src/lib, branch releng/10.2

Merge r309688: address regressions in SA-16:37.libc.

2016-12-07T23:32:42Z

PR: 215105 Submitted by: Approved by: so

Fix possible login(1) argument injection in telnetd(8). [SA-16:36]

2016-12-06T18:49:54Z

Fix link_ntoa(3) buffer overflow in libc. [SA-16:37] Fix possible escape from bhyve(8) virtual machine. [SA-16:38] Fix warnings about valid time zone abbreviations. [EN-16:19] Update timezone database information. [EN-16:20] Security: FreeBSD-SA-16:36.telnetd Security: FreeBSD-SA-16:37.libc Security: FreeBSD-SA-16:38.bhyve Errata Notice: FreeBSD-EN-16:19.tzcode Errata Notice: FreeBSD-EN-16:20.tzdata Approved by: so

Fix bspatch heap overflow vulnerability. [SA-16:29]

2016-10-10T07:18:54Z

Fix multiple portsnap vulnerabilities. [SA-16:30] Fix multiple libarchive vulnerabilities. [SA-16:31] Approved by: so

o Fix filemon and bmake meta-mode stability issues. [EN-16:01]

2016-01-14T09:10:46Z

o Fix invalid TCP checksums with pf(4). [EN-16:02.pf] o Fix YP/NIS client library critical bug. [EN-16:03.yplib] o Fix SCTP ICMPv6 error message vulnerability. [SA-16:01.sctp] o Fix ntp panic threshold bypass vulnerability. [SA-16:02.ntp] o Fix Linux compatibility layer incorrect futex handling. [SA-16:03.linux] o Fix Linux compatibility layer setgroups(2) system call. [SA-16:04.linux] o Fix TCP MD5 signature denial of service. [SA-16:05.tcp] o Fix insecure default bsnmpd.conf permissions. [SA-16:06.bsnmpd] Errata: FreeBSD-EN-16:01.filemon Errata: FreeBSD-EN-16:02.pf Errata: FreeBSD-EN-16:03.yplib Security: FreeBSD-SA-16:01.sctp, CVE-2016-1879 Security: FreeBSD-SA-16:02.ntp, CVE-2015-5300 Security: FreeBSD-SA-16:03.linux, CVE-2016-1880 Security: FreeBSD-SA-16:04.linux, CVE-2016-1881 Security: FreeBSD-SA-16:05.tcp, CVE-2016-1882 Security: FreeBSD-SA-16:06.bsnmpd, CVE-2015-5677 Approved by: so

Fix regression in pw(8) when creating numeric users or groups.

2015-09-16T20:59:41Z

[EN-15:16] Fix libc handling of signals for multi-threaded processes. [EN-15:17] Implement pubkey support for pkg(7) bootstrap. [EN-15:18] Approved by: so

Set static abitag to the current value of __FreeBSD_version.

2015-08-12T14:02:56Z

Approved by: re (implicit) Sponsored by: The FreeBSD Foundation

MFS r286082:

2015-07-30T18:00:37Z

MFC r285972: MFV r285970: Apply upstream changeset bf4f6ec64e: Fix issue 356: properly skip a sparse file entry in a tar file. PR: 201506 Relnotes: yes Approved by: re (gjb)

MFC r285188:

2015-07-15T16:55:56Z

Fix sysctl(3) so it returns the intended values for all mib names in the 'user' sysctl tree, which have all been coming back 0 or empty since r240176. Approved by: re

MFH (r275020): partial fix for getgrouplist() in group_compat case

2015-07-09T13:30:37Z

PR: 190055 Approved by: re (marius)

MFC: libsm/path.c is about to disappear in the merge of sendmail 8.15.2. It

2015-07-09T04:58:56Z

is an empty file now so it is safe to remove before the merge. Approved by: re (gjb)