OmniOS r151006
r151006_088
Weekly release for 19 January - 23 January 2015
- Security fixes:
library/security/openssl
update to 1.0.1k, see OpenSSL SecAdv 20150108web/curl
update to 7.40.0, see curl advisory 20150108B
- Updates:
driver/storage/mpt_sas
,developer/debug/mdb
- Backport the following mpt_sas updates/fixes- 5297 mptsas refhash replacement on reset can cause hang
- 4819 fix mpt_sas command timeout handling
- 5015 improvements to mpt_sas debug logging and mdb module
- 5016 improve mpt_sas auto request sense
- 4960 import latest LSI MPI header files from FreeBSD driver
- 4546 mpt_sas needs enhancing to support LSI MPI2.5
- 5017 use 64bit DMA in mpt_sas
- 5080 potential memory leak in mpt_sas
- 5081 mpt_sas watchdog timout needs to be initialized earlier
r151006_067
Weekly release for 11 August - 15 August 2014
- Fixes:
system/install/kayak-kernel
bug fix for miniroot.gz, which was missing a shared library that caused zpool creation to fail
r151006_066
Weekly release for 4 August - 8 August 2014
- Security fixes:
- Update OpenSSL to 1.0.1i to address OpenSSL SecAdv 20140806
- Other fixes:
- Backported illumos 5026 (REBOOT REQUIRED)
r151006_059
Weekly release for 16 June - 20 June 2014
- Updates:
r151006_057
Weekly release for 2 June - 6 June 2014
- Security fixes:
- Update OpenSSL to 1.0.1h to address OpenSSL SecAdv 20140605
r151006_049
Weekly release for 7-11 April 2014
Security fixes:
library/security/openssl
update to 1.0.1g, fixing CVE-2014-0160 (aka the “Heartbleed” bug)- TIP: After installing the
library/security/openssl
update, you should restart any daemons which utilize the affected OpenSSL libraries (libssl, and libcrypto). We have a shell script will examine running processes in the current zone and inform you which services need to be restarted to complete the update
Bug fixes:
driver/storage/mpt_sas
,developer/debug/mdb
,service/fault-management
Multiple fixes which increase hot-plug reliability with LSI HBAs. (REBOOT REQUIRED)- 4682 panic in mptsas refhash
- 4500 mptsas_hash_traverse() is unsafe, leads to missing devices
- 4499 ::mptsas should show slot/enclosure for targets
- 4403 mpt_sas panic when pulling a drive
- 4623 Remove -Wno-unused-label from mpt_sas
- Fix a crash in the ipmi driver which can occur under some access circumstances (REBOOT REQUIRED)
- 4636 ipmi driver calls delay without converting to hz
- 4637 ipmi driver needs to coordinate access to the dev_list
r151006_036
Weekly release for 6-10 January 2014
Please note that users wishing to remain on the LTS release should follow these steps to ensure that all updates are correctly applied.
Security fixes:
library/security/openssl
update to 1.0.1f, fixing CVE-2013-6449, CVE-2013-6450, and CVE-2013-4353
Bug fixes:
incorporation/jeos/omnios-userland
fixes missing packages and an incorrect version that prevented updating the pciutils package.system/install/kayak
,system/install/kayak-kernel
updated miniroot and fix to image builder scripts to allow building ZFS streams for LTS release
Enhancements:
- Backport new open-source HP SmartArray driver (cpqary3, illumos issue 3881) from r151008, bringing support for newer models to the LTS release
Updated release media are available which contain these updates.
r151006_032
Weekly release for 9 December - 13 December 2013
Bug fixes:
- the entire incorporation has been rebuilt so that users on r151006 can upgrade / install 151006 packages without issue
r151006_031
Weekly release for 2-6 December 2013
Naming convention change: When a release passes its 26-week mark and a new stable release is out, further weekly releases will move to a week-number scheme, picking up with week 27. This will persist as long as the release is receiving updates, according to the release cycle.
Misc. fixes:
runtime/perl/manual
,runtime/perl-64
fix dependency issue that interferes with upgrade to r151008. Must be applied to both global zone and any non-global zones prior to upgrade
Now that r151008 is released, users wishing to stay on r151006, which is an LTS release, should freeze the incorporation packages at 0.151006 as noted in the Admin Guide.
r151006y
Weekly release for 21 October - 25 October 2013
Due to the kernel updates in this release, a reboot is required and new media have been spun.
- system/kernel: include kernel support for MAP_32BIT from user-space
- driver/storage/mpt_sas: revert to old driver for stability
- driver/storage/mr_sas: revert to old driver for stability
- developer/debug/mdb: include new API needed for user-space dmods
Misc. fixes:
- system/pciutils/pci.ids updated to 2013.10.23
r151006p
Weekly release for 12 August - 16 August 2013
Security fixes - Updated kernel (REBOOT REQUIRED)
- system/file-system/zfs: 4039 zfs_rename()/zfs_link() needs stronger test for XDEV
Bug fixes:
- library/libxml2: xml2-config –cflags reports wrong location for libxml2 headers
Misc. fixes:
- system/pciutils/pci.ids updated to 2013.08.09
- web/ca-bundle updated to include OmniTI SSL certificate
r151006n
Weekly release for 29 July - 2 August 2013
Security fixes - Updated kernel (REBOOT REQUIRED)
- 3895 {tcp,udp}_{largest,smallest}_anon_port should reality-check
- network/dns/bind upgraded to BIND 9.9.3-P2 due to CVE-2013-4854
Bug fixes:
- 3869 tcp anon port calculation wrong
- 3893 lvm: incorrect flag handling
- ipmitool should require driver/ipmi
- package/pkg requires an updated SSL cert directory
- fixed ncurses configure tests
r151006l
Weekly release for 15-19 July 2013
Security fixes:
- Update libxml2 to 2.9.1 - Fixes CVE-2013-2877
Bug fixes:
- An update for the omnios-userland incorporation was required to accommodate the version bump for the updated library/libxml2 package, as well as any future versions
r151006j
Weekly release for 1-5 July 2013
Security fixes:
- curl secadv 20130622 (details)
Bug fixes:
- net-snmp CLI tools broken
- driver/virtualization/kvm needs a driver action in its manifest
- Removal of uname(1) from file/gnu-coreutils
- system/pciutils upgraded to 3.2.0
- system/pciutils/pci.ids updated to 20130701
r151006i
Weekly release for 24-28 June 2013
Security fixes - Updated kernel (REBOOT REQUIRED)
- 3691 setgroups() needs a sorted GID list for more than 16 groups
- Affected
packages:ystem/kernel
,developer/debug/mdb
,system/kernel/platform
- Affected
Bug fixes:
- 3843 kstat should handle NULL string values
- Affected packages:
system/extended-system-utilities
- Affected packages:
- 3809 Recent libc change breaks Solaris 10 Branded Zone Support
- Affected packages:
system/zones/brand/s10
- Affected packages:
- 3787 gcc4.7 !__cplusplus change incompatibility
- 3823 wchar.h and wctype_iso.h incompatibility
- Affected packages:
system/header
- Affected packages:
New packages:
driver/network/cxgbe
- 3701 Chelsio Terminator 4 NIC driver for illumos
r151006g
Weekly release for 10-14 June 2013
Bug fixes:
system/zones/brand/ipkg
- zone cloning fixed. See ticket #11
Updated packages:
system/pciutils/pci.ids
- updated to 2013-05-30 snapshot
r151006c
Weekly release for 13-17 May 2013
Even though r151006 was delayed, we are sticking to the planned release schedule, which assumed a release for the week of 29 April - 3 May. This way the release of r151008 will not be delayed as a consequence, and it makes this week “c”.
Bug fixes:
- Updated kernel (REBOOT REQUIRED) - illumos #3769
fixes the implementation of SOCK_NONBLOCK and implements SOCK_NDELAY to match accept4().
- Affects:
system/kernel
,system/kernel/platform
,system/library
- Note: the changes in
system/library
are documentation only, no ABI change - Updates may be applied without detaching non-global zones, though we recommend that zones still be shut down during the update process. Zones attached to the system during this update will get a new ZFS dataset that matches the global zone’s new BE
- After booting into the new BE, shut down the non-global zone again and run
pkg -R <zonepath>/root update
where
<zonepath>
is the value of the zonepath attribute in the zone’s configuration. Doing it this way is required because thesystem/library
package normally requires a new BE, which can’t be done from within a non-global zone - After applying this update,
/etc/motd
will still show the original release hash (omnios-8d266aa), butuname -v
will now show omnios-d3950d8, indicating the updated kernel
- Affects:
service/network/ntp
- SMF manifest fix to allow ntpd to raise its own scheduling priority, thereby providing more consistent clock adjustments. (https://github.com/omniti-labs/omnios-build/issues/14)storage/storage-server
- Remove dependency onlibrary/samba/libsmbclient
, which is not part of illumos-gate and not shipped by OmniOSsystem/install/kayak-kernel
- Fix missing miniroot.gz and pxegrub files
Updated packages:
system/pciutils/pci.ids
- updated to 2013-05-13 snapshot
r151006
Stable release, May 8, 2013
illumos-omnios at 8d266aa
Upgrade Instructions: Upgrade_r151004_r151006
Highlights
- LZ4 compression is available for ZFS filesystems and is supported by GRUB
- Allow operator setting of TCP initial congestion window
- GNU automake packages
developer/build/automake-111
anddeveloper/build/automake-19
deprecated and replaced bydeveloper/build/automake
based on GNU Automake 1.12 - Packages
runtime/perl-5142
andruntime/perl-5161
are deprecated, and the Perl package has been renamed toruntime/perl
based on Perl 5.16.1 crypto/ca-certificates
has been deprecated and replaced byweb/ca-bundle
. The path to where the certificates are expected to live has change to/etc/ssl/certs/
from/etc/openssl/certs/
Userland changes ([+] Added, [-] Removed, [*] Changed)
- [*] compress/gzip 1.4 -> 1.5
- [*] compress/xz 5.0.3 -> 5.0.4
- [-] crypto/ca-certificates
- [*] data/iso-codes 3.33 -> 3.39
- [*] database/sqlite3 3.7.10 -> 3.7.14.1
- [*] developer/build/autoconf 2.68 -> 2.69
- [-] developer/build/automake-111
- [-] developer/build/automake-19
- [+] developer/build/automake 1.12
- [*] developer/build/libtool 2.4 -> 2.4.2
- [+] developer/gcc44 4.4.4
- [-] developer/gcc46
- [+] developer/gcc47 4.7.2
- [*] developer/swig 1.3.40 -> 2.0.8
- [*] developer/gnu-binutils 2.22 -> 2.23
- [*] developer/lexer/flex 2.5.35 -> 2.5.37
- [*] developer/parser/bison 2.5 -> 2.6.4
- [*] developer/versioning/git 1.7.10.1 -> 1.8.1.3
- [*] developer/versioning/mercurial 2.1 -> 2.3.2
- [*] library/glib 2.30.2 -> 2.34.1
- [*] library/gmp 5.0.4 -> 5.0.5
- [-] library/gnutls
- [*] library/libffi 3.0.10 -> 3.0.11
- [*] library/libidn 1.24 -> 1.25
- [-] library/libtasn1
- [*] library/libxml2 2.7.8 -> 2.9.0
- [*] library/libxslt 1.1.26 -> 1.1.28
- [*] library/nspr 4.9 -> 4.9.3
- [*] library/pcre 8.30 -> 8.31
- [-] library/popt
- [*] library/zlib 1.2.6 -> 1.2.7
- [*] library/c++/sigcpp 2.2.10 -> 2.3.1
- [-] library/security/libgpg-error
- [-] library/security/nettle
- [*] library/security/openssl 1.0.1d -> 1.0.1e
- [+] network/openssh 6.1p1
- [*] shell/pipe-viewer 1.20 -> 1.3.9
- [-] shell/which
- [*] system/library/dbus 1.4.16 -> 1.6.8
- [*] system/library/dbus-glib 0.98 -> 0.100
- [-] system/library/security/libgcrypt
- [*] system/management/ipmitool 1.8.11 -> 1.8.12
- [*] system/management/snmp/net-snmp 5.4.4 -> 5.7.2
- [*] terminal/tmux 1.6 -> 1.7
- [*] text/gawk 4.0.0 -> 4.0.1
- [*] text/gnu-grep 2.10 -> 2.14
- [*] text/gnu-patch 2.6.1 -> 2.7
- [*] text/less 443 -> 451
- [-] text/texinfo
- [+] web/ca-bundle 5.11
- [*] web/wget 1.13.4 -> 1.14
Notable upstream illumos changes and fixes
- 667 cp support for -a flag
- 3619 cp -p clobbers permissions/ownership following symbolic links
- 3327 Add -m flag to df
- 3474 tar should support -C on extract
- 374 cron should send more useful mail
- 3537 want pool io kstats
- 3665 Implement O_CLOEXEC as an open() flag
- 3668 add “%H” to mdb_printf() for human-readable sizes
- 3500 Support LSI SAS2008 (Falcon) Skinny FW for mr_sas(7D)
- 3178 Support for LSI 2208 chipset in mr_sas
- 3667 Allow ixgbe to use unsupported SFP modules
- 3708 Fast reboot support in ixgbe
- 3679 prtconf should print out PCI database information
- 3682 /usr/bin/head should implement -c -q and -v
Changes from other sources
- add support for BCM 5719, 5720, and BCM5784M chipset (joyent OS-1366)
- IP DCE scalability (joyent OS-946, OS-1042, OS-1056, OS-1082, OS-1059)