ViewVC Help
View File | Revision Log | Show Annotations | Revision Graph | Download File | Root Listing
root/midnightbsd-cvs/src/UPDATING
(Generate patch)

Comparing src/UPDATING (file contents):
Revision 1.38.2.20 by laffer1, Wed Jul 29 15:39:27 2009 UTC vs.
Revision 1.113 by laffer1, Wed Feb 16 00:30:23 2011 UTC

# Line 1 | Line 1
1   Updating Information for MidnightBSD users
2  
3 < Items affecting the mports and packages system can be found in
4 < /usr/mports/UPDATING.
3 > 20110215:
4 >        age(4)
5  
6 < 20090729:
7 <        MidnightBSD 0.2.1-RELEASE-p11
6 > 20110208:
7 >        BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
8  
9 <        Patch for Bind 9 security vulnerability. a dynmaic update packet
9 > 20110206:
10 >        eeemon(4) added to monitor Asus Eee PC.
11 >
12 > 20110205:
13 >        OpenSSH 5.7p1
14 >
15 >        GNU sort 6.9 (coreutils)
16 >
17 > 20110203:
18 >        one true awk 20100523 imported
19 >
20 >        sqlite 3.7.5
21 >
22 >        OpenSSL 0.9.8q
23 >
24 > 20110202:
25 >        tcsh 6.17.00
26 >
27 >        file  5.05
28 >
29 > 20110122:
30 >        Import it(4) and lm(4), with support for Super I/O hardware monitors. This
31 >        uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
32 >
33 > 20110120:
34 >        BIND 9.6.2-P3
35 >
36 >        sudo 1.7.4-p6
37 >
38 > 20110115:
39 >        Add experimental jme(4) for Jmicron ethernet devices.
40 >
41 > 20101130:
42 >        A double free exists in the SSL client ECDH handling code, when
43 >        processing specially crafted public keys with invalid prime
44 >        numbers. [CVE-2010-2939]
45 >
46 > 20101120:
47 >        Several portions of the kernel and userland code related to UFS file
48 >        systems (and UFS2) cannot properly handle inode counts above 2^31 due
49 >        to use of int types.  Based on a patch from FreeBSD, I've modified
50 >        our UFS2 implementation to handle unsigned values for inode counts
51 >        which should allow for file systems greater than 16TB.
52 >
53 >        newfs and growfs was also modified.
54 >
55 > 20101110:
56 >        Fix a security issue with pseudofs which could result in running code in kernel
57 >        context or a kernel panic depending on system configuration.  This affects file
58 >        systems such as procfs for instance.
59 >
60 > 20101021:
61 >        sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
62 >        This is similar to functions present in many linux distros. The utility was
63 >        written by Devin Teske for FreeBSD.
64 >
65 > 20100920:
66 >        bzip2 security patch for integer overflow.
67 >
68 > 20100905:
69 >        MidnightBSD RELENG_0_3 branch created.  Aggressive development continues here
70 >        for 0.4.
71 >
72 > 20100902:
73 >        Fix a security issue with libutil that allows users to bypass cpu limits in
74 >        login.conf in some cases.  This combined with OpenSSH for example can allow
75 >        the user to get more resources than they're allowed.
76 >
77 > 20100822:
78 >        Import Apple's mDNSResponder (mdnsd).
79 >
80 > 20100814:
81 >        libdispatch added to MidnightBSD.  This provides functionality found in
82 >        Mac OS X's GCD.  We do not have blocks support yet.  As this code is
83 >        licensed under Apache 2, we create a new MK_APACHE option so that
84 >        it's not required for all users to run code under a license they
85 >        may not like.
86 >
87 > 20100713:
88 >        mbuf readonly fix related to sendfile(2) data corruption.
89 >
90 > 20100704:
91 >        brainfuck(1) imported from MirBSD.
92 >
93 > 20100505:
94 >        zlib 1.2.5
95 >
96 > 20100430:
97 >        Sudo 1.7.2p6 imported
98 >
99 > 20100321:
100 >        Update zlib to 1.2.4
101 >
102 > 20100319:
103 >        Removed i586 from default i386 generic kernel.
104 >
105 > 20100317:
106 >        Update to tzdata2010e (time zones).  This includes changes in
107 >        Mexico.
108 >
109 >        Add support for several newer sound cards via hda including
110 >        ATI and Realtek chipsets.
111 >
112 > 20100313:
113 >        CPU detection has been changed.  VIA Padlock detection added.
114 >
115 > 20100312:
116 >        Fix a number of bugs and compiler warnings in libmport. Handle
117 >        plus signs in paths for mport.check-fake
118 >
119 > 20100311:
120 >        mksh R39c
121 >
122 > 20100309:
123 >        Sudo 1.7.2p5
124 >
125 >        sqlite3 3.6.23
126 >
127 >        mksh R39b
128 >
129 >        libffi (ffi) 3.0.9
130 >
131 > 20100206:
132 >        WITHOUT_LIB32 is no longer needed on AMD64.  GCC was fixed to
133 >        properly pass arguments to ld.
134 >
135 >        re(4) and rl(4) have been updated to support several new
136 >        realtek chipsets.  Performance has been improved on re(4).
137 >
138 > 20100204:
139 >        Fix a bug cropping up on AMD64 MidnightBSD with sftp
140 >        segfaulting.  
141 >
142 > 20100116:
143 >        Import ash changes from FreeBSD (bin/sh) 8-Stable.
144 >
145 >        BIND 9.6.1-P2
146 >
147 > 20100110:
148 >        Import Sendmail 8.14.4. Fix for SSL vulnerability.
149 >
150 >        posix_spawn(3) added to MidnightBSD libc.  Users may need to build and
151 >        install libc before doing a full buildworld when upating from 0.2 or
152 >        older current systems.
153 >
154 >        kqueue(2) was modified to support portions of libdispatch functionality.
155 >
156 > 20100106:
157 >        Bind security update.  Fix a bug with DNSSEC that causes negative
158 >        cache entries and thus a possible DNS cache poisoning attack.
159 >
160 >        Fix a bug in ZFS that can reset permissions on system crashes.
161 >
162 > 20091228:
163 >        amdtemp(4) was added.  It allows one to monitor to the temperature
164 >        of an AMD CPU such as a Phenom.
165 >
166 > 20091205:
167 >        OpenSSL security fix
168 >
169 >        The SSL version 3 and TLS protocols support session renegotiation without
170 >        cryptographically tying the new session parameters to the old parameters.
171 >
172 > 20091128:
173 >        OpenBSD sensors framework imported including sensorsd(8)
174 >
175 > 20091126:
176 >        OpenNTPD 4.4 import
177 >
178 >        Update OpenSSH to 5.3p1
179 >
180 >        mksh R39
181 >
182 > 20091124:
183 >        cpdup updated from DragonFly to 1.15
184 >
185 >        tzdata2009s updated with latest timezone data for November 2009.
186 >
187 > 20091010:
188 >        amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
189 >        to test current.
190 >
191 >        Revert unicode filename fixes from ntfs code.  This was causing chaos
192 >        on amd64 systems.
193 >
194 > 20091006:
195 >        Update timezone data with tzdata2009n with the Pakistan and
196 >        Argentina changes.
197 >
198 >        Sync several userland utilities with versions from FreeBSD 7.0 in
199 >        sbin and usr.sbin.
200 >
201 > 20090919:
202 >        Update timezone data with tzdate2009m from September 2009.
203 >
204 > 20090729:
205 >        Patch for Bind 9 security vulnerability. a dynmaic update packet
206          can trigger an assertion and cause named to exit
207  
208 < 20090610:
209 <        MidnightBSD 0.2.1-RELEASE-p10
210 <        
211 <        This should be applied to all systems running 0.2.1. Users on
212 <        p9 simply should update their kernels. No world update is required.
208 > 20090606:
209 >        Remove PCC from the base system.  This compiler will not work
210 >        as a system compiler for us as we've got some userland investment
211 >        in C++ code and may have Objective-C in the future.  We're stuck
212 >        with a solution that supports these three languages at a minimum.
213  
214 <        ipv6:
215 <        The SIOCSIFINFO_IN6 ioctl is missing a necessary permissions check.
216 <        Don't let everyone on the planet (with local access) change the
21 <        properties on the ipv6 interfaces.
214 >        I had wanted to keep it as an optional compiler because it is
215 >        fast, however too many users want to try to use it for the base
216 >        system which makes no sense.
217  
218 <        anonymous pipes:
219 <        Stop unprivileged processes from reading pages of memory belonging
220 <        to other processes with anonymous pipes.
218 >        A hack was added for Cypress based usb hard drive enclosures to
219 >        the kernel.  This should cut down on commands it claims to support
220 >        but does not (at the cam layer).  Found while testing ZFS on
221 >        an external device.
222  
223 < 20090521:
224 <        MidnightBSD 0.2.1-RELEASE-p9
223 > 20090520:
224 >        The powerd daemon no longer starts automatically to improve
225 >        compatibility with many systems.  However, there is a new
226 >        installer option in the startup section to enable it. This
227 >        makes it easier to enable for users that have working systems. I                thought it was only a problem on older hardware, but it freaks
228 >        out my new Phenom too.
229  
230 <        This fix is only in configuration files for ssh and sshd.  Users on
231 <        p8 should simply add
230 > 20090502:
231 >        OpenSSH 5.2p1 import
232  
233 <        Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc
233 >        ale(4) connected to the build. (kernel module only)
234  
235 <        to their configuration files for sshd_config and ssh_config in etc/ssh
235 > 20090501:
236 >        Imported makefs utility from NetBSD/FreeBSD
237  
238   20090422:
239 <        MindightBSD 0.2.1-RELEASE-p8
239 >        OpenSSL security update
240  
241          The function ASN1_STRING_print_ex does not properly validate the lengths
242 <        of BMPString or UniversalString objects before attempting to print them.
242 > of BMPString or UniversalString objects before attempting to print them.
243  
244 < 20090326:
245 <        MidnightBSD 0.2.1-RELEASE-p7
244 > 20090415:
245 >        Created a Symbol.map for libc/ohash symbols
246  
247 <        Fix several security problems with sudo.  It is now 1.6.9-p20
247 >        Updated several usr/bin usr/sbin utilities.
248  
249 < 20090115:
250 <        MidnightBSD 0.2.1-RELEASE-p6
249 >        Corrected a bug with Makefile.inc1 causing the bootstrap
250 >        tools to fail.
251  
252 <        Correct an issue with BIND that allows for DNSSEC spoofing
253 <        attacks.
252 > 20090405:
253 >        xorg 7.4 wants to configure its input devices via hald which does not
254 >        yet work with USB. If the keyboard/mouse does not work in xorg then
255 >        add
256 >                Option "AllowEmptyInput" "off"
257 >        to your ServerLayout section.  This will cause X to use the configured
258 >        kbd and mouse sections from your xorg.conf
259  
260 < 20090110:
261 <        MidnightBSD 0.2.1-RELEASE-p5
260 > 20090403:
261 >        mksh was disconnected a few day ago do to bugs with
262 >        buildworld and mports.  Now, connect it back
263 >        for use as /bin/sh with a conditional called
264 >        MK_ASH.  By default, ash is the standard /bin/sh
265 >        but we may change this later.  This will allow further
266 >        testing by users and developers of mksh without
267 >        causing an unpleasant default experience.  In the
268 >        long run, we need to fix mksh compatibility.
269  
270 + 20090328:
271 +        Bring in mksh R37 from CVS. The dot.mkshrc files for root
272 +        and skel were changed.  mksh(1) now replaces ash aka sh(1)
273 +        as the default /bin/sh.  Please report bugs with
274 +        ports, etc. The ash code will remain in the repo for awhile
275 +        as I decide if we'll add something like MK_SHELL_ASH as
276 +        an optional build parameter.  
277 +
278 +        ahd was disconnected from the lint environment until
279 +        the compiler bug is sorted (by updating gcc?)
280 +
281 +        Remove freebsd-tips from fortune files and change the
282 +        default for login and profile.
283 +
284 + 20090327:
285 +        Update libarchive to 2.5.5, tar, and add bsdcpio.
286 +
287 +        Also previously, ctriv has been connecting Perl 5.10
288 +        to the build (part of os).  This will have an impact
289 +        on mports.
290 +
291 + 20090325:
292 +        Update Bind to 9.4.3-P1
293 +
294 +        Update mksh to R36b
295 +
296 +        Update tcpdump to 3.9.8, fix libpcap to work with current.
297 +
298 +        Update pnpinfo, sync with FreeBSD.
299 +
300 + 20090115:
301 +        Fix a problem with DNSSEC and BIND.
302 +
303 + 20090110:
304          For applications using OpenSSL for SSL connections, an invalid SSL
305          certificate may be interpreted as valid.  This could for example be
306          used by an attacker to perform a man-in-the-middle attack.
# Line 63 | Line 310 | Items affecting the mports and packages system can be
310  
311          Stop cross site request forgery attacks in lukemftpd
312  
313 < 20081231:
314 <        MidnightBSD 0.2.1-RELEASE-p4
313 > 20090104:
314 >        Import GNU libreadline 5.2
315  
316 <        Correct a problem where function pointers for netgraph
317 <        and bluetooth sockets are not initialized properly.
316 > 20090101:
317 >        Update time zone data to 2008i.
318  
319 < 20081124:
320 <        MidnightBSD 0.2.1-RELEASE-p3
319 > 20081231:
320 >        Correct a problem where bluetooth and netgraph sockets are not
321 >        properly initialized.
322  
323 <        Correct a problem in arc4random which causes the device
76 <        not get get enough entropy for system services.  Geom
77 <        classes initialized at startup will still have problems.
323 >        Happy 2009.
324  
325 < 20081002:
326 <        MidnightBSD 0.2.1-RELEASE-p2
325 > 20081206:
326 >        Due to the massive change in the underlying system under way,
327 >        we're naming the next release 1.0.  The sys/sys/param.h was
328 >        changed accordingly.  ipfilter and ncurses were corrected
329 >        using __MidnightBSD__ tests in the code.  
330  
331 <        IPv6 Neighbor Discovery Protocol routing vulnerability
331 >        The GENERIC kernel config was caught up on i386 today.  Consider
332 >        i386 still broken, but amd64 is running again.
333  
334 <        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2476
85 <        http://www.kb.cert.org/vuls/id/472363
334 >        mdoc.local was updated with the new MidnightBSD version info.
335  
336 <        This fix causes IPv6 Neighbor Discovery Neighbor Solicitation
337 <        messages to be ignored from non-neighbors.
336 >        batt(1) was rewritten in C.  It now supports several flags and
337 >        runs about 8 times faster on my laptop.  The default output
338 >        shows the number of minutes of battery life remaining and the
339 >        percentage.  You can use -u to display the number of batteries or
340 >        -c to get script friendly output.  Consult the man page for more.
341  
342 <        This can be re-enabled, if needed, by setting the newly added
343 <        net.inet6.icmp6.nd6_onlink_ns_rfc4861 sysctl to 1.
342 > 20081204:
343 >        Work has completed on importing ZFS, jemalloc, several
344 >        new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
345 >        support, improved locking for file desc., audit (openbsm),
346 >        openssl .98e, nfe, imporved intel high def audio, midi, updated
347 >        intel gigabit (em), support for several wifi cards (intel), ...
348  
349 < 20080929:
350 <        MidnightBSD 0.2.1-RELEASE-p1
349 >        Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
350 >        data from param.h instead of the FreeBSD version.  This means
351 >        testing is now possible in the ports tree for the version
352 >        and that any ports or code relying on the FreeBSD version from
353 >        sys/sys/param.h will need to be fixed.
354  
96        Fix a defect in ftpd.  The command buffer was split which allowed
97        attackers to send arbritrary commands over the network.
98
355   20080905:
356 <        Update nve(4) to support newer hardware.
356 >        update nve(4) to support new hardware.
357  
358 < 20080903:
359 <        Correct two defects in MidnightBSD.  AMD64/EMT64 systems had a
104 <        privledge escalation issue.  CVE-2008-3890
358 > 20080801:
359 >        Import OpenBSM 1.0
360  
361 <        In case of an incoming ICMPv6 'Packet Too Big Message', there is an
107 <        insufficient check on the proposed new MTU for a path to the
108 <        destination.
109 <        CVE-2008-3530
361 >        Modify src/release to create 3 isos instead of 2 for packages.
362  
363 < 20080830:
112 <        MidnightBSD 0.2.1-RELEASE
363 >        etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
364  
365 <        Oops, fix some bugs with sysinstall's handling of packages found
115 <        on the release ISOs.  Tweak etc/firstboot while where here.
365 >        Many ia64, alpha, powerpc items were removed.
366  
367 < 20080829:
118 <        MidnightBSD 0.2-RELEASE
367 >        The recent diffutils 2.8.7 import was fixed.
368  
369   20080703:
370 <        Correct problem with pcc and DESTDIR that affected creating live cds
371 <        and jails.
370 >        pcc was not installed properly when setting DESTDIR for live cds,
371 >        or posibly jails.
372  
124        sysinstall would incorrectly truncate DHCP info when configuring
125        ipv4 networking.  This was the result of a bad patch several months
126        ago.  Fix this error.  Found via testing a snapshot.
127
373   20080627:
374          Add firmware(9), WEP, CCMP, TKIP to GENERIC.
375  
# Line 134 | Line 379 | Items affecting the mports and packages system can be
379  
380          pcc connected to the build on i386. (alternative compiler)
381  
382 < 20080613:
138 <        Begin work for MidnightBSD 0.2-PRERELEASE
382 >        ath added to GENERIC.  (Atheros wireless NICs) on amd64/i386
383  
384   20080528:
385          Sendmail 8.14.3
# Line 699 | Line 943 | Contact Warner Losh if you have any questions about yo
943   this document.
944  
945   $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
946 < $MidnightBSD: src/UPDATING,v 1.38.2.19 2009/06/10 15:49:25 laffer1 Exp $
946 > $MidnightBSD: src/UPDATING,v 1.112 2011/02/09 00:30:41 laffer1 Exp $

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines