src/sys, branch releng/10.4

Fix small kernel memory disclosures. [EN-18:12.mem]

2018-09-27T18:36:30+00:00

Reported by:	Thomas Barabosch, Fraunhofer FKIE
Approved by:	so
Security:	FreeBSD-EN-18:12.mem
Security:	CVE-2018-17155

Fix DoS in listen syscall over IPv6 socket. [EN-18:11.listen]

2018-09-27T18:34:42+00:00

Reported by:	Jakub Jirasek, Secunia Research at Flexera
Approved by:	so
Security:	FreeBSD-EN-18:11.listen
Security:	CVE-2018-6925

Fix improper elf header parsing. [SA-18:12.elf]

2018-09-12T05:07:35+00:00

Approved by:	so
Security:	FreeBSD-SA-18:12.elf
Security:	CVE-2018-6924

Revis manual pages. [SA-18:08.tcp]

2018-08-15T02:31:10+00:00

Fix unauthenticated EAPOL-Key decryption vulnerability.
[SA-18:11.hostapd]

Approved by:	so

Bump patch level and document them.

2018-08-06T20:39:27+00:00

Approved by:	so

Address concerns about CPU usage while doing TCP reassembly.

2018-08-06T17:50:40+00:00

Currently, the per-queue limit is a function of the receive buffer
size and the MSS.  In certain cases (such as connections with large
receive buffers), the per-queue segment limit can be quite large.
Because we process segments as a linked list, large queues may not
perform acceptably.

The better long-term solution is to make the queue more efficient.
But, in the short-term, we can provide a way for a system
administrator to set the maximum queue size.

We set the default queue limit to 100.  This is an effort to balance
performance with a sane resource limit.  Depending on their
environment, goals, etc., an administrator may choose to modify this
limit in either direction.

Approved by:	so
Security:	FreeBSD-SA-18:08.tcp
Security:	CVE-2018-6922

Fix multiple small kernel memory disclosures. [EN-18:05.mem]

2018-05-08T17:14:54+00:00

Approved by:	so
Security:	CVE-2018-6920
Security:	CVE-2018-6921
Security:	FreeBSD-EN-18:05.mem

Fix mishandling of x86 debug exceptions. [SA-18:06.debugreg]

2018-05-08T17:12:10+00:00

Bump newvers.sh and UPDATING for today's patches.

Approved by:	so
Security:	CVE-2018-8897
Security:	FreeBSD-SA-18:06.debugreg
Sponsored by:	The FreeBSD Foundation

Fix multiple small kernel memory disclosures. [EN-18:04.mem]

2018-04-04T05:43:03+00:00

Reported by:	Ilja van Sprundel
Approved by:	so
Security:	CVE-2018-6919
Security:	FreeBSD-EN-18:04.mem

Fix ipsec crash or denial of service. [SA-18:05.ipsec]

2018-04-04T05:37:52+00:00

Reported by:	Maxime Villard
Approved by:	so
Security:	CVE-2018-6918
Security:	FreeBSD-SA-18:05.ipsec