Apr 21 15:53:08 2020 New Revision: 360150 URL: https://svnweb.freebsd.org/changeset/base/360150 Log: Fix OpenSSL remote denial of service vulnerability. Approved by: so Security: FreeBSD-SA-20:11.openssl Security: CVE-2020-1967 Modified: releng/12.1/

svn commit: r360149 - in releng: 11.3/sys/netpfil/ipfw 12.1/sys/netpfil/ipfw

Author: gordon Date: Tue Apr 21 15:52:22 2020 New Revision: 360149 URL: https://svnweb.freebsd.org/changeset/base/360149 Log: Fix ipfw invalid mbuf handling. Approved by: so Security: FreeBSD-SA-20:10.ipfw Security: CVE-2019-5614 Security: CVE-2019-15874 Modified: rele

svn commit: r360148 - in releng: 11.3/usr.bin/quota 12.1/usr.bin/quota

Author: gordon Date: Tue Apr 21 15:50:57 2020 New Revision: 360148 URL: https://svnweb.freebsd.org/changeset/base/360148 Log: Fix regression in rpc.rquotad with certain NFS servers. Approved by: so Security: FreeBSD-EN-20:07.quotad Modified: releng/11.3/usr.bin/quota/quota.c rel

svn commit: r360147 - stable/12/crypto/openssl/ssl

Author: gordon Date: Tue Apr 21 15:47:58 2020 New Revision: 360147 URL: https://svnweb.freebsd.org/changeset/base/360147 Log: MFC: r360146 Fix OpenSSL remote denial of service. See https://www.openssl.org/news/secadv/20200421.txt for details. Approved by: so Security: FreeBSD-

svn commit: r360146 - head/crypto/openssl/ssl

Author: gordon Date: Tue Apr 21 15:44:20 2020 New Revision: 360146 URL: https://svnweb.freebsd.org/changeset/base/360146 Log: Fix OpenSSL remote denial of service. See https://www.openssl.org/news/secadv/20200421.txt for details. Approved by: so Security: CVE-2020-1967 Modified

svn commit: r359145 - in releng: 11.3 11.3/sys/conf 12.1 12.1/sys/conf

Author: gordon Date: Thu Mar 19 17:01:57 2020 New Revision: 359145 URL: https://svnweb.freebsd.org/changeset/base/359145 Log: Add UPDATING entries and bump version. Approved by: so Modified: releng/11.3/UPDATING releng/11.3/sys/conf/newvers.sh releng/12.1/UPDATING releng/12.1/sys/

svn commit: r359144 - in releng: 11.3/contrib/ntp 11.3/contrib/ntp/html 11.3/contrib/ntp/html/drivers 11.3/contrib/ntp/include 11.3/contrib/ntp/libntp 11.3/contrib/ntp/libparse 11.3/contrib/ntp/ntp...

Author: gordon Date: Thu Mar 19 16:52:41 2020 New Revision: 359144 URL: https://svnweb.freebsd.org/changeset/base/359144 Log: Fix multiple denial of service in ntpd. Approved by: so Security: FreeBSD-SA-20:09.ntp Added: releng/11.3/contrib/ntp/include/ntp_calgps.h releng/11.3/co

svn commit: r359142 - in releng: 11.3/sys/kern 12.1/sys/kern

Author: gordon Date: Thu Mar 19 16:51:33 2020 New Revision: 359142 URL: https://svnweb.freebsd.org/changeset/base/359142 Log: Fix kernel memory disclosure with nested jails. Approved by: so Security: FreeBSD-SA-20:08.jail Security: CVE-2020-7453 Modified: releng/11.3/sys/ker

svn commit: r359141 - in releng: 11.3/sys/net 12.1/sys/net

Author: gordon Date: Thu Mar 19 16:50:36 2020 New Revision: 359141 URL: https://svnweb.freebsd.org/changeset/base/359141 Log: Fix incorrect user-controlled pointer use in epair. Approved by: so Security: FreeBSD-SA-20:07.epair Security: CVE-2020-7452 Modified: releng/11.3/sy

svn commit: r359140 - releng/12.1/sys/dev/ixl

Author: gordon Date: Thu Mar 19 16:49:32 2020 New Revision: 359140 URL: https://svnweb.freebsd.org/changeset/base/359140 Log: Fix insufficient ixl(4) ioctl(2) privilege checking. Approved by: so Security: FreeBSD-SA-20:06.if_ixl_ioctl Security: CVE-2019-15877 Modified: relen

svn commit: r359139 - in releng: 11.3/sys/dev/oce 12.1/sys/dev/oce

Author: gordon Date: Thu Mar 19 16:48:29 2020 New Revision: 359139 URL: https://svnweb.freebsd.org/changeset/base/359139 Log: Fix insufficient oce(4) ioctl(2) privilege checking. Approved by: so Security: FreeBSD-SA-20:05.if_oce_ioctl Security: CVE-2019-15876 Modified: relen

svn commit: r359138 - in releng: 11.3/sys/netinet 12.1/sys/netinet

Author: gordon Date: Thu Mar 19 16:46:01 2020 New Revision: 359138 URL: https://svnweb.freebsd.org/changeset/base/359138 Log: Fix TCP IPv6 SYN cache kernel information disclosure. Approved by: so Security: FreeBSD-SA-20:04.tcp Security: CVE-2020-7451 Modified: releng/11.3/sy

svn commit: r359137 - in releng: 11.3/sys/netinet6 12.1/sys/netinet6

Author: gordon Date: Thu Mar 19 16:43:37 2020 New Revision: 359137 URL: https://svnweb.freebsd.org/changeset/base/359137 Log: Fix incorrect checksum calculations with IPv6 extension headers. Approved by: so Security: FreeBSD-EN-20:06.ipv6 Modified: releng/11.3/sys/netinet6/ip6_out

svn commit: r359136 - in releng/12.1/sys: dev/mlx5/mlx5_en netinet netinet6 sys

Author: gordon Date: Thu Mar 19 16:41:29 2020 New Revision: 359136 URL: https://svnweb.freebsd.org/changeset/base/359136 Log: Fix packet forwarding performance in mlx5en(4) driver. Approved by: so Security: FreeBSD-EN-20:05.mlx5en Modified: releng/12.1/sys/dev/mlx5/mlx5_en/mlx5_en

svn commit: r359135 - releng/11.3/sys/netpfil/pf

Author: gordon Date: Thu Mar 19 16:35:15 2020 New Revision: 359135 URL: https://svnweb.freebsd.org/changeset/base/359135 Log: Fix missing pfctl(8) tunable. Approved by: so Security: FreeBSD-EN-20:04.pfctl Modified: releng/11.3/sys/netpfil/pf/pf.c releng/11.3/sys/netpfil/pf/pf_io

svn commit: r359134 - releng/12.1/crypto/openssh

Author: gordon Date: Thu Mar 19 16:34:11 2020 New Revision: 359134 URL: https://svnweb.freebsd.org/changeset/base/359134 Log: Fix misleading log messages upon successful sshd login. Approved by: so Security: FreeBSD-EN-20:03.sshd Modified: releng/12.1/crypto/openssh/monitor.c Mod

svn commit: r357220 - in releng: 11.3 11.3/sys/conf 12.0 12.0/sys/conf 12.1 12.1/sys/conf

Author: gordon Date: Tue Jan 28 18:58:37 2020 New Revision: 357220 URL: https://svnweb.freebsd.org/changeset/base/357220 Log: Add UPDATING entries and bump version. Approved by: so Modified: releng/11.3/UPDATING releng/11.3/sys/conf/newvers.sh releng/12.0/UPDATING releng/12.0/sys/

svn commit: r357219 - in releng: 11.3/sys/kern 12.0/sys/kern 12.1/sys/kern

Author: gordon Date: Tue Jan 28 18:57:45 2020 New Revision: 357219 URL: https://svnweb.freebsd.org/changeset/base/357219 Log: Fix kernel stack data disclosure Reported by: Ilja Van Sprundel Approved by: so Security: FreeBSD-SA-20:03.thrmisc Security: CVE-2019-15875 Modified

svn commit: r357218 - releng/12.0/sys/netipsec

Author: gordon Date: Tue Jan 28 18:56:46 2020 New Revision: 357218 URL: https://svnweb.freebsd.org/changeset/base/357218 Log: Fix missing IPsec anti-replay window check Reported by: Jean-Francois HREN Approved by: so Security: FreeBSD-SA-20:02.ipsec Security: CVE-2019-5613

svn commit: r357217 - in releng: 11.3/lib/libfetch 12.0/lib/libfetch 12.1/lib/libfetch

Author: gordon Date: Tue Jan 28 18:55:25 2020 New Revision: 357217 URL: https://svnweb.freebsd.org/changeset/base/357217 Log: Fix libfetch buffer overflow Reported by: Duncan Overbruck Approved by: so Security: FreeBSD-SA-20:01.libfetch Security: CVE-2020-7450 Modified: r

svn commit: r357216 - in releng: 11.3/sys/kern 12.0/sys/kern

Author: gordon Date: Tue Jan 28 18:54:15 2020 New Revision: 357216 URL: https://svnweb.freebsd.org/changeset/base/357216 Log: Fix nmount invalid pointer dereference Submitted by: Andrew Turner Approved by: so Security: FreeBSD-EN-20:02.nmount Modified: releng/11.3/sys/kern/vfs_m

svn commit: r357215 - in releng: 11.3/lib/libc/secure 12.0/lib/libc/secure 12.1/lib/libc/secure

Author: gordon Date: Tue Jan 28 18:53:14 2020 New Revision: 357215 URL: https://svnweb.freebsd.org/changeset/base/357215 Log: Fix imprecise ordering of SSP canary initialization Submitted by: Kyle Evans Approved by: so Security: FreeBSD-EN-20:01.ssp Modified: releng/11.3/lib/lib

svn commit: r357214 - stable/11/lib/libfetch

Author: gordon Date: Tue Jan 28 18:42:06 2020 New Revision: 357214 URL: https://svnweb.freebsd.org/changeset/base/357214 Log: MFC 357212. Fix urldecode buffer overrun. Reported by:Duncan Overbruck Approved by:so Security: FreeBSD-SA-20:01.libfetch Security: CV

svn commit: r357213 - stable/12/lib/libfetch

Author: gordon Date: Tue Jan 28 18:40:55 2020 New Revision: 357213 URL: https://svnweb.freebsd.org/changeset/base/357213 Log: MFC 357212. Fix urldecode buffer overrun. Reported by: Duncan Overbruck Approved by: so Security: FreeBSD-SA-20:01.libfetch Security: CVE-2020-7

svn commit: r357212 - head/lib/libfetch

Author: gordon Date: Tue Jan 28 18:37:18 2020 New Revision: 357212 URL: https://svnweb.freebsd.org/changeset/base/357212 Log: Fix urldecode buffer overrun. Reported by: Duncan Overbruck Security: CVE-2020-7450 Modified: head/lib/libfetch/fetch.c Modified: head/lib/libfetch/fetch.

svn commit: r354654 - in releng: 11.3 11.3/sys/conf 12.0 12.0/sys/conf 12.1 12.1/sys/conf

Author: gordon Date: Tue Nov 12 18:13:51 2019 New Revision: 354654 URL: https://svnweb.freebsd.org/changeset/base/354654 Log: Add UPDATING entries and bump version numbers. Approved by: so Modified: releng/11.3/UPDATING releng/11.3/sys/conf/newvers.sh releng/12.0/UPDATING releng/1

svn commit: r354653 - in releng: 11.3/sys/amd64/amd64 11.3/sys/amd64/include 11.3/sys/dev/cpuctl 11.3/sys/x86/include 12.0/sys/amd64/amd64 12.0/sys/amd64/include 12.0/sys/dev/cpuctl 12.0/sys/x86/in...

Author: gordon Date: Tue Nov 12 18:13:04 2019 New Revision: 354653 URL: https://svnweb.freebsd.org/changeset/base/354653 Log: Fix Machine Check Exception on Page Size Change. Approved by: so Security: FreeBSD-SA-19:25.mcepsc Security: CVE-2018-12207 Modified: releng/11.3/sys

svn commit: r354652 - in releng: 12.0/stand/efi/loader 12.1/stand/efi/loader

Author: gordon Date: Tue Nov 12 18:10:26 2019 New Revision: 354652 URL: https://svnweb.freebsd.org/changeset/base/354652 Log: Fix UEFI Loader Memory Fragmentation. Approved by: so Security: FreeBSD-EN-19:19.loader Modified: releng/12.0/stand/efi/loader/bootinfo.c releng/12.0/sta

svn commit: r353915 - in releng: 11.2 11.2/contrib/tzdata 11.2/sys/conf 11.3 11.3/contrib/tzdata 11.3/sys/conf 12.0 12.0/contrib/tzdata 12.0/sys/conf

Author: gordon Date: Wed Oct 23 03:25:32 2019 New Revision: 353915 URL: https://svnweb.freebsd.org/changeset/base/353915 Log: Import tzdata 2019c. Approved by: so Security: FreeBSD-EN-19:18.tzdata Modified: releng/11.2/UPDATING releng/11.2/contrib/tzdata/NEWS releng/11.2/contr

svn commit: r351272 - releng/11.3

Author: gordon Date: Tue Aug 20 18:02:37 2019 New Revision: 351272 URL: https://svnweb.freebsd.org/changeset/base/351272 Log: That's EN-19:17.ipfw. It's not an SA. Reported by: kevans@ Approved by: so Modified: releng/11.3/UPDATING Modified: releng/11.3/UPDATING

svn commit: r351263 - in releng: 11.2 11.2/sys/conf 11.3 11.3/sys/conf 12.0 12.0/sys/conf

Author: gordon Date: Tue Aug 20 17:52:28 2019 New Revision: 351263 URL: https://svnweb.freebsd.org/changeset/base/351263 Log: Bump version information and add UPDATING entries. Approved by: so Modified: releng/11.2/UPDATING releng/11.2/sys/conf/newvers.sh releng/11.3/UPDATING rele

svn commit: r351261 - in releng: 11.2/sys/kern 11.3/sys/kern 12.0/sys/kern

Author: gordon Date: Tue Aug 20 17:51:32 2019 New Revision: 351261 URL: https://svnweb.freebsd.org/changeset/base/351261 Log: Fix reference count overflow in mqueuefs. Approved by: so Security: FreeBSD-SA-19:24.mqueuefs Security: CVE-2019-5603 Modified: releng/11.2/sys/kern/

svn commit: r351260 - in releng: 11.2/sys/dev/sound/midi 11.3/sys/dev/sound/midi 12.0/sys/dev/sound/midi

Author: gordon Date: Tue Aug 20 17:50:33 2019 New Revision: 351260 URL: https://svnweb.freebsd.org/changeset/base/351260 Log: Fix kernel memory disclosure from /dev/midistat. Approved by: so Security: FreeBSD-SA-19:23.midi Security: CVE-2019-5612 Modified: releng/11.2/sys/de

svn commit: r351259 - in releng: 11.2/sys/kern 11.3/sys/kern 12.0/sys/kern

Author: gordon Date: Tue Aug 20 17:49:33 2019 New Revision: 351259 URL: https://svnweb.freebsd.org/changeset/base/351259 Log: Fix IPv6 remote denial of service. Approved by: so Security: FreeBSD-SA-19:22.mbuf Security: CVE-2019-5611 Modified: releng/11.2/sys/kern/uipc_mbuf2.

svn commit: r351258 - releng/11.3/sbin/ipfw

Author: gordon Date: Tue Aug 20 17:46:40 2019 New Revision: 351258 URL: https://svnweb.freebsd.org/changeset/base/351258 Log: Fix ipfw(8) jail keyword prior to jail startup. Approved by: so Security: FreeBSD-EN-19:17.ipfw Modified: releng/11.3/sbin/ipfw/ipfw2.c Modified: releng/1

svn commit: r351256 - in releng: 11.3/sys/amd64/vmm 12.0/sys/amd64/vmm

Author: gordon Date: Tue Aug 20 17:45:44 2019 New Revision: 351256 URL: https://svnweb.freebsd.org/changeset/base/351256 Log: Add bhyve instruction emulation improvements (opcode 03H and F7H). Approved by: so Security: FreeBSD-EN-19:16.bhyve Modified: releng/11.3/sys/amd64/vmm/vmm

svn commit: r350647 - in releng: 11.2/usr.sbin/bhyve 11.3/usr.sbin/bhyve 12.0/usr.sbin/bhyve

Author: gordon Date: Tue Aug 6 17:13:17 2019 New Revision: 350647 URL: https://svnweb.freebsd.org/changeset/base/350647 Log: Fix insufficient validation of guest-supplied data (e1000 device). Approved by: so Security: FreeBSD-SA-19:21.bhyve Security: CVE-2019-5609 Modified:

svn commit: r350649 - in releng: 11.2 11.2/sys/conf 11.3 11.3/sys/conf 12.0 12.0/sys/conf

Author: gordon Date: Tue Aug 6 17:14:09 2019 New Revision: 350649 URL: https://svnweb.freebsd.org/changeset/base/350649 Log: Bump version information and add UPDATING entries. Approved by: so Modified: releng/11.2/UPDATING releng/11.2/sys/conf/newvers.sh releng/11.3/UPDATING rele

svn commit: r350642 - in releng: 11.2/contrib/llvm/projects/libunwind/src 12.0/contrib/llvm/projects/libunwind/src

Author: gordon Date: Tue Aug 6 17:08:30 2019 New Revision: 350642 URL: https://svnweb.freebsd.org/changeset/base/350642 Log: Fix incorrect exception handling. Approved by: so Security: FreeBSD-EN-19:15.libunwind Modified: releng/11.2/contrib/llvm/projects/libunwind/src/EHHeaderPa

svn commit: r350646 - in releng: 11.2/contrib/bsnmp/lib 11.3/contrib/bsnmp/lib 12.0/contrib/bsnmp/lib

Author: gordon Date: Tue Aug 6 17:12:17 2019 New Revision: 350646 URL: https://svnweb.freebsd.org/changeset/base/350646 Log: Fix insufficient message length validation in bsnmp library. Approved by: so Security: FreeBSD-SA-19:20.bsnmp Security: CVE-2019-5610 Modified: relen

svn commit: r350644 - in releng: 11.2/sys/netinet6 11.3/sys/netinet6 12.0/sys/netinet6

Author: gordon Date: Tue Aug 6 17:11:17 2019 New Revision: 350644 URL: https://svnweb.freebsd.org/changeset/base/350644 Log: Fix ICMPv6 / MLDv2 out-of-bounds memory access. Approved by: so Security: FreeBSD-SA-19:19.mldv2 Security: CVE-2019-5608 Modified: releng/11.2/sys/ne

svn commit: r350641 - in releng/12.0/sys: kern sys

Author: gordon Date: Tue Aug 6 17:07:43 2019 New Revision: 350641 URL: https://svnweb.freebsd.org/changeset/base/350641 Log: Fix incorrect locking in epoch(9). Approved by: so Security: FreeBSD-EN-19:14.epoch Modified: releng/12.0/sys/kern/subr_epoch.c releng/12.0/sys/kern/subr

svn commit: r350643 - in releng: 11.2/contrib/bzip2 11.3/contrib/bzip2 12.0/contrib/bzip2

Author: gordon Date: Tue Aug 6 17:09:47 2019 New Revision: 350643 URL: https://svnweb.freebsd.org/changeset/base/350643 Log: Fix multiple vulnerabilities in bzip2. Approved by: so Security: FreeBSD-SA-19:18.bzip2 Security: CVE-2016-3189 Security: CVE-2019-12900 Modified

svn commit: r350287 - in releng: 11.2 11.2/sys/conf 11.3 11.3/sys/conf 12.0 12.0/sys/conf

Author: gordon Date: Wed Jul 24 12:58:21 2019 New Revision: 350287 URL: https://svnweb.freebsd.org/changeset/base/350287 Log: Bump version information and update UPDATING. Approved by: so Modified: releng/11.2/UPDATING releng/11.2/sys/conf/newvers.sh releng/11.3/UPDATING releng/11

svn commit: r350286 - in releng: 11.2/sys/kern 11.3/sys/kern 12.0/sys/kern

Author: gordon Date: Wed Jul 24 12:57:49 2019 New Revision: 350286 URL: https://svnweb.freebsd.org/changeset/base/350286 Log: Fix file descriptor reference count leak. Approved by: so Security: FreeBSD-SA-19:17.fd Security: CVE-2019-5607 Modified: releng/11.2/sys/kern/uipc_u

svn commit: r350285 - in releng: 11.2/usr.sbin/bhyve 11.3/usr.sbin/bhyve 12.0/usr.sbin/bhyve

Author: gordon Date: Wed Jul 24 12:56:06 2019 New Revision: 350285 URL: https://svnweb.freebsd.org/changeset/base/350285 Log: Fix byhve out-of-bounds read in XHCI device. Approved by: so Security: FreeBSD-SA-19:16.bhyve Security: CVE-2019-5604 Modified: releng/11.2/usr.sbin/

svn commit: r350284 - in releng: 11.2/sys/kern 11.3/sys/kern 12.0/sys/kern

Author: gordon Date: Wed Jul 24 12:55:16 2019 New Revision: 350284 URL: https://svnweb.freebsd.org/changeset/base/350284 Log: Fix reference count overflow in mqueuefs. Approved by: so Security: FreeBSD-SA-19:15.mqueuefs Security: CVE-2019-5603 Modified: releng/11.2/sys/kern/

svn commit: r350283 - in releng: 11.2/sys/compat/freebsd32 11.3/sys/compat/freebsd32

Author: gordon Date: Wed Jul 24 12:54:10 2019 New Revision: 350283 URL: https://svnweb.freebsd.org/changeset/base/350283 Log: Fix kernel memory disclosure in freebsd32_ioctl. Approved by: so Security: FreeBSD-SA-19:14.freebsd32 Security: CVE-2019-5605 Modified: releng/11.2/s

svn commit: r350282 - in releng: 11.2/sys/kern 11.3/sys/kern 12.0/sys/kern

Author: gordon Date: Wed Jul 24 12:53:06 2019 New Revision: 350282 URL: https://svnweb.freebsd.org/changeset/base/350282 Log: Fix pts write-after-free. Approved by: so Security: FreeBSD-SA-19:13.pts Security: CVE-2019-5606 Modified: releng/11.2/sys/kern/tty.c releng/11.3/s

svn commit: r350281 - in releng: 11.2/contrib/telnet/telnet 11.3/contrib/telnet/telnet 12.0/contrib/telnet/telnet

Author: gordon Date: Wed Jul 24 12:51:52 2019 New Revision: 350281 URL: https://svnweb.freebsd.org/changeset/base/350281 Log: Fix multiple telnet client vulnerabilities. Approved by: so Security: FreeBSD-SA-19:12.telnet Security: CVE-2019-0053 Modified: releng/11.2/contrib/t

  1   2   3   >