src/lib/libc, branch releng/10.2

Merge r309688: address regressions in SA-16:37.libc.

2016-12-07T23:32:42Z

PR: 215105 Submitted by: Approved by: so

Fix possible login(1) argument injection in telnetd(8). [SA-16:36]

2016-12-06T18:49:54Z

Fix link_ntoa(3) buffer overflow in libc. [SA-16:37] Fix possible escape from bhyve(8) virtual machine. [SA-16:38] Fix warnings about valid time zone abbreviations. [EN-16:19] Update timezone database information. [EN-16:20] Security: FreeBSD-SA-16:36.telnetd Security: FreeBSD-SA-16:37.libc Security: FreeBSD-SA-16:38.bhyve Errata Notice: FreeBSD-EN-16:19.tzcode Errata Notice: FreeBSD-EN-16:20.tzdata Approved by: so

o Fix filemon and bmake meta-mode stability issues. [EN-16:01]

2016-01-14T09:10:46Z

o Fix invalid TCP checksums with pf(4). [EN-16:02.pf] o Fix YP/NIS client library critical bug. [EN-16:03.yplib] o Fix SCTP ICMPv6 error message vulnerability. [SA-16:01.sctp] o Fix ntp panic threshold bypass vulnerability. [SA-16:02.ntp] o Fix Linux compatibility layer incorrect futex handling. [SA-16:03.linux] o Fix Linux compatibility layer setgroups(2) system call. [SA-16:04.linux] o Fix TCP MD5 signature denial of service. [SA-16:05.tcp] o Fix insecure default bsnmpd.conf permissions. [SA-16:06.bsnmpd] Errata: FreeBSD-EN-16:01.filemon Errata: FreeBSD-EN-16:02.pf Errata: FreeBSD-EN-16:03.yplib Security: FreeBSD-SA-16:01.sctp, CVE-2016-1879 Security: FreeBSD-SA-16:02.ntp, CVE-2015-5300 Security: FreeBSD-SA-16:03.linux, CVE-2016-1880 Security: FreeBSD-SA-16:04.linux, CVE-2016-1881 Security: FreeBSD-SA-16:05.tcp, CVE-2016-1882 Security: FreeBSD-SA-16:06.bsnmpd, CVE-2015-5677 Approved by: so

Fix regression in pw(8) when creating numeric users or groups.

2015-09-16T20:59:41Z

[EN-15:16] Fix libc handling of signals for multi-threaded processes. [EN-15:17] Implement pubkey support for pkg(7) bootstrap. [EN-15:18] Approved by: so

MFC r285188:

2015-07-15T16:55:56Z

Fix sysctl(3) so it returns the intended values for all mib names in the 'user' sysctl tree, which have all been coming back 0 or empty since r240176. Approved by: re

MFH (r275020): partial fix for getgrouplist() in group_compat case

2015-07-09T13:30:37Z

PR: 190055 Approved by: re (marius)

MFC r284229: Add support for '_' occurring at the beginning or

2015-06-18T16:39:05Z

end of a name component. PR: 176093 Submitted by: landonf__at__bikemonkey.org

MFC r264038 (theraven):

2015-06-17T19:12:18Z

Fix an issue where the locale and rune locale could become out of sync, causing mb* functions (and similar) to be called with the wrong data (possibly a null pointer, causing a crash). PR: standards/188036

MFC r284386:

2015-06-17T09:41:16Z

Fix name of a constant.

MFC 281887:

2015-06-02T19:20:39Z

Reassign copyright statements on several files from Advanced Computing Technologies LLC to Hudson River Trading LLC.