[OmniOS-discuss] SECURITY AND FEATURE UPDATES for OmniOS LTS, Stable, and old-Stable

[Dan McDonald]

Please "pkg update" on your OmniOS r151014, r151016, or r151018 machines at your earliest convenience.

The following security fixes are on ALL THREE:

	• libxml update to 2.9.4
	• DTrace stability fixes (illumos 7033-7035)
	• setid binaries disallow ld.so.1's $ORIGIN (illumos 6987)
	• ZFS no longer bleeds zvol entries into non-global zones (illumos 7019,7020)
	• NTP to 4.2.8p8
	• expat to 2.1.1 (with CVE 2016-0718 fix)

The following other fixes are on r151014 and r151018:

	• missing MCFG table should lead to I/O PCIe config access (illumos 6859)
	• allow sendfile() on AF_UNIX sockets (illumos 6861)
	• ZFS-helper: kernel virtual memory fragmentation leads to hang (illumos 6914)
	• STMF kstat free is using an improper size for kmem_free(). (illumos 6938)
	• Driver support for Solarflare 10G and 40G ethernet

The following are new to r151014, but are already on r151018:

	• Timezone, USB, and PCI data files updates. (Now matches r151018)
	• Driver support for vmxnet3s
	• MSI-X support fixed for virtio
	• The debug.illumos pkg(5) variant.

Each release's release notes have been updated, and install media for r151014 and r151018 have been updated as well.

Bloody will be getting an IPS-only update by the end of the day.  Watch for that in a separate mail.

Thank you, and happy updating!
Dan