opnsense-src/sys/netinet
glebius be2a6010ee o Fix invalid TCP checksums with pf(4). [EN-16:02.pf] o Fix YP/NIS client library critical bug. [EN-16:03.yplib] o Fix SCTP ICMPv6 error message vulnerability. [SA-16:01.sctp] o Fix ntp panic threshold bypass vulnerability. [SA-16:02.ntp] o Fix Linux compatibility layer incorrect futex handling. [SA-16:03.linux] o Fix Linux compatibility layer setgroups(2) system call. [SA-16:04.linux] o Fix TCP MD5 signature denial of service. [SA-16:05.tcp] o Fix insecure default bsnmpd.conf permissions. [SA-16:06.bsnmpd]
Errata:		FreeBSD-EN-16:02.pf
Errata:		FreeBSD-EN-16:03.yplib
Security:	FreeBSD-SA-16:01.sctp, CVE-2016-1879
Security:	FreeBSD-SA-16:02.ntp, CVE-2015-5300
Security:	FreeBSD-SA-16:03.linux, CVE-2016-1880
Security:	FreeBSD-SA-16:04.linux, CVE-2016-1881
Security:	FreeBSD-SA-16:05.tcp, CVE-2016-1882
Security:	FreeBSD-SA-16:06.bsnmpd, CVE-2015-5677
Approved by:	so
2016-01-14 11:18:47 +01:00
..
cc *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
khelp src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
libalias src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
accf_data.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
accf_dns.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
accf_http.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
cc.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
icmp6.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
icmp_var.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
if_atm.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
if_atm.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
if_ether.c Revert "tools: apply carp_correct_mac.diff" 2015-04-02 08:31:27 +02:00
if_ether.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
igmp.c Improve patch for SA-15:04.igmp to solve a potential buffer overflow. 2015-04-07 23:16:51 +02:00
igmp.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
igmp_var.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
in.c Revert "tools: apply set_ifaddr_first.diff" 2015-04-23 23:41:01 +02:00
in.h Revert "tools: apply IPSEC_sysctl.RELENG_10.diff" 2015-04-24 00:28:23 +02:00
in_cksum.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
in_debug.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
in_gif.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
in_gif.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
in_kdtrace.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
in_kdtrace.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
in_mcast.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
in_pcb.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
in_pcb.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
in_pcbgroup.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
in_proto.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
in_rmx.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
in_systm.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
in_var.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip6.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_carp.c Revert "tools: apply carp_replay_protection.diff" 2015-04-02 08:33:29 +02:00
ip_carp.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_divert.c Revert "tools: apply divert.RELENG_10.diff" 2015-04-24 00:17:12 +02:00
ip_divert.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_dummynet.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_ecn.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_ecn.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_encap.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_encap.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_fastfwd.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
ip_fw.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
ip_gre.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_gre.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_icmp.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
ip_icmp.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_id.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_input.c net: M_IPIN_SKIPPFIL is the same as M_PROTO12 2015-11-20 22:58:03 +01:00
ip_ipsec.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
ip_ipsec.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_mroute.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
ip_mroute.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
ip_options.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
ip_options.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
ip_output.c Revert "tools: apply route-to_without_gw.diff" 2015-04-24 00:29:21 +02:00
ip_var.h Revert "tools: apply IPSEC_sysctl.RELENG_10.diff" 2015-04-24 00:28:23 +02:00
pim.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
pim_var.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
raw_ip.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_asconf.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_asconf.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
sctp_auth.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_auth.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_bsd_addr.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
sctp_bsd_addr.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
sctp_cc_functions.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_constants.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_crc32.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
sctp_crc32.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
sctp_dtrace_declare.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
sctp_dtrace_define.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_header.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_indata.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_indata.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
sctp_input.c Fix SCTP SCTP_SS_VALUE kernel memory corruption and disclosure vulnerability and SCTP stream reset vulnerability. 2015-02-10 19:25:07 +01:00
sctp_input.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_lock_bsd.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
sctp_os.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
sctp_os_bsd.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_output.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_output.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_pcb.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_pcb.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_peeloff.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_peeloff.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
sctp_ss_functions.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
sctp_structs.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_sysctl.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_sysctl.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_timer.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_timer.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
sctp_uio.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctp_usrreq.c Fix SCTP SCTP_SS_VALUE kernel memory corruption and disclosure vulnerability and SCTP stream reset vulnerability. 2015-02-10 19:25:07 +01:00
sctp_var.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctputil.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
sctputil.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
siftr.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_debug.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_debug.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_fsm.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_hostcache.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_hostcache.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_input.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
tcp_lro.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_lro.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_offload.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_offload.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_output.c o Fix invalid TCP checksums with pf(4). [EN-16:02.pf] o Fix YP/NIS client library critical bug. [EN-16:03.yplib] o Fix SCTP ICMPv6 error message vulnerability. [SA-16:01.sctp] o Fix ntp panic threshold bypass vulnerability. [SA-16:02.ntp] o Fix Linux compatibility layer incorrect futex handling. [SA-16:03.linux] o Fix Linux compatibility layer setgroups(2) system call. [SA-16:04.linux] o Fix TCP MD5 signature denial of service. [SA-16:05.tcp] o Fix insecure default bsnmpd.conf permissions. [SA-16:06.bsnmpd] 2016-01-14 11:18:47 +01:00
tcp_reass.c Fix patch(1) shell injection vulnerability. [SA-15:14] 2015-07-29 07:20:32 +02:00
tcp_sack.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_seq.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_subr.c Fix patch(1) shell injection vulnerability. [SA-15:14] 2015-07-29 07:20:32 +02:00
tcp_syncache.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
tcp_syncache.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_timer.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_timer.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
tcp_timewait.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
tcp_usrreq.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
tcp_var.h Fix patch(1) shell injection vulnerability. [SA-15:14] 2015-07-29 07:20:32 +02:00
tcpip.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
toecore.c src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
toecore.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
udp.h src: initial commit based on FreeBSD-10.0 2014-11-09 09:30:14 +01:00
udp_usrreq.c *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
udp_var.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00
udplite.h *: upgrade to 10.1 as a bulk commit 2015-02-10 19:21:02 +01:00