version 1.1, 2014/08/03 02:53:06 |
version 1.2, 2014/08/03 14:43:58 |
|
|
|
|
<li>Security improvements: |
<li>Security improvements: |
<ul> |
<ul> |
<li>... |
<li>Changed the heuristics of the stack protector to also protect functions with local array definitions and references to local frame addresses. This matches the -fstack-protector-strong option of upstream GCC. |
|
<li>Position-independent executables (PIE) are now used by default on powerpc. |
|
<li>Removed Kerberos. |
</ul> |
</ul> |
<p> |
<p> |
|
|
|
|
</ul> |
</ul> |
<p> |
<p> |
|
|
<li>OpenSSH 6.6 (including changes to 6.5, a feature-focused release): |
<li>LibreSSL |
<ul> |
<ul> |
|
<li>... |
|
</ul> |
|
<p> |
|
|
|
<li>OpenSSH 6.7 |
|
<ul> |
<li>Security: |
<li>Security: |
<ul> |
<ul> |
<li>... |
<li>... |
|
|
|
|
<li>Ports and packages: |
<li>Ports and packages: |
<ul> |
<ul> |
<li>Over X,XXX ports. |
<li>Over 8,800 ports. |
<li>... |
<li>... |
</ul> |
</ul> |
<p> |
<p> |
|
|
|
|
<li>Some highlights: |
<li>Some highlights: |
<ul> |
<ul> |
<li>GNOME 3.10.2 <li>KDE 3.5.10 |
<li>GNOME 3.12.2 <li>KDE 3.5.10 |
<li>KDE 4.11.5 |
<li>KDE 4.13.2 |
<li>Xfce 4.10 <li>MySQL 5.1.73 |
<li>Xfce 4.10 <li>MySQL 5.1.73 |
<li>PostgreSQL 9.3.2 <li>Postfix 2.11.0 |
<li>PostgreSQL 9.3.4 <li>Postfix 2.11.1 |
<li>OpenLDAP 2.3.43 and 2.4.38 <li>Mozilla Firefox 24.3 and 26.0 |
<li>OpenLDAP 2.3.43 and 2.4.39 <li>Mozilla Firefox 31.0 |
<li>Mozilla Thunderbird 24.3.0 <li>GHC 7.6.3 |
<li>Mozilla Thunderbird 31.0 <li>GHC 7.6.3 |
<li>LibreOffice 4.1.4.2 <li>Emacs 21.4 and 24.3 |
<li>LibreOffice 4.1.6.2 <li>Emacs 21.4 and 24.3 |
<li>Vim 7.4.135 <li>PHP 5.3.28 and 5.4.24 |
<li>Vim 7.4.135 <li>PHP 5.3.28, 5.4.30 and 5.5.14 |
<li>Python 2.7.6 and 3.3.2 <li>Ruby 1.8.7.374, 1.9.3.484, 2.0.0.353 and 2.1.0 |
<li>Python 2.7.8, 3.3.5 and 3.4.1 <li>Ruby 1.8.7.374, 1.9.3.545, 2.0.0.481 and 2.1.2 |
<li>Tcl/Tk 8.5.15 and 8.6.1 <li>JDK 1.6.0.32 and 1.7.0.21 |
<li>Tcl/Tk 8.5.15 and 8.6.1 <li>JDK 1.6.0.32 and 1.7.0.55 |
<li>Mono 2.10.9 <li>Chromium 32.0.1700.102 |
<li>Mono 3.4.0 <li>Chromium 36.0.1985.125 |
<li>Groff 1.22.2 <li>Go 1.2 |
<li>Groff 1.22.2 <li>Go 1.3 |
<li>GCC 4.6.4 and 4.8.2 <li>LLVM/Clang 3.3 |
<li>GCC 4.6.4, 4.8.3 and 4.9.0 <li>LLVM/Clang 3.5 (20140228) |
<li>Node.js 0.10.24 |
<li>Node.js 0.10.28 |
</ul> |
</ul> |
<p> |
<p> |
|
|
|
|
|
|
<li>The system includes the following major components from outside suppliers: |
<li>The system includes the following major components from outside suppliers: |
<ul> |
<ul> |
<li>Xenocara (based on X.Org 7.7 with xserver 1.14.5 + patches, |
<li>Xenocara (based on X.Org 7.7 with xserver 1.15.2 + patches, |
freetype 2.5.2, fontconfig 2.10.91, Mesa 9.2.5, xterm 301, |
freetype 2.5.3, fontconfig 2.11.1, Mesa 10.2.3, xterm 309, |
xkeyboard-config 2.10.1 and more) |
xkeyboard-config 2.11 and more) |
<li>Gcc 4.2.1 (+ patches) and 3.3.6 (+ patches) |
<li>Gcc 4.2.1 (+ patches) and 3.3.6 (+ patches) |
<li>Perl 5.16.3 (+ patches) |
<li>Perl 5.18.3 (+ patches) |
<li>Our improved and secured version of Apache 1.3, with |
<li>Nginx 1.6.0 (+ patches) |
SSL/TLS and DSO support |
<li>SQLite 3.8.4.3 (+ patches) |
<li>Nginx 1.4.4 (+ patches) |
|
<li>OpenSSL 1.0.1c (+ patches) |
|
<li>SQLite 3.8.0.2 (+ patches) |
|
<li>Sendmail 8.14.8, with libmilter |
<li>Sendmail 8.14.8, with libmilter |
<li>Bind 9.4.2-P2 (+ patches) |
<li>Bind 9.4.2-P2 (+ patches) |
<li>NSD 4.0.1 |
<li>NSD 4.0.1 |
<li>Lynx 2.8.7rel.2 with HTTPS and IPv6 support (+ patches) |
<li>Unbound 1.4.22 |
<li>Sudo 1.7.2p8 |
<li>Sudo 1.7.2p8 |
<li>Ncurses 5.7 |
<li>Ncurses 5.7 |
<li>Heimdal 1.5.2 (+ patches) |
|
<li>Binutils 2.15 (+ patches) |
<li>Binutils 2.15 (+ patches) |
<li>Gdb 6.3 (+ patches) |
<li>Gdb 6.3 (+ patches) |
<li>Less 444 (+ patches) |
<li>Less 444 (+ patches) |