New release notes: RLIMIT_VMEM, zero-copy support, SA-02:28,

OpenSSH 3.3p1, pkg_version(1) rewrite.

MFC noted:  sed(1) -i.
This commit is contained in:
bmah 2002-06-27 16:45:42 +00:00
parent 44c50d836d
commit 1bc0e29a90
2 changed files with 62 additions and 2 deletions

View File

@ -287,6 +287,12 @@
enables interfaces and functionality intended for use during
correctness and regression testing.</para>
<para><literal>RLIMIT_VMEM</literal> support has been added. This
feature defines a new resource limit that covers a process's
entire virtual memory space, including &man.mmap.2; space. This
limit can be configured in &man.login.conf.5; via the new
<varname>vmemoryuse</varname> variable.</para>
<para arch="sparc64">Support has been added for SBus-based
devices.</para>
@ -847,6 +853,16 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
network drivers (specifically &man.dc.4; and &man.sis.4;) has
been enhanced by the elimination of unnecessary buffer
copies. &merged;</para>
<para><quote>Zero copy</quote> support has been added to the
networking stack. This feature can eliminate a copy of
network data between the kernel and userland, which is one of
the more significant bottlenecks in network throughput.
The send-side code should work with almost any network
adapter, while the receive-side code requires a network
adapter with an MTU of at least one memory page size (for
example, jumbo frames on Gigabit Ethernet). For more
information, see &man.zero.copy.9;.</para>
</sect3>
<sect3>
@ -1862,6 +1878,11 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:27.rc.asc">FreeBSD-SA-02:27</ulink>).
&merged;</para>
<para>A buffer overflow in the resolver, which could be exploited
by a malicious domain name server or an attacker forging DNS
messages, has been fixed. See security advisory <ulink
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:28.resolv.asc">FreeBSD-SA-02:28</ulink>
for more details.</para>
</sect2>
<sect2 id="userland">
@ -2856,7 +2877,7 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
extended regular expression support. &merged;</para>
<para>&man.sed.1; now takes a <option>-i</option> option to enable
in-place editing of files.</para>
in-place editing of files. &merged;</para>
<para role="historic">&man.send-pr.1; now takes a <option>-a</option> option to
include a file into the <literal>Fix:</literal> section of a
@ -3531,6 +3552,12 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
</itemizedlist>
</para>
<para><application>OpenSSH</application> has been updated to
3.3p1. This version adds a <quote>privilege
separation</quote> feature, which uses unprivileged
processes to contain and restrict the effects of future
compromises or programming errors.</para>
<para><application>OpenSSH</application> can now authenticate
using <application>OPIE</application> passwords.</para>
@ -3773,6 +3800,9 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
to limit its operation to ports/packages matching a given
string. &merged;</para>
<para>&man.pkg.version.1;, formerly a Perl script, has been
rewritten in C.</para>
<para role="historic">Version numbers of installed packages have a new
(backward-compatible) syntax, which supports the
<varname>PORTREVISION</varname> and

View File

@ -287,6 +287,12 @@
enables interfaces and functionality intended for use during
correctness and regression testing.</para>
<para><literal>RLIMIT_VMEM</literal> support has been added. This
feature defines a new resource limit that covers a process's
entire virtual memory space, including &man.mmap.2; space. This
limit can be configured in &man.login.conf.5; via the new
<varname>vmemoryuse</varname> variable.</para>
<para arch="sparc64">Support has been added for SBus-based
devices.</para>
@ -847,6 +853,16 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
network drivers (specifically &man.dc.4; and &man.sis.4;) has
been enhanced by the elimination of unnecessary buffer
copies. &merged;</para>
<para><quote>Zero copy</quote> support has been added to the
networking stack. This feature can eliminate a copy of
network data between the kernel and userland, which is one of
the more significant bottlenecks in network throughput.
The send-side code should work with almost any network
adapter, while the receive-side code requires a network
adapter with an MTU of at least one memory page size (for
example, jumbo frames on Gigabit Ethernet). For more
information, see &man.zero.copy.9;.</para>
</sect3>
<sect3>
@ -1862,6 +1878,11 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:27.rc.asc">FreeBSD-SA-02:27</ulink>).
&merged;</para>
<para>A buffer overflow in the resolver, which could be exploited
by a malicious domain name server or an attacker forging DNS
messages, has been fixed. See security advisory <ulink
url="ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:28.resolv.asc">FreeBSD-SA-02:28</ulink>
for more details.</para>
</sect2>
<sect2 id="userland">
@ -2856,7 +2877,7 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
extended regular expression support. &merged;</para>
<para>&man.sed.1; now takes a <option>-i</option> option to enable
in-place editing of files.</para>
in-place editing of files. &merged;</para>
<para role="historic">&man.send-pr.1; now takes a <option>-a</option> option to
include a file into the <literal>Fix:</literal> section of a
@ -3531,6 +3552,12 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
</itemizedlist>
</para>
<para><application>OpenSSH</application> has been updated to
3.3p1. This version adds a <quote>privilege
separation</quote> feature, which uses unprivileged
processes to contain and restrict the effects of future
compromises or programming errors.</para>
<para><application>OpenSSH</application> can now authenticate
using <application>OPIE</application> passwords.</para>
@ -3773,6 +3800,9 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
to limit its operation to ports/packages matching a given
string. &merged;</para>
<para>&man.pkg.version.1;, formerly a Perl script, has been
rewritten in C.</para>
<para role="historic">Version numbers of installed packages have a new
(backward-compatible) syntax, which supports the
<varname>PORTREVISION</varname> and