FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=release%2F13.4.0 2024-09-13T00:00:00Z 2024-09-13T00:00:00Z Colin Percival cperciva@FreeBSD.org 2024-09-13T00:00:00Z urn:sha1:58066db597befb899b2fe59031b2a32fb9183f0f - Bump BRANCH to RELEASE - Record the anticipated announcement date in UPDATING - Set a static __FreeBSD_version in crtbrand.S Approved by: re (implicit) Sponsored by: Amazon 2024-09-09T17:49:39Z Dimitry Andric dim@FreeBSD.org 2024-09-05T19:55:44Z urn:sha1:5096328dd7cbe79628098f10ab92eb4ab70d5fce PR: 279692 MFC after: 3 days (cherry picked from commit 157802238b5aa7722aff40317fe6d05f5c975d71) (cherry picked from commit 6b147f693b91f16db7ba6193611f6f4d2ed762a5) Approved by: re (cperciva) 2024-09-04T19:32:58Z Ed Maste emaste@FreeBSD.org 2024-09-04T19:32:29Z urn:sha1:21576f63961eb1402417cf1a3f1f16874bab8466 SA-24:09.libnv SA-24:11.ctl SA-24:12.bhyve SA-24:14.umtx Approved by: so Approved by: re (cperciva) 2024-02-19T08:02:01Z Bjoern A. Zeeb bz@FreeBSD.org 2024-01-10T10:14:16Z urn:sha1:a7e1fc7f620d3341549c1380f550aaafbdb45622 Since 5efea30f039c4 we can possibly lose a state transition which can cause trouble further down the road. The reproducer from 643d6dce6c1e can trigger these for example. Drivers for firmware based wireless cards have worked around some of this (and other) problems in the past. Add an array of tasks rather than a single one as we would simply get npending > 1 and lose order with other tasks. Try to keep state changes updated as queued in case we end up with more than one at a time. While this is not ideal either (call it a hack) it will sort the problem for now. We will queue in ieee80211_new_state_locked() and do checks there and dequeue in ieee80211_newstate_cb(). If we still overrun the (currently) 8 slots we will drop the state change rather than overwrite the last one. When dequeing we will update iv_nstate and keep it around for historic reasons for the moment. The longer term we should make the callers of ieee80211_new_state[_locked]() actually use the returned errors and act appropriately but that will touch a lot more places and drivers (possibly incl. changed behaviour for ioctls). rtwn(4) and rum(4) should probably be revisted and net80211 internals removed (for rum(4) at least the current logic still seems prone to races). PR: 271979, 271988, 275255, 263613, 274003 Sponsored by: The FreeBSD Foundation (in 2023) Reviewed by: cc Differential Revision: https://reviews.freebsd.org/D43389 (cherry picked from commit 713db49d06deee90dd358b2e4b9ca05368a5eaf6) Given this changes the internal structure of 'struct ieee80211vap', which gets allocated by the drivers, and we do not have enough spares, all wireless drivers need to be recompiled. Given we are forced to do the update, we leave fields in the middle of the struct and add more spares at the same time. __FreeBSD_version gets updated to 1303501 to be able to detect this change. (cherry picked from commit a890a3a5ddf33acb0a4000885945b89156799b07) 2024-02-07T02:47:40Z Gregory Neil Shapiro gshapiro@FreeBSD.org 2024-01-31T23:53:48Z urn:sha1:a64caf2cb2dc3ddd6f325e323c281d1463a80ccf Merge vendor sendmail 8.18.1 into HEAD (cherry picked from commit d39bd2c1388b520fcba9abed1932acacead60fba) Add new source file for sendmail 8.18.1 (cherry picked from commit 19d4fb85bf17579780e8f0c3cbae8a5e92a6922e) New sendmail 8.18.1 cf file (cherry picked from commit 1b6a5580c1f999fb1ba5f9860cf63a8aefc55b3c) Minor change to update these files so new freebsd*.cf files are generated (cherry picked from commit 2c191ba6b0b5d1b3729a5ac428d51cfc5d5f3d2e) Belatedly update version and date for sendmail 8.18.1 upgrade (cherry picked from commit 31fbc98c949bfca30ab55afef04b4396a61b7e92) Add a note about sendmail 8.18.1's stricter SMTP protocol enforcement (akin to commit 21c1f1deb6a3ac6a60e4516261e5264a28e0b7a6 in main) Update import date for stable/14 Relnotes: Yes Security: CVE-2023-51765 2023-12-13T16:08:13Z Dag-Erling Smørgrav des@FreeBSD.org 2023-06-13T16:04:22Z urn:sha1:5761f8a7de9fa0248e1d7e2be751de1c6d9aa973 * Replace hand-rolled input tokenizer with openpam_readlinev() which supports line continuations and has better quoting and escaping. * Simplify string handling by merging struct clnt_str and struct srvr_str into just struct tac_str. * Each server entry in the configuration file can now have up to 255 AV pairs which will be appended to the ones returned by the server in response to a successful authorization request. This allows nss_tacplus(8) to be used with servers which do not provide identity information beyond confirming the existence of the user. This adds a dependency on libpam, however libtacplus is currently only used by pam_tacplus(8) (which is already always used with libpam) and the very recently added nss_tacplus(8) (which is extremely niche). In the longer term it might be a good idea to split this out into a separate library. MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: pauamma_gundo.com, markj Differential Revision: https://reviews.freebsd.org/D40285 Relnotes: yes (cherry picked from commit 21850106fdda5269bc881f0e62839dff3d9edf47) 2023-08-23T17:43:33Z Warner Losh imp@FreeBSD.org 2023-08-22T01:32:18Z urn:sha1:350f9ac5b362558a39f447dea99d102b831ee0c8 Remove /^\s*\$FreeBSD\$$\n/ Similar commit in main: (cherry picked from commit 05248206f720) 2023-07-14T10:07:58Z Doug Rabson dfr@FreeBSD.org 2023-06-20T13:01:58Z urn:sha1:6dfb2c2dce0ffabd783ec24b8d4d128993363f72 This is disabled by default since it potentially changes the behavior of existing filter rule sets. To enable this extra filter for packets being delivered locally, use: sysctl net.pf.filter_local=1 service pf restart PR: 268717 Reviewed-by: kp MFC-after: 2 weeks Differential Revision: https://reviews.freebsd.org/D40373 (cherry picked from commit 3a1f834b5228986a7c14fd60da13cf2700e80996) 2023-05-18T14:18:43Z Graham Perrin grahamperrin@gmail.com 2023-05-18T14:13:04Z urn:sha1:668c406ce567fb786a693153c2d8b25bfb217415 Pull-Request: https://github.com/freebsd/freebsd-src/pull/714 Reviewed-by: imp 2023-04-05T01:33:57Z Ed Maste emaste@FreeBSD.org 2022-11-18T20:47:13Z urn:sha1:982e61aacc79f5b972e4c6e1dab6221403e58b0a Instead of providing no /usr/bin/objdump when LLVM_BINUTILS is false. PR: 267854 [exp-run] Reviewed by: dim Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D37445 (cherry picked from commit 86edb11e7491e657e6c75ef6814867021665c377)