Copyright © 2015 The FreeBSD Documentation +
Copyright © 2015 The FreeBSD Documentation Project
FreeBSD is a registered trademark of the FreeBSD Foundation.
IBM, AIX, OS/2, PowerPC, PS/2, S/390, and ThinkPad are @@ -18,7 +18,7 @@ as trademarks. Where those designations appear in this document, and the FreeBSD Project was aware of the trademark claim, the designations have been followed by the “™” or the - “®” symbol.
The release notes for FreeBSD 10.2-RELEASE contain + “®” symbol.
The release notes for FreeBSD 10.2-RELEASE contain a summary of the changes made to the FreeBSD base system on the 10.2-STABLE development line. This document lists applicable security advisories that were issued since the last @@ -149,7 +149,27 @@ updated to version 1.5.3. [r285206]
The sendmail utility has been updated to version 8.15.2. [r285305]
OpenSSL has been updated to version 1.0.1p. [r285330]
The ntp - suite has been updated to version 4.2.8p3. [r285612]
/etc/rc.d
+ suite has been updated to version 4.2.8p3. [r285612]The
+ ssh(1) utility has been updated to re-implement hostname
+ canonicalization before locating the host in
+ known_hosts. [r285750]
+ (Sponsored by
+ Dell, Inc.)
Support for detecting and implementing
+ a workaround for various laptops and motherboards that do not
+ boot properly from GPT-partitioned disks
+ has been added to bsdinstall(8). Additionally, the
+ active flag will be set on the partition
+ when needed. [r285769]
+ (Sponsored by
+ ScaleEngine, Inc.)
Support for detecting and implementing + aligning partitions on 1Mb boundaries has been added to + bsdinstall(8). [r285721] + (Sponsored by + ScaleEngine, Inc.)
Support for selecting the partitioning + scheme when installing on the UFS + filesystem has been added to bsdinstall(8). [r285769] + (Sponsored by + ScaleEngine, Inc.)
A new rc(8) script,
growfs, has been added, which will resize
the root filesystem on boot if /firstboot
@@ -183,13 +203,16 @@
been fixed. [r284018]
The
PAE_TABLES kernel configuration option has
been added for FreeBSD/i386, which instructs pmap(9)
- to use PAE format for page tables with
- 32-bit physical addresses. Unlike the PAE
- option, PAE_TABLES preserves kernel binary
- interface (KBI) compatibility with
- non-PAE kernels, allowing
- non-PAE kernel modules and drivers to work
- with a PAE_TABLES-enabled kernel.
+ to use PAE format for page tables while
+ maintaining a 32-bit physical address size elsewhere in the
+ kernel. The use of this option can enhance application-level
+ security by enabling the creation of “no execute”
+ mappings on modern i386 processors. Unlike the
+ PAE option, PAE_TABLES
+ preserves kernel binary interface (KBI)
+ compatibility with non-PAE kernels,
+ allowing non-PAE kernel modules and drivers
+ to work with a PAE_TABLES-enabled kernel.
Additionally, system limits are tuned for 4GB maximum
RAM, avoiding kernel virtual address space
(KVA) exhaustion. [r282065]
@@ -382,7 +405,18 @@
default, if the callin port is an active console port. [r284775]
(Sponsored by
The FreeBSD Foundation)
This section describes changes that affect networking in - FreeBSD.
This section covers changes to the FreeBSD Ports + FreeBSD.
Support for PLPMTUD + blackhole detection (RFC 4821) has been + added to the tcp(4) stack, disabled by default. New + control tunables have been added: [r273838] + (Sponsored by + Limelight Networks)
| Tunable | Description |
|---|---|
net.inet.tcp.pmtud_blackhole_detection | Enables or disables PLPMTUD + blackhole detection |
net.inet.tcp.pmtud_blackhole_mss | MSS to try for IPv4 |
net.inet.tcp.v6pmtud_blackhole_mss | MSS to try for IPv6 |
New monitoring sysctl(8)s haven been added:
| Tunable | Description |
|---|---|
net.inet.tcp.pmtud_blackhole_activated | Number of times the code was activated to attempt + downshifting the MSS |
net.inet.tcp.pmtud_blackhole_min_activated | Number of times the blackhole + MSS was used in an attempt to + downshift |
net.inet.tcp.pmtud_blackhole_failed | Number of times that the blackhole failed to + connect after downshifting the + MSS |
This section covers changes to the FreeBSD Ports Collection, package infrastructure, and package maintenance and installation tools.
This section covers changes to the FreeBSD Documentation Project sources and toolchain.