[src/netbsd-3-0]: src/distrib/notes/common Final 3.0.3 release notes.

[ghen <ghen%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/e14b6ea77cc7
branches:  netbsd-3-0
changeset: 579430:e14b6ea77cc7
user:      ghen <ghen%NetBSD.org@localhost>
date:      Thu Jun 28 18:29:04 2007 +0000

description:
Final 3.0.3 release notes.

diffstat:

 distrib/notes/common/main |  25 +++++++++++++++++++------
 1 files changed, 19 insertions(+), 6 deletions(-)

diffs (60 lines):

diff -r 916f56e34d28 -r e14b6ea77cc7 distrib/notes/common/main
--- a/distrib/notes/common/main Thu Jun 28 18:15:22 2007 +0000
+++ b/distrib/notes/common/main Thu Jun 28 18:29:04 2007 +0000
@@ -1,4 +1,4 @@
-.\"    $NetBSD: main,v 1.278.2.28.2.7 2007/06/23 18:39:54 ghen Exp $
+.\"    $NetBSD: main,v 1.278.2.28.2.8 2007/06/28 18:29:04 ghen Exp $
 .\"
 .\" Copyright (c) 1999-2005 The NetBSD Foundation, Inc.
 .\" All rights reserved.
@@ -460,8 +460,6 @@
 Don't accept a compressed
 .Xr vnd 4
 image with block size 0 to avoid a kernel panic.
-.It
-Fix a panic caused by a NULL dereference.
 .bullet)
 .
 .Ss2 Networking
@@ -487,6 +485,9 @@
 Fix a coredump in
 .Xr dump 8
 when using -X (filesystem internal snapshots).
+.It
+Fix a panic when one user has 65536 active vnodes on a quota-enabled file
+system.
 .bullet)
 .
 .Ss2 Security
@@ -518,9 +519,18 @@
 which could allow an attacker to disrupt a connection between IPSec peers.
 .It
 Disable processing or routing header type 0 (RH0) IPv6 packets since they can
-be used for DoS attacks.  Provide a sysctl (net.inet6.ip6.rht0) to re-enable
-them.
-Note: RH0 functionality may be removed completely in future NetBSD releases.
+be used for DoS attacks (CVE-2007-2242).  Provide a sysctl (net.inet6.ip6.rht0)
+to re-enable them.  Note: the sysctl may be removed completely in future NetBSD
+releases.
+.It
+Two
+.Xr veriexec 4
+flaws have been fixed: users can no longer rename a file to a veriexec
+protected file or run unfingerprinted files at strict level two or above.
+.It
+.Xr file 1
+has been updated to version 4.21, including and integer underflow and an
+integer overflow fix (CVE-2007-1536 and CVE-2007-2799).
 .bullet)
 .
 .Ss2 Miscellaneous
@@ -538,6 +548,9 @@
 display a message indicating who's password is being changed, to avoid
 confusion after
 .Xr su 1 .
+.It
+The /etc/daily, weekly, monthly and security scripts now use $TMPDIR instead of
+/tmp.
 .bullet)
 .
 .Ss2 alpha specific