| @@ -1,14 +1,14 @@ | | | @@ -1,14 +1,14 @@ |
1 | .\" $NetBSD: main,v 1.425.2.16 2012/11/27 18:12:23 riz Exp $ | | 1 | .\" $NetBSD: main,v 1.425.2.16.2.1 2013/09/22 22:43:10 riz Exp $ |
2 | .\" | | 2 | .\" |
3 | .\" Copyright (c) 1999-2008 The NetBSD Foundation, Inc. | | 3 | .\" Copyright (c) 1999-2008 The NetBSD Foundation, Inc. |
4 | .\" All rights reserved. | | 4 | .\" All rights reserved. |
5 | .\" | | 5 | .\" |
6 | .\" Redistribution and use in source and binary forms, with or without | | 6 | .\" Redistribution and use in source and binary forms, with or without |
7 | .\" modification, are permitted provided that the following conditions | | 7 | .\" modification, are permitted provided that the following conditions |
8 | .\" are met: | | 8 | .\" are met: |
9 | .\" 1. Redistributions of source code must retain the above copyright | | 9 | .\" 1. Redistributions of source code must retain the above copyright |
10 | .\" notice, this list of conditions and the following disclaimer. | | 10 | .\" notice, this list of conditions and the following disclaimer. |
11 | .\" 2. Redistributions in binary form must reproduce the above copyright | | 11 | .\" 2. Redistributions in binary form must reproduce the above copyright |
12 | .\" notice, this list of conditions and the following disclaimer in the | | 12 | .\" notice, this list of conditions and the following disclaimer in the |
13 | .\" documentation and/or other materials provided with the distribution. | | 13 | .\" documentation and/or other materials provided with the distribution. |
14 | .\" | | 14 | .\" |
| @@ -444,345 +444,94 @@ and numerous other tools, all accompanie | | | @@ -444,345 +444,94 @@ and numerous other tools, all accompanie |
444 | .Pp | | 444 | .Pp |
445 | .\" XXX Should we include some text here about NetBSD's license | | 445 | .\" XXX Should we include some text here about NetBSD's license |
446 | .\" policies and how commercial-friendly it is? | | 446 | .\" policies and how commercial-friendly it is? |
447 | .Nx | | 447 | .Nx |
448 | is a creation of the members of the Internet community. | | 448 | is a creation of the members of the Internet community. |
449 | Without the unique cooperation and coordination the net makes | | 449 | Without the unique cooperation and coordination the net makes |
450 | possible, it's likely that | | 450 | possible, it's likely that |
451 | .Nx | | 451 | .Nx |
452 | wouldn't exist. | | 452 | wouldn't exist. |
453 | . | | 453 | . |
454 | .if \n[FOR_RELEASE] \{\ | | 454 | .if \n[FOR_RELEASE] \{\ |
455 | .Pp | | 455 | .Pp |
456 | The complete list of changes can be found in the | | 456 | The complete list of changes can be found in the |
457 | CHANGES-5.2: | | 457 | CHANGES-5.2.1: |
458 | .Lk http://ftp.NetBSD.org/pub/NetBSD/NetBSD-5.2/CHANGES-5.2 | | 458 | .Lk http://ftp.NetBSD.org/pub/NetBSD/NetBSD-5.2.1/CHANGES-5.2.1 |
459 | file in the top level directory of the NetBSD 5.2 release tree. An abbreviated list is as follows: | | 459 | file in the top level directory of the NetBSD 5.2.1 release tree. An abbreviated list is as follows: |
460 | .Ss2 Security Advisory Fixes | | 460 | .Ss2 Security Advisory Fixes |
461 | .(bullet | | 461 | .(bullet |
462 | NetBSD-SA2010-012: | | 462 | NetBSD-SA2013-004: |
463 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2010-012.txt.asc , | | 463 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2013-004.txt.asc |
464 | OpenSSL TLS extension parsing race condition | | 464 | Vulnerabilities in grep |
465 | .It | | | |
466 | NetBSD-SA2011-001: | | | |
467 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2011-001.txt.asc , | | | |
468 | BIND DoS due to improper handling of RRSIG records | | | |
469 | .It | | | |
470 | NetBSD-SA2011-002: | | | |
471 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2011-002.txt.asc , | | | |
472 | OpenSSL TLS extension parsing race condition | | | |
473 | .It | | | |
474 | NetBSD-SA2011-003: | | | |
475 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2011-003.txt.asc , | | | |
476 | Exhausting kernel memory from user controlled value | | | |
477 | .It | | | |
478 | NetBSD-SA2011-004: | | | |
479 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2011-004.txt.asc , | | | |
480 | Kernel stack overflow via nested IPCOMP packet (CVE-2011-1547) | | | |
481 | .It | | | |
482 | NetBSD-SA2011-005: | | | |
483 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2011-005.txt.asc , | | | |
484 | ISC dhclient does not strip shell meta-characters (CVE-2011-0997) | | | |
485 | .It | | | |
486 | NetBSD-SA2011-006: | | | |
487 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2011-006.txt.asc , | | | |
488 | BIND DoS via packet with rrtype zero | | | |
489 | .It | | | |
490 | NetBSD-SA2011-007: | | | |
491 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2011-007.txt.asc , | | | |
492 | LZW decoding loop on manipulated compressed files | | | |
493 | .It | | | |
494 | NetBSD-SA2011-008: | | | |
495 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2011-008.txt.asc , | | | |
496 | OpenPAM privilege escalation (CVE-2010-1166) | | | |
497 | .It | | | |
498 | NetBSD-SA2011-009: | | | |
499 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2011-009.txt.asc , | | | |
500 | BIND resolver DoS | | | |
501 | .It | | | |
502 | NetBSD-SA2012-001: | | | |
503 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2012-001.txt.asc , | | | |
504 | OpenSSL buffer overflow in DER read function | | | |
505 | .It | | | |
506 | NetBSD-SA2012-002: | | | |
507 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2012-002.txt.asc , | | | |
508 | OpenSSL Invalid TLS/DTLS record attack | | | |
509 | .It | | | |
510 | NetBSD-SA2012-003: | | | |
511 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2012-003.txt.asc , | | | |
512 | Intel processors sysret to non-canonical address behaviour | | | |
513 | .It | | | |
514 | NetBSD-SA2012-004: | | | |
515 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2012-004.txt.asc , | | | |
516 | BIND resolver DoS when using DNSSEC Validation | | | |
517 | .bullet) | | | |
518 | . | | | |
519 | .Pp | | | |
520 | Advisories prior to NetBSD-SA2010-012 do not affect | | | |
521 | NetBSD 5.2: | | | |
522 | .Lk http://www.NetBSD.org/support/security/patches-5.2.html . | | | |
523 | .Ss2 Other Security Fixes | | | |
524 | .(bullet | | | |
525 | openssl: Fix CVE-2010-3864, CVE-2010-4180, CVE-2011-0014, CVE-2011-4109, CVE-2011-4576, CVE-2012-0050, CVE-2012-2110, and CVE-2012-2333. | | | |
526 | .It | | 465 | .It |
527 | postfix: Fix CVE-2011-0411 and CVE-2011-1720. | | 466 | NetBSD-SA2013-005: |
| | | 467 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2013-005.txt.asc |
| | | 468 | bind Denial of Service (CVE-2013-4854) |
528 | .It | | 469 | .It |
529 | xrdb: Fix CVE-2011-0465. | | 470 | NetBSD-SA2013-006: |
| | | 471 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2013-006.txt.asc |
| | | 472 | Arbitrary Kernel Read with netstat -P |
530 | .It | | 473 | .It |
531 | .Xr dhcpcd 8 : | | 474 | NetBSD-SA2013-007: |
532 | Fix CVE-2011-996. | | 475 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2013-007.txt.asc |
| | | 476 | Protocol handling issues in X Window System client libraries |
533 | .It | | 477 | .It |
534 | BIND: Fix CVE-2011-1910, CVE-2011-0414, CVE-2011-2464, CVE-2011-4313, CVE-2012-3817, CVE-2012-4244, and CVE-2012-5166. | | 478 | NetBSD-SA2013-009: |
535 | .It | | 479 | .Lk http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2013-009.txt.asc |
536 | Address CVE-2011-2895, buffer overflow in decompression, affecting multiple system utilities. | | 480 | user settable small BPF buffer can cause a panic |
537 | .It | | | |
538 | .Xr bpf 4 : | | | |
539 | avoid stack memory disclosure. | | | |
540 | .bullet) | | 481 | .bullet) |
541 | . | | 482 | . |
| | | 483 | .Pp |
| | | 484 | Advisories prior to NetBSD-SA2013-004 do not affect |
| | | 485 | NetBSD 5.2.1: |
| | | 486 | .Lk http://www.NetBSD.org/support/security/patches-5.2.1.html . |
542 | .Ss2 Kernel | | 487 | .Ss2 Kernel |
543 | .(bullet | | 488 | .(bullet |
544 | Fix | | 489 | Fixed a panic triggered when killing a process waiting to start. |
545 | .Xr ptrace 2 | | 490 | (PR#44935): |
546 | PT_SYSCALL. | | 491 | .Lk http://gnats.NetBSD.org/44935 |
547 | .bullet) | | 492 | .It |
548 | . | | 493 | Fixed a LOCKDEBUG panic in sysctl path. |
549 | .Ss2 File Systems | | 494 | (PR#45827): |
550 | .(bullet | | 495 | .Lk http://gnats.netbsd.org/45827 |
551 | WAPBL: Fix an error that could lead to file system corruption and "freeing free block" panics. | | 496 | .It |
552 | .It | | 497 | Fixed diagnostic panic when killing a traced process. |
553 | ext2fs: support inodes > 128 bytes, variable inode sizes, and 32 bit UID fields. | | 498 | (PR#42309): |
554 | .It | | 499 | .Lk http://gnats.netbsd.org/42309 |
555 | .Xr fss 4 : | | | |
556 | various fixes for snapshots. | | | |
557 | .It | | | |
558 | Numerous fixes for extended attributes on UFS1 file systems. | | | |
559 | .It | | | |
560 | Fix rename locking for UFS. | | | |
561 | .bullet) | | 500 | .bullet) |
562 | . | | 501 | . |
563 | .Ss2 Networking | | 502 | .Ss2 Networking |
564 | .(bullet | | 503 | .(bullet |
565 | .Xr wm 4 : | | 504 | Include BRDADDR and NETMASK in the IPv4 ioctls we ban for IPv6. |
566 | add support for more chips, work around some other issues. | | | |
567 | .It | | | |
568 | .Xr bge 4 : | | | |
569 | add support for many more chips, and many bugfixes. | | | |
570 | .It | | | |
571 | .Xr ne 4 : | | | |
572 | add NE2000 with 8bit bus width support, and EtherNEC support. | | | |
573 | .It | | | |
574 | Fix NULL pointer dereferences in IPv6 ESP code paths. | | | |
575 | .It | | | |
576 | Make EtherIP in IPv6 input path work. | | | |
577 | .It | | | |
578 | Fix MPPE in pppd. | | | |
579 | .It | | | |
580 | Clean up setting ECN bit in TOS. | | | |
581 | .It | | | |
582 | Added SOCK_SEQPACKET to PL_LOCAL sockets. | | | |
583 | .It | | | |
584 | Prevent a crash when destroying an interface. | | | |
585 | .bullet) | | | |
586 | . | | | |
587 | .Ss2 Miscellaneous Drivers | | | |
588 | .(bullet | | | |
589 | .Xr btmagic 4 : | | | |
590 | add Apple Magic Mouse driver. | | | |
591 | .It | | | |
592 | .Xr rnd 4 : | | | |
593 | prevent crash if len field in ioctl(RNDADDDATA) is garbage. | | | |
594 | .It | | | |
595 | .Xr uts 4 : | | | |
596 | driver for USB touchscreens. | | | |
597 | .bullet) | | | |
598 | . | | | |
599 | .Ss2 Audio | | | |
600 | .(bullet | | | |
601 | .Xr hdaudio 4 : | | | |
602 | .(bullet | | | |
603 | Add support for NVidia controllers. | | | |
604 | .It | | | |
605 | Fix 32KHz playback. PR#43542. | | | |
606 | .bullet) | | | |
607 | . | | | |
608 | .bullet) | | | |
609 | . | | | |
610 | .Ss2 Storage | | | |
611 | .(bullet | | | |
612 | .Xr esiop 4 | | | |
613 | / | | | |
614 | .Xr siop 4 : | | | |
615 | Improve error paths. PR#43278. | | | |
616 | .It | | | |
617 | .Xr aac 4 : | | | |
618 | support more boards. | | | |
619 | .It | | | |
620 | .Xr dk 4 : | | | |
621 | avoid a LOCKDEBUG panic on | | | |
622 | .Xr raid 4 . | | | |
623 | .It | | | |
624 | .Xr ciss 4 : | | | |
625 | Fix a performance problem. Also fix a DIAGNOSTIC panic. | | | |
626 | .It | | | |
627 | Fix an issue with >2TB disks. | | | |
628 | .It | | | |
629 | .(bullet | | | |
630 | .Xr raid 4 : | | | |
631 | .It | | | |
632 | Add support for >2TB raid devices. | | | |
633 | .It | | | |
634 | Add support for non-512-byte sector disks (up to 16KB). | | | |
635 | .It | | | |
636 | Add a hack to fix up disks with very old raidframe component labels. | | | |
637 | .bullet) | | | |
638 | . | | | |
639 | .It | | | |
640 | .Xr mpt 4 : | | | |
641 | Add byte-swapping so this works on bigendian platforms. Allow | | | |
642 | .Xr mpt 4 | | | |
643 | to use tagged queueing on SAS adapters. | | | |
644 | .It | | | |
645 | .Xr vnd 4 : | | | |
646 | fix using sparse files as backing store. | | | |
647 | .It | | | |
648 | .Xr raid 4 : | | | |
649 | parity maps always have at least one parity region. | | | |
650 | .bullet) | | | |
651 | . | | | |
652 | .Ss2 Platform specific | | | |
653 | .(bullet | | | |
654 | x86 (amd64 and i386) | | | |
655 | .(bullet | | | |
656 | Fix an array overflow when cpuid >= 32. | | | |
657 | .It | | | |
658 | Xorg: add more support for Intel HD3000/4000 and some for HD5000. | | | |
659 | .It | | | |
660 | Various fixes to allow NetBSD to run unmodified under Linux KVM. | | | |
661 | .bullet) | | | |
662 | . | | | |
663 | .It | | | |
664 | amiga | | | |
665 | .(bullet | | | |
666 | Raise address of user stack to highest safe address, which increases available user address space by 256MB. | | | |
667 | .bullet) | | | |
668 | . | | | |
669 | .It | | | |
670 | atari | | | |
671 | .(bullet | | | |
672 | Add support for the SMC Elite Ultra Ethernet. | | | |
673 | .It | | | |
674 | Allow users to change serial console behavior with | | | |
675 | .Xr binpatch 8 . | | | |
676 | .It | | | |
677 | Fixes for scheduling callback functions. | | | |
678 | .bullet) | | | |
679 | . | | | |
680 | .It | | | |
681 | dreamcast: Add workaround to make audio work. | | | |
682 | .It | | | |
683 | hp300: Make install.md probe | | | |
684 | .Xr cd 4 | | | |
685 | devices properly. | | | |
686 | .It | | | |
687 | hpcmips: Fix pcic kthread creation timing. PRs 41791 and 41164. | | | |
688 | .It | | | |
689 | m68k: | | | |
690 | .(bullet | | | |
691 | Ensure functions like | | | |
692 | .Xr mmap 2 , | | | |
693 | .Xr mremap 2 , | | | |
694 | .Xr shmat 2 | | | |
695 | or | | | |
696 | .Xr sbrk 2 | | | |
697 | return -1 in case of an error. A side benefit of this is to fix a segfault caused by jemalloc when | | | |
698 | .Xr mmap 2 | | | |
699 | failed. | | | |
700 | .It | | | |
701 | Fix some bad results in FPE. | | | |
702 | .bullet) | | | |
703 | . | | | |
704 | .It | | | |
705 | macppc: pbms(4): Avoid an immediate crash during attach, and fix the aspect ratio of the trackpad on the geyser2 model. | | | |
706 | .It | | | |
707 | pmax: Make | | | |
708 | .Xr ksyms 4 | | | |
709 | actually work. | | | |
710 | .It | | | |
711 | sh3: Fix logic error in copyinstr() when deciding whether to return EFAULT or ENAMETOOLONG. | | | |
712 | .It | | | |
713 | sparc | | | |
714 | .(bullet | | | |
715 | Many fixes for sparc SMP. | | | |
716 | .bullet) | | | |
717 | . | | | |
718 | .It | | | |
719 | vax | | | |
720 | .(bullet | | | |
721 | Corrected the definition of leap year for vax. | | | |
722 | .bullet) | | | |
723 | . | | | |
724 | .It | | | |
725 | x68k: | | | |
726 | .(bullet | | | |
727 | Fix boot problem on X68030+060turbo in 060 mode. | | | |
728 | .It | | | |
729 | Fix panics on heavy key strokes while running X. | | | |
730 | .bullet) | | 505 | .bullet) |
731 | . | | 506 | . |
732 | .It | | 507 | .Ss2 File Systems |
733 | xen | | | |
734 | .(bullet | | 508 | .(bullet |
735 | Fix xennet hotplug and implement feature-rx-copy, improving support under Linux Dom0. | | 509 | .Xr fss 4 : |
736 | .It | | 510 | Don't crash when running multiple "dump -X". |
737 | xbdback: prevent dom0 pool corruption. | | 511 | (PR#47514): |
738 | .It | | 512 | .Lk http://gnats.netbsd.org/47514 |
739 | Fix xenbus probe so NetBSD DomU can boot on Linux Dom0 with xl. | | | |
740 | .It | | | |
741 | Fix random kernel panics on domains with large memory. | | | |
742 | .It | | 513 | .It |
743 | Expose Xen kernfs entries inside a domU to make it possible to use xentools inside a domU to query XenStore entries. | | | |
744 | .bullet) | | | |
745 | . | | | |
746 | .bullet) | | 514 | .bullet) |
747 | . | | 515 | . |
748 | .Ss2 Miscellaneous | | 516 | .Ss2 Miscellaneous |
749 | .(bullet | | 517 | .(bullet |
750 | .Xr passwd 1 : | | 518 | Update tzdata to 2013e. |
751 | Log successful and unsuccessful attempts to change passwords, via -l or PAM. | | | |
752 | .It | | | |
753 | .Xr ftp 1 : | | | |
754 | .(bullet | | | |
755 | Avoid NULL dereference in log output. | | | |
756 | .It | | | |
757 | Parse HTTP 'Date' entries in the 'C' locale rather than the user's. | | | |
758 | .bullet) | | | |
759 | . | | | |
760 | .It | | | |
761 | Improve 'boot -z' support. | | | |
762 | .It | | | |
763 | Update to libfetch 2.31. | | | |
764 | .It | | | |
765 | .Xr top 1 : | | | |
766 | improve the default display for large numbers of CPUs. | | | |
767 | .It | | 519 | .It |
768 | Updated 32/64-bit compat to version 2. | | 520 | Update IPv6 DNS servers in sysinst. |
769 | .It | | 521 | .It |
770 | Stop | | 522 | MAKEDEV: the console major number is not always 0. |
771 | .Xr nfsd 8 | | | |
772 | from exiting prematurely during port-scan. | | | |
773 | .It | | 523 | .It |
774 | .Xr resize_ffs 8 : | | 524 | Update some TNF ssh keys in /etc/ssh/ssh_known_hosts. |
775 | support growing and shrinking all FFSv1 and growing all FFSv2 file systems. | | | |
776 | .bullet) | | 525 | .bullet) |
777 | . | | 526 | . |
778 | .\} \" \n[FOR_RELEASE] | | 527 | .\} \" \n[FOR_RELEASE] |
779 | . | | 528 | . |
780 | .Ss "Features to be removed in a later release" | | 529 | .Ss "Features to be removed in a later release" |
781 | The following features are to be removed from | | 530 | The following features are to be removed from |
782 | .Nx | | 531 | .Nx |
783 | in the future: | | 532 | in the future: |
784 | .(bullet | | 533 | .(bullet |
785 | Support for soft dependencies, also knows as soft updates | | 534 | Support for soft dependencies, also knows as soft updates |
786 | (see | | 535 | (see |
787 | .Dq softdep | | 536 | .Dq softdep |
788 | in | | 537 | in |
| @@ -845,26 +594,28 @@ The root directory of the | | | @@ -845,26 +594,28 @@ The root directory of the |
845 | \*V release is organized as follows: | | 594 | \*V release is organized as follows: |
846 | .ie \n[FOR_RELEASE] \{\ | | 595 | .ie \n[FOR_RELEASE] \{\ |
847 | .Pp | | 596 | .Pp |
848 | .Pa .../NetBSD-\*V/ | | 597 | .Pa .../NetBSD-\*V/ |
849 | .(tag README.files | | 598 | .(tag README.files |
850 | .It Li CHANGES | | 599 | .It Li CHANGES |
851 | Changes between the 4.0 and 5.0 releases. | | 600 | Changes between the 4.0 and 5.0 releases. |
852 | .It Li CHANGES-5.0 | | 601 | .It Li CHANGES-5.0 |
853 | Changes between the initial 5.0 branch and final release of 5.0. | | 602 | Changes between the initial 5.0 branch and final release of 5.0. |
854 | .It Li CHANGES-5.1 | | 603 | .It Li CHANGES-5.1 |
855 | Changes between the 5.0 and 5.1 releases. | | 604 | Changes between the 5.0 and 5.1 releases. |
856 | .It Li CHANGES-5.2 | | 605 | .It Li CHANGES-5.2 |
857 | Changes between the 5.1 and 5.2 releases. | | 606 | Changes between the 5.1 and 5.2 releases. |
| | | 607 | .It Li CHANGES-5.2.1 |
| | | 608 | Changes between the 5.2 and 5.2.1 releases. |
858 | .It Li CHANGES.prev | | 609 | .It Li CHANGES.prev |
859 | Changes in previous | | 610 | Changes in previous |
860 | .Nx | | 611 | .Nx |
861 | releases. | | 612 | releases. |
862 | .It Li LAST_MINUTE | | 613 | .It Li LAST_MINUTE |
863 | Last minute changes and notes about the release. | | 614 | Last minute changes and notes about the release. |
864 | .It Li README.files | | 615 | .It Li README.files |
865 | README describing the distribution's contents. | | 616 | README describing the distribution's contents. |
866 | .It Pa source/ | | 617 | .It Pa source/ |
867 | Source distribution sets; see below. | | 618 | Source distribution sets; see below. |
868 | .tag) | | 619 | .tag) |
869 | .Pp | | 620 | .Pp |
870 | In addition to the files and directories listed above, there is one | | 621 | In addition to the files and directories listed above, there is one |