ViewVC Help
View File | Revision Log | Show Annotations | Revision Graph | Download File | Root Listing
root/midnightbsd-cvs/src/UPDATING
(Generate patch)

Comparing src/UPDATING (file contents):
Revision 1.20.2.9 by laffer1, Tue Sep 30 04:17:04 2008 UTC vs.
Revision 1.94 by laffer1, Thu Sep 2 12:58:27 2010 UTC

# Line 1 | Line 1
1   Updating Information for MidnightBSD users
2  
3 < Items affecting the mports and packages system can be found in
4 < /usr/mports/UPDATING.
3 > 20100902:
4 >        Fix a security issue with libutil that allows users to bypass cpu limits in
5 >        login.conf in some cases.  This combined with OpenSSH for example can allow
6 >        the user to get more resources than they're allowed.
7  
8 < 20080929:
9 <        Fix an issue with ftpd's command buffer.
8 > 20100822:
9 >        Import Apple's mDNSResponder (mdnsd).
10  
11 < 20080419:
12 <        Fix a security issue with OpenSSH as reported by the Debian project.
11 > 20100814:
12 >        libdispatch added to MidnightBSD.  This provides functionality found in
13 >        Mac OS X's GCD.  We do not have blocks support yet.  As this code is
14 >        licensed under Apache 2, we create a new MK_APACHE option so that
15 >        it's not required for all users to run code under a license they
16 >        may not like.
17  
18 < 20071104:
19 <        0.1.1-RELEASE
18 > 20100713:
19 >        mbuf readonly fix related to sendfile(2) data corruption.
20  
21 < 20071006:
22 <        Version bumped in param.h.  We've recently fixed a security issue in
17 <        openssl.
21 > 20100704:
22 >        brainfuck(1) imported from MirBSD.
23  
24 + 20100505:
25 +        zlib 1.2.5
26 +
27 + 20100430:
28 +        Sudo 1.7.2p6 imported
29 +
30 + 20100321:
31 +        Update zlib to 1.2.4
32 +
33 + 20100319:
34 +        Removed i586 from default i386 generic kernel.
35 +
36 + 20100317:
37 +        Update to tzdata2010e (time zones).  This includes changes in
38 +        Mexico.
39 +
40 +        Add support for several newer sound cards via hda including
41 +        ATI and Realtek chipsets.
42 +
43 + 20100313:
44 +        CPU detection has been changed.  VIA Padlock detection added.
45 +
46 + 20100312:
47 +        Fix a number of bugs and compiler warnings in libmport. Handle
48 +        plus signs in paths for mport.check-fake
49 +
50 + 20100311:
51 +        mksh R39c
52 +
53 + 20100309:
54 +        Sudo 1.7.2p5
55 +
56 +        sqlite3 3.6.23
57 +
58 +        mksh R39b
59 +
60 +        libffi (ffi) 3.0.9
61 +
62 + 20100206:
63 +        WITHOUT_LIB32 is no longer needed on AMD64.  GCC was fixed to
64 +        properly pass arguments to ld.
65 +
66 +        re(4) and rl(4) have been updated to support several new
67 +        realtek chipsets.  Performance has been improved on re(4).
68 +
69 + 20100204:
70 +        Fix a bug cropping up on AMD64 MidnightBSD with sftp
71 +        segfaulting.  
72 +
73 + 20100116:
74 +        Import ash changes from FreeBSD (bin/sh) 8-Stable.
75 +
76 +        BIND 9.6.1-P2
77 +
78 + 20100110:
79 +        Import Sendmail 8.14.4. Fix for SSL vulnerability.
80 +
81 +        posix_spawn(3) added to MidnightBSD libc.  Users may need to build and
82 +        install libc before doing a full buildworld when upating from 0.2 or
83 +        older current systems.
84 +
85 +        kqueue(2) was modified to support portions of libdispatch functionality.
86 +
87 + 20100106:
88 +        Bind security update.  Fix a bug with DNSSEC that causes negative
89 +        cache entries and thus a possible DNS cache poisoning attack.
90 +
91 +        Fix a bug in ZFS that can reset permissions on system crashes.
92 +
93 + 20091228:
94 +        amdtemp(4) was added.  It allows one to monitor to the temperature
95 +        of an AMD CPU such as a Phenom.
96 +
97 + 20091205:
98 +        OpenSSL security fix
99 +
100 +        The SSL version 3 and TLS protocols support session renegotiation without
101 +        cryptographically tying the new session parameters to the old parameters.
102 +
103 + 20091128:
104 +        OpenBSD sensors framework imported including sensorsd(8)
105 +
106 + 20091126:
107 +        OpenNTPD 4.4 import
108 +
109 +        Update OpenSSH to 5.3p1
110 +
111 +        mksh R39
112 +
113 + 20091124:
114 +        cpdup updated from DragonFly to 1.15
115 +
116 +        tzdata2009s updated with latest timezone data for November 2009.
117 +
118 + 20091010:
119 +        amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
120 +        to test current.
121 +
122 +        Revert unicode filename fixes from ntfs code.  This was causing chaos
123 +        on amd64 systems.
124 +
125 + 20091006:
126 +        Update timezone data with tzdata2009n with the Pakistan and
127 +        Argentina changes.
128 +
129 +        Sync several userland utilities with versions from FreeBSD 7.0 in
130 +        sbin and usr.sbin.
131 +
132 + 20090919:
133 +        Update timezone data with tzdate2009m from September 2009.
134 +
135 + 20090729:
136 +        Patch for Bind 9 security vulnerability. a dynmaic update packet
137 +        can trigger an assertion and cause named to exit
138 +
139 + 20090606:
140 +        Remove PCC from the base system.  This compiler will not work
141 +        as a system compiler for us as we've got some userland investment
142 +        in C++ code and may have Objective-C in the future.  We're stuck
143 +        with a solution that supports these three languages at a minimum.
144 +
145 +        I had wanted to keep it as an optional compiler because it is
146 +        fast, however too many users want to try to use it for the base
147 +        system which makes no sense.
148 +
149 +        A hack was added for Cypress based usb hard drive enclosures to
150 +        the kernel.  This should cut down on commands it claims to support
151 +        but does not (at the cam layer).  Found while testing ZFS on
152 +        an external device.
153 +
154 + 20090520:
155 +        The powerd daemon no longer starts automatically to improve
156 +        compatibility with many systems.  However, there is a new
157 +        installer option in the startup section to enable it. This
158 +        makes it easier to enable for users that have working systems. I                thought it was only a problem on older hardware, but it freaks
159 +        out my new Phenom too.
160 +
161 + 20090502:
162 +        OpenSSH 5.2p1 import
163 +
164 +        ale(4) connected to the build. (kernel module only)
165 +
166 + 20090501:
167 +        Imported makefs utility from NetBSD/FreeBSD
168 +
169 + 20090422:
170 +        OpenSSL security update
171 +
172 +        The function ASN1_STRING_print_ex does not properly validate the lengths
173 + of BMPString or UniversalString objects before attempting to print them.
174 +
175 + 20090415:
176 +        Created a Symbol.map for libc/ohash symbols
177 +
178 +        Updated several usr/bin usr/sbin utilities.
179 +
180 +        Corrected a bug with Makefile.inc1 causing the bootstrap
181 +        tools to fail.
182 +
183 + 20090405:
184 +        xorg 7.4 wants to configure its input devices via hald which does not
185 +        yet work with USB. If the keyboard/mouse does not work in xorg then
186 +        add
187 +                Option "AllowEmptyInput" "off"
188 +        to your ServerLayout section.  This will cause X to use the configured
189 +        kbd and mouse sections from your xorg.conf
190 +
191 + 20090403:
192 +        mksh was disconnected a few day ago do to bugs with
193 +        buildworld and mports.  Now, connect it back
194 +        for use as /bin/sh with a conditional called
195 +        MK_ASH.  By default, ash is the standard /bin/sh
196 +        but we may change this later.  This will allow further
197 +        testing by users and developers of mksh without
198 +        causing an unpleasant default experience.  In the
199 +        long run, we need to fix mksh compatibility.
200 +
201 + 20090328:
202 +        Bring in mksh R37 from CVS. The dot.mkshrc files for root
203 +        and skel were changed.  mksh(1) now replaces ash aka sh(1)
204 +        as the default /bin/sh.  Please report bugs with
205 +        ports, etc. The ash code will remain in the repo for awhile
206 +        as I decide if we'll add something like MK_SHELL_ASH as
207 +        an optional build parameter.  
208 +
209 +        ahd was disconnected from the lint environment until
210 +        the compiler bug is sorted (by updating gcc?)
211 +
212 +        Remove freebsd-tips from fortune files and change the
213 +        default for login and profile.
214 +
215 + 20090327:
216 +        Update libarchive to 2.5.5, tar, and add bsdcpio.
217 +
218 +        Also previously, ctriv has been connecting Perl 5.10
219 +        to the build (part of os).  This will have an impact
220 +        on mports.
221 +
222 + 20090325:
223 +        Update Bind to 9.4.3-P1
224 +
225 +        Update mksh to R36b
226 +
227 +        Update tcpdump to 3.9.8, fix libpcap to work with current.
228 +
229 +        Update pnpinfo, sync with FreeBSD.
230 +
231 + 20090115:
232 +        Fix a problem with DNSSEC and BIND.
233 +
234 + 20090110:
235 +        For applications using OpenSSL for SSL connections, an invalid SSL
236 +        certificate may be interpreted as valid.  This could for example be
237 +        used by an attacker to perform a man-in-the-middle attack.
238 +
239 +        Other applications which use the OpenSSL EVP API may similarly be
240 +        affected.
241 +
242 +        Stop cross site request forgery attacks in lukemftpd
243 +
244 + 20090104:
245 +        Import GNU libreadline 5.2
246 +
247 + 20090101:
248 +        Update time zone data to 2008i.
249 +
250 + 20081231:
251 +        Correct a problem where bluetooth and netgraph sockets are not
252 +        properly initialized.
253 +
254 +        Happy 2009.
255 +
256 + 20081206:
257 +        Due to the massive change in the underlying system under way,
258 +        we're naming the next release 1.0.  The sys/sys/param.h was
259 +        changed accordingly.  ipfilter and ncurses were corrected
260 +        using __MidnightBSD__ tests in the code.  
261 +
262 +        The GENERIC kernel config was caught up on i386 today.  Consider
263 +        i386 still broken, but amd64 is running again.
264 +
265 +        mdoc.local was updated with the new MidnightBSD version info.
266 +
267 +        batt(1) was rewritten in C.  It now supports several flags and
268 +        runs about 8 times faster on my laptop.  The default output
269 +        shows the number of minutes of battery life remaining and the
270 +        percentage.  You can use -u to display the number of batteries or
271 +        -c to get script friendly output.  Consult the man page for more.
272 +
273 + 20081204:
274 +        Work has completed on importing ZFS, jemalloc, several
275 +        new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
276 +        support, improved locking for file desc., audit (openbsm),
277 +        openssl .98e, nfe, imporved intel high def audio, midi, updated
278 +        intel gigabit (em), support for several wifi cards (intel), ...
279 +
280 +        Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
281 +        data from param.h instead of the FreeBSD version.  This means
282 +        testing is now possible in the ports tree for the version
283 +        and that any ports or code relying on the FreeBSD version from
284 +        sys/sys/param.h will need to be fixed.
285 +
286 + 20080905:
287 +        update nve(4) to support new hardware.
288 +
289 + 20080801:
290 +        Import OpenBSM 1.0
291 +
292 +        Modify src/release to create 3 isos instead of 2 for packages.
293 +
294 +        etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
295 +
296 +        Many ia64, alpha, powerpc items were removed.
297 +
298 +        The recent diffutils 2.8.7 import was fixed.
299 +
300 + 20080703:
301 +        pcc was not installed properly when setting DESTDIR for live cds,
302 +        or posibly jails.
303 +
304 + 20080627:
305 +        Add firmware(9), WEP, CCMP, TKIP to GENERIC.
306 +
307 +        Add glabel to GENERIC.
308 +
309 +        Intel ICH8 mobile chipset used on some iMacs included with ata.
310 +
311 +        pcc connected to the build on i386. (alternative compiler)
312 +
313 +        ath added to GENERIC.  (Atheros wireless NICs) on amd64/i386
314 +
315 + 20080528:
316 +        Sendmail 8.14.3
317 +
318 + 20080516:
319 +        ssh-vulnkey allows you to look for vulnerable ssh keys that
320 +        were generated on Debian and Ubuntu hosts over the last
321 +        few years.  sshd can block offending keys with a configuration
322 +        option.
323 +
324 +        The elf note on binaries is now set to MidnightBSD.
325 +
326 + 20080514:
327 +        Fixed a number of problems with pcc.  It is not yet connected
328 +        to the build, but usable on i386 hosts.  You may use it
329 +        by make; make install in /usr/src/usr.bin/pcc.  It will
330 +        install in /usr/local as some of the files conflict with
331 +        GCC versions. __MidnightBSD__ is defined in PCC as well.
332 +
333 +        System headers were fixed to allow pcc to compile many binaries
334 +        on MidnightBSD.  bin/cp will work now for instance.
335 +
336 + 20080430:
337 +        __MidnightBSD__ is now defined via gcc.  This can be tested
338 +        to determine we're running on MidnightBSD in the preprocessor.
339 +
340 + 20080429:
341 +        Import bind 9.4.2 with threading
342 +
343 +        libpthread (KSE) and libthr are built earlier
344 +        
345 +        pcvt(4) removed!
346 +
347 +        Alias added for core2 cpus.
348 +
349 +        Alpha and PC98 only utilities removed from usr/sbin
350 +
351 +        syslogd, adduser, rmuser, mergemaster and mailwrapper have been
352 +        improved.  See the man pages for info.
353 +
354 +        periodic scripts will not send emails with empty message bodies.
355 +        See mailwrapper fix.
356 +
357 + 20080410:
358 +        Sync cpdup with DragonFly.  Add parallel transaction support and
359 +        -l flag to line-buffer stdout and stderr.
360 +
361 + 20080406:
362 +        Import bzip2 1.05
363 +        Import OpenSSH 4.9p1
364 +
365 + 20080322:
366 +        The default umask was changed to 022.
367 +        
368 +        /usr/X11R6 paths were removed from several config files.
369 +
370 +        .mkshrc files are now installed for root.
371 +
372 + 20080316:
373 +        FIx a problem with gif0 tunnels and neighbors with IPV6.
374 +
375 + 20080312:
376 +        Add lndir from X.org.  This aides in the porting of MirPorts.
377 +
378 +        New OS versions were added to the mapage code (groff)
379 +
380 + 20080310:
381 +        Correct a buffer overflow in ppp.
382 +
383 + 20080308:
384 +        Remove /usr/X11R6 from manpath config.
385 +
386 + 20080307:
387 +        Atheros driver no longer has several options set
388 +        which corrects building in tinderbox on all three platforms.
389 +
390 +        Added a new macro to sx.h which returns true if the current
391 +        thread holds an exclusive lock on a specifix sx.
392 +
393 +        Removed OS/2's HPFS file system.   It's not maintained and
394 +        I don't know anyone using OS/2 or ecomstation these days.
395 +        My copy is in the closet collecting dust.
396 +
397 + 20080306:
398 +        Synced tinderbox with FreeBSD.  Modified it for MidnightBSD.
399 +        Developers can now use it to check src builds.
400 +
401 + 20080303:
402 +        Add mksh to /etc/shells, made some adjustments to options
403 +        for mksh builds per suggestion upstream.
404 +
405 +        USB HID table updated with modern hardware list.
406 +
407 +        Updated BSD family true (we're not in there yet)
408 +
409 +        iso3166 file updated and import of tzdata2007k for
410 +        new time zones.
411 +
412 +        Updated mksh to latest version R33.
413 +
414 + 20080228:
415 +        Remplaced the random IP id generation code with a new
416 +        version by Amit Klein.
417 +
418 + 20080221:
419 +        Sendfile write only permissions fix.
420 +
421 +        Removed some HPFS and PC98 code.
422 +
423 +        iso639 file sycned with DragonFly.
424 +
425 + 20080128:
426 +        Changed NTP configuration so that ips aren't cached
427 +        so multiple servers are used.
428 +
429 +        Fix an issue with fork() in libpthread.
430 +
431 + 20080121:
432 +        Add virtualization detection to set the HZ rate
433 +        according to a VM present.  VMWare and Parallels
434 +        should work better like this.
435 +
436 +        Change to full x11 install in sysinstall.  Add
437 +        xorg 7 support.
438 +
439 + 20080115:
440 +        Fix the handling of PTY's.  CVE-2008-0216
441 +
442 + 20080105:
443 +        mport delete code added, USE_MPORT_TOOLS knob aded.
444 +
445 + 20080101:
446 +        Happy New Year
447 +
448 + 20071123:
449 +        Update sendmail to 8.14.2
450 +
451 + 20071120:
452 +        Update system compiler to gcc 3.4.6.
453 +
454 + 20071023:
455 +        Updated mksh to R31d.
456 +
457   20070911:
458 <        libpthread output intended as an error is now written to
21 <        stderr instead of stdout.
458 >        Updated mksh to version R31b.
459  
460 <        bzip2 updated to 1.0.4
460 >        Fixed stderr output in libpthread.  Previously it was
461 >        written to stdout.
462  
463 <        find:
464 <        Add -Btime, -Bnewer, -Bmin, -newerB[Bacmt], -newer[acmt]B options to
465 <        work with the st_birthtime field of struct stat.
28 <  
29 <        'B' has been chosen to match the format specifier from stat(1).
463 > 20070831:
464 >        Added dot.mkshrc file to support the recent change to
465 >        mksh from OpenBSD's ksh derived from pdksh.  
466  
467 < 20070810:
468 <        src/usr.sbin/pkg_install was updated to work with
469 <        mports properly.  If you get errors with plists
470 <        with lines about dirrmtry, this will fix it.
467 >        Added new firewall configuration.  ipfw is enabled by default
468 >        with a "desktop" configuration.  Consult /etc/rc.firewall
469 >        or ipfw show to see the ruleset used.  You can disable
470 >        ipfw by setting firewall_enable="NO" in /etc/rc.conf This
471 >        change only effects IPv4.  IPv6 does not have a firewall
472 >        enabled by default.
473  
474 + 20070814:
475 +        Removed GNU tar source.  We've been using BSD tar
476 +        for awhile.
477 +
478   20070806:
479 <        /usr/share/mk/bsd.port.mk was not merged from current
38 <        before 0.1 was released.  This caused the wrong
39 <        file in /usr/mport/mk to be sourced when a port's
40 <        makefile sourced bsd.port.mk.  Many ports where broken as
41 <        a result.
479 >        Finished removing umapfs and autofs from the tree.
480  
43
481   20070804:
482 <        0.1-RELEASE
46 <        
47 <        BIND 9.3.4-p1 security patch.  
482 >        BIND and Tcpdump have been patched for recent vulnerabilities.
483  
484 <        Tcpdump was patched.
484 >        We switched to BSD cpio (pax).
485  
486 + 20070719:
487 +        Imported cpdup from DragonFly as /bin/cpdup
488 +
489 + 20070716:
490 +        Update GNU cpio to 2.8.
491 +
492 + 20070410:
493 +        cvs was updated to 1.12.13.  cvsbug was removed.
494 +        cvs now behaves similarly to DragonFly's cvs with
495 +        most of their local changes.  
496 +
497 + 20070409:
498 +        RELENG_0_1 was created. More aggresive changes will
499 +        continue here.
500 +
501   20070406:
502          Back out propolice.  propolice caused several problems
503          with our threading libraries libthr and libpthread.  
# Line 424 | Line 874 | Contact Warner Losh if you have any questions about yo
874   this document.
875  
876   $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
877 < $MidnightBSD: src/UPDATING,v 1.20.2.8 2008/04/19 17:19:41 laffer1 Exp $
877 > $MidnightBSD: src/UPDATING,v 1.93 2010/08/22 22:19:05 laffer1 Exp $

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines