|
Napisano: 20 Maj 2013 13:50
 NetBSD 6.1
Pored novog NetBSD 6.1 izdanja, izdato je i 6.0.2 izdanje; razlika je da 6.0.2 predstavlja nastavak 6.0 grane sa sigurnosnim ispravkama i drugim zakrpama, dok 6.1 pored tih ispravki i zakrpa sadrzi jos i nove funkcije i mogucnosti koje nisu dostupne u 6.0.2 i ranijim.
Evo isecka iz objave za 6.1 izdanje:
Citat:
Major Changes Between 6.0 and 6.1
The complete list of changes can be found in the CHANGES-6.1 file in the top level directory of the NetBSD 6.1 release tree. An abbreviated list is as follows:
Security Advisory Fixes
NetBSD-SA2013-001, Kernel panic triggered from userland
NetBSD-SA2013-002, kqueue related kernel panic triggered from userland
NetBSD-SA2013-003, RNG Bug May Result in Weak Cryptographic Keys
NetBSD-SA2013-004, Vulnerabilities in grepSecurity Fixes
expat: Fix CVE-2012-1147, CVE-2012-1148 and CVE-2012-0876.
BIND: Address CVE-2012-5688: Named could die on specific queries with dns64 enabled.
Fixed a crash which could happen with sysctl security.curtain=1 set. (PR#47598)
Address CVE-2012-5667: Multiple integer overflows in GNU grep.
Several fixes to entropy handling in the kernel.
Prevent ktrace from being able to crash the kernel.
General kernelposix_spawn(): Fix processes with attributes.
Resolve races between vget() and vrele() resulting in vget() returning dead vnodes.
Prevent crash when unsupported fd's are used with kevent.
Fix a bug where kmem_alloc() could be called from interrupt context.
WAPBL: coalesce writes to the journal to speed up wapbl_flush() on raid5 by a factor of 3 to 4.
NetworkingFix "atomic fragments" for IPv6.
ipf: Fix alignment issues in ipmon. (PR#47101)
npf: handle delayed checksums in the network stack. (PR#47235)
Fixed some locking issues in ipf(4)
npf(3): Many fixes and updates. Config syntax has changed somewhat, please check your config files.
Fixed sendto(2) issue with IPv6 UDP datagrams. (PR#47408)
vioif(4): Fixed an issue which caused recent QEMU to crash.
File systemssmbfs: Make smbfs actually work on big-endian ports.
smbfs: various fixes. (PR#25070)
Allow mounting ext2fs and msdosfs in 32-bit compat mode.
v7fs: fix off-by-one error.
Driversciss(4): don't try to handle sensors if there aren't any.
isp(4): Fix FC-AL devices on QLogic ISP2100. (PR#47302)
mfi(4): Add support for LSI Thunderbolt (SAS2208) controllers.
mfi(4): Add support for running the MegaCLI Linux binary to manage the controller.
puc(4): Additional device support.
bge(4): Add support for Apple's Thunderbolt to Gigabit Ethernet adapter. (PR#46961)
mvgbe(4): fix a number of issues
nfe(4): Avoid bounce buffering and improve performance.
wm(4): Fix handling of 82578D and 82579V chips. Various other fixes.
fss(4): Don't crash when running multiple dump -X. (PR#47514)
fss(4): Fixed panic. (PR#47020)
Platformsalpha:Fixed longjmp/setjmp on alpha for statically linked programs such as those in /rescue.amiga:New ed(4) device driver for Hydra and ASDG Zorro2 bus network cards.arm:Fix gcc bugid 51408 for arm. (PR#46972)
Fixed a bit check in the Kirkwood IRQ code.
Fixed incorrect counts for 'vmstat -e' on Kirkwood.
Make bigendian ARM get the MBR partition and offset correct. (PR#47081)
Fixed bug where IRQ masks of GPIO were set incorrectly on Marvell SoCs.
Fixed static linking on ARM platforms. (PR#47139)
Properly block IRQs >= 32. (PR#45371)
Greatly improved Raspberry Pi support - USB and onboard Ethernet now work.
Enabled DCache Streaming Switch and Write Allocate for Sheeva CPUs.
Added support for the watchdog timer in some Marvell SoCs.
Fix for non-MBR disks on ARM. (PR#47463)mips:MIPS ports have switched to gdb 7.3.1. GDB6 is removed.vax:Reverted MAXPARTITION bump to 16, lowering it to 12 instead, to fix bootblocks and installboot for VAX 780 and other machines booting via VMB.EXE.x68k:Update bootloader: cdboot, netboot support and bugfixes.
Add floppy format support.x86 (i386, amd64):Work around a possible gcc bug generating bad assembler code. (PR#45673)
Disable C1E on AMD K8 CPUs, to prevent freeze during boot.
Fix running BSDi and NetBSD <= 1.0 binaries. (PR#41341)
Add support in ld.elf_so for relocation type R_386_TLS_TPOFF32. (PR#47061)
Fix some ACPI panics. (PR#47016)
The amd64 port now supports dtrace. (Not compiled in by default)xen:Prevent a memory corruption issue that locks up a Xen DomU, and can potentially cause file system corruption. (PR#47056, PR#47057)
Fix: Xen Dom0 NetBSD kernel could crash by adding duplicate xenwatches.
Userland fixes
Library Updates
pthread(3): libpthread minor number was bumped for the addition of pthread_cond_setclock(). Threaded binaries built on NetBSD 6.1 will not function on NetBSD 6.0.
pthread(3): libpthread can be dlopen()ed again.
terminfo(3): Various fixes to libterminfo.
libc: fix memory corruption in rpc. (PR#13082)
libutil: Fixed a bug in parsedate(3) where it would treat all input as if it were in the local time zone.
Update to tzdata2013c.
cdb: don't refuse to open databases without entries or keys.
Address graphics corruption in recent Cairo, manifested most commonly by certain rendered text sections appearing as solid rectangular blocks of color.
Added flock(1), inspired by the Linux program of the same name.
Updated Postfix to version 2.8.13.
wsconsctl(8 ): add support for touchscreen calibration. (PR#45872)
openssl: Fixed a multiple-free bug.
Zvanicna objava za 6.1: http://www.netbsd.org/releases/formal-6/NetBSD-6.1.html
Zvanicna objava za 6.0.2: http://www.netbsd.org/releases/formal-6/NetBSD-6.0.2.html
Dopuna: 22 Avg 2013 9:33
NetBSD 6.1.1
Objavljeno je NetBSD 6.1.1 izdanje. Nema nekih novina, uglavnom izdanje donosi donosi bezbednosne ispravke i ispravke bug-ova.
Citat:
Introduction
The NetBSD Project is pleased to announce NetBSD 6.1.1, the first security/bugfix update of the NetBSD 6.1 release branch. It represents a selected subset of fixes deemed important for security or stability reasons.
Please note that all fixes in the prior security/bugfix updates (NetBSD 6.0.1 and 6.0.2), as well as those in 6.1, are also in 6.1.1. See the release map graph on the NetBSD website for a visual representation of the relationship between releases.
Complete source and binaries for NetBSD 6.1.1 are available for download at many sites around the world. A list of download sites providing FTP, AnonCVS, SUP, and other services may be found at http://www.NetBSD.org/mirrors/. We encourage users who wish to install via ISO or USB disk images to download via BitTorrent by using the torrent files supplied in the images area. A list of hashes for the NetBSD 6.1.1 distribution has been signed with the well-connected PGP key for the NetBSD Security Officer: ftp://ftp.NetBSD.org/pub/NetBSD/security/hashes/NetBSD-6.1.1_hashes.asc
NetBSD is free. All of the code is under non-restrictive licenses, and may be used without paying royalties to anyone. Free support services are available via our mailing lists and website. Commercial support is available from a variety of sources. More extensive information on NetBSD is available from our website:
http://www.NetBSD.org/
Fund Drive
Your donations to the NetBSD Foundation have allowed the project to make major improvements to the code base. We would like to continue funded development in various areas, including:
Improving network stack concurrency and performance.
Development of modern file systems and improvement of existing ones.
Features which are useful in embedded environments, such as high resolution timers and execute in place (XIP) support.
Automatic testing and quality assurance.
For more information about donating, visit http://www.NetBSD.org/donations/. The NetBSD Foundation is a 501(c)(3) organization in the US, and donations may be tax deductible.
Major Changes Between 6.1 and 6.1.1
The complete list of changes can be found in the CHANGES-6.1.1 file in the top level directory of the NetBSD 6.1.1 release tree. An abbreviated list is as follows:
Security Advisory Fixes
NetBSD-SA2013-005, bind Denial of Service (CVE-2013-4854)
NetBSD-SA2013-006, Arbitrary Kernel Read with netstat -P
NetBSD-SA2013-007, Protocol handling issues in X Window System client libraries
NetBSD-SA2013-008, Error in authorization check re tcpdrop sysctl
Security
Add four new sysctls to avoid IPv6 DoS attacks.
Networking
mpls(4): Stop abusing kmem during softint context to prevent panic.
Avoid crash destroying tap0 after deleting its link-local address. PR 47576.
File systems
NILFS: Fix serious file read problem due to not-so-clear VOP_BMAP description. PR 45605.
procfs: Add a missing vm_map_unlock_read() and uvmspace_free() to the ENOMEM error case in procfs_domap()d. PR 48048.
Platforms
amiga: Fix kernel panic on Amigas with Deneb cards.
vax: Add a makedisk_p12high, used by VAX now after unbumping MAXPARTITIONS from 16 down to 12. This fixes install issues on new setups.
Miscellaneous Userland
Updated tzdata to 2013d.
http://www.netbsd.org/releases/formal-6/NetBSD-6.1.1.html
|
