delphij 5cdb10065c Fix SCTP stream reset vulnerability. ...

We would like to acknowledge Gerasimos Dimitriadis who reported
the issue and Michael Tuexen who analyzed and provided the
fix.

Security:	FreeBSD-SA-15:03.sctp
Security:	CVE-2014-8613
Submitted by:	tuexen

2015-01-27 19:35:38 +00:00

..

amd64

amd64: allow base memory segment to start at address different than 0

2015-01-26 08:42:47 +00:00

arm

Add a generic way for hooking PMC interrupt.

2015-01-26 10:31:17 +00:00

boot

Add a generic way for hooking PMC interrupt.

2015-01-26 10:31:17 +00:00

bsm

…

cam

Fix several potential overflows in UNMAP code.

2015-01-26 15:47:08 +00:00

cddl

When creating or updating a node, use vfs_timestamp() for "now" instead

2015-01-24 00:43:02 +00:00

compat

Run make sysent.

2015-01-23 21:08:24 +00:00

conf

Add MK_AUTOFS knob for building and installing autofs(4), et al

2015-01-26 07:15:49 +00:00

contrib

Add missing linuxapi module dependencies and always use the FreeBSD

2015-01-19 21:53:00 +00:00

crypto

Add some new modes to OpenCrypto. These modes are AES-ICM (can be used

2014-12-12 19:56:36 +00:00

ddb

ddb: ANSI-fy function declarations.

2014-10-12 18:01:52 +00:00

dev

hook userland threads suspend + resume into acpi suspend code

2015-01-27 17:33:18 +00:00

fs

Stop enforcing additional reference on all cdevs, which was introduced

2015-01-19 17:36:52 +00:00

gdb

…

geom

Add devd(8) notifications for creation and destruction of GEOM devices.

2015-01-14 11:15:57 +00:00

gnu

…

i386

Remove Giant from /dev/mem and /dev/kmem. It is definitely not needed

2015-01-24 12:51:15 +00:00

isa

…

kern

Fix a couple of panics when detaching from a cxgbe/cxl interface that was

2015-01-26 16:26:28 +00:00

kgssapi

Avoid dynamic syscall overhead for statically compiled modules.

2014-10-26 19:42:44 +00:00

libkern

Add some new modes to OpenCrypto. These modes are AES-ICM (can be used

2014-12-12 19:56:36 +00:00

mips

Remove Giant from /dev/mem and /dev/kmem. It is definitely not needed

2015-01-24 12:51:15 +00:00

modules

Remove cruft; ICL_RDMA was never actually working, and will be redone

2015-01-26 19:31:14 +00:00

net

Improve the distribution of LAGG port traffic.

2015-01-23 00:06:35 +00:00

net80211

Switch around the order of static inline to be in line with how it's

2015-01-11 18:43:45 +00:00

netgraph

When the node receives NGM_FLOW_COOKIE update the if_link_state, instead

2015-01-12 09:50:42 +00:00

netinet

Fix SCTP stream reset vulnerability.

2015-01-27 19:35:38 +00:00

netinet6

Refactor / restructure the RSS code into generic, IPv4 and IPv6 specific

2015-01-18 18:06:40 +00:00

netipsec

key_spdget uses key_setdumpsp() without SPTREE_RLOCK held (it uses

2015-01-27 17:46:55 +00:00

netnatm

…

netpfil

Back out r276841, r276756, r276747, r276746. The change in r276747 is very

2015-01-22 01:23:16 +00:00

netsmb

…

nfs

Remove the old NFS client and server from head,

2014-12-23 00:47:46 +00:00

nfsclient

Remove the old NFS client and server from head,

2014-12-23 00:47:46 +00:00

nfsserver

Use M_SIZE() instead of hand-crafted (and mostly correct) NFSMSIZ() macro

2015-01-07 17:22:56 +00:00

nlm

Avoid dynamic syscall overhead for statically compiled modules.

2014-10-26 19:42:44 +00:00

ofed

Revert for r277213:

2015-01-22 11:12:42 +00:00

opencrypto

Add some new modes to OpenCrypto. These modes are AES-ICM (can be used

2014-12-12 19:56:36 +00:00

pc98

Factor out duplicated code from dumpsys() on each architecture into generic

2015-01-07 01:01:39 +00:00

powerpc

Fix bug in mapppings of multiple pages exposed by updates to the VSCSI

2015-01-27 07:20:00 +00:00

rpc

Add facility to stop all userspace processes. The supposed use of the

2014-12-13 16:18:29 +00:00

security

Adjust printf format specifiers for dev_t and ino_t in kernel.

2014-12-17 07:27:19 +00:00

sparc64

Remove Giant from /dev/mem and /dev/kmem. It is definitely not needed

2015-01-24 12:51:15 +00:00

sys

hook userland threads suspend + resume into acpi suspend code

2015-01-27 17:33:18 +00:00

teken

mdoc: improvements to SEE ALSO.

2014-12-27 07:07:37 +00:00

tools

…

ufs

The sys_quotactl() contract demands that the mount point is

2015-01-27 10:32:49 +00:00

vm

Add vm.panic_on_oom sysctl, which enables those who would rather panic than

2015-01-24 17:32:45 +00:00

x86

loader: fix the size of MODINFOMD_MODULEP

2015-01-20 12:28:24 +00:00

xdr

…

xen

Pacify clang 3.3 by ending the file with a newline. This is common

2015-01-06 21:26:35 +00:00

Makefile

…