[ViewVC] Diff of: midnightbsd-cvs/src/UPDATING

Comparing src/UPDATING (file contents):
Revision 1.20.2.9 by laffer1, Tue Sep 30 04:17:04 2008 UTC vs.
Revision 1.94.2.13 by laffer1, Sat Dec 24 03:05:55 2011 UTC

+Updating Information for MidnightBSD users
-<
+Items affecting the mports and packages system can be found in
-<
+/usr/mports/UPDATING.
->
+20111223:
->
+        Fix security issue with chroot and ftpd.
-<
+20080929:
-<
+        Fix an issue with ftpd's command buffer.
->
+        nsdispatch(3) doesn't know it's working in a chroot and some
->
+        operations can cause files to get reloaded causing a security
->
+        hole in things like ftpd.
-<
+20080419:
-<
+        Fix a security issue with OpenSSH as reported by the Debian project.
->
+20111004:
->
+        MidnightBSD 0.3-RELEASE-p4
-<
+20071104:
-<
+.1.1-RELEASE
->
+        Fix a problem with unix socket handling caused by the recent
->
+        patch to unix socket path handling. This allows network
->
+        apps to work under the linuxolator again.
-<
+20071006:
-<
+        Version bumped in param.h.  We've recently fixed a security issue in
-<
+        openssl.
->
+20110928:
->
+        MidnightBSD 0.3-RELEASE-p3
-+
+        Security hole in compress and gzip with malformed
-+
+        .Z files can cause an infinite loop in these utilities.
-+
-+
+        Validate paths for unix domain sockets.
-+
-+
+20110528:
-+
+        MidnightBSD 0.3-RELEASE-p2
-+
-+
+        Fix a critical security hole in BIND 9.6.x, CVE-2011-1910, with caching resolvers.
-+
-+
+20110203:
-+
+        MidnightBSD 0.3-RELEASE-p1
-+
-+
+        Fix the sqlite3.pc file so that it reports the proper version of sqlite3.  This shouldn't
-+
+        cause any functional changes with mports or the release.
-+
-+
+20110128:
-+
+        MidnightBSD 0.3-RELEASE
-+
-+
+20110124:
-+
+        pkg_add migrated to release pkg path.
-+
-+
+20110123:
-+
+        Fix a bug in netwait that prints error messages when booting up. netwait is a
-+
+        rc.conf(5) var that allows you to wait for network link to come up on a specific
-+
+        interface and/or ip address before booting the system.
-+
-+
+20101130:
-+
+        A double free exists in the SSL client ECDH handling code, when
-+
+        processing specially crafted public keys with invalid prime
-+
+        numbers. [CVE-2010-2939]
-+
-+
+20101110:
-+
+        Fix a security issue with pseudofs which could result in running code in kernel
-+
+        context or a kernel panic depending on system configuration.  This affects file
-+
+        systems such as procfs for instance.
-+
-+
+20101008:
-+
+        A bug in glob(3) results in uncontrolled memory usage causing a possible
-+
+        DOS attach in sftpd and ftpd.  Rework the glob logic, fix the man page
-+
+        and enable the fix in sftp.c and sftp-glob.c
-+
-+
+20100920:
-+
+        Security update for bzip2 integer overflow
-+
-+
+20100906:
-+
+        Remove xz from the base system.  This will be developed in current.
-+
-+
+        RELENG_0_3 created.
-+
-+
+20100902:
-+
+        Fix a security issue with libutil that allows users to bypass cpu limits in
-+
+        login.conf in some cases.  This combined with OpenSSH for example can allow
-+
+        the user to get more resources than they're allowed.
-+
-+
+20100822:
-+
+        Import Apple's mDNSResponder (mdnsd).
-+
-+
+20100814:
-+
+        libdispatch added to MidnightBSD.  This provides functionality found in
-+
+        Mac OS X's GCD.  We do not have blocks support yet.  As this code is
-+
+        licensed under Apache 2, we create a new MK_APACHE option so that
-+
+        it's not required for all users to run code under a license they
-+
+        may not like.
-+
-+
+20100713:
-+
+        mbuf readonly fix related to sendfile(2) data corruption.
-+
-+
+20100704:
-+
+        brainfuck(1) imported from MirBSD.
-+
-+
+20100505:
-+
+        zlib 1.2.5
-+
-+
+20100430:
-+
+        Sudo 1.7.2p6 imported
-+
-+
+20100321:
-+
+        Update zlib to 1.2.4
-+
-+
+20100319:
-+
+        Removed i586 from default i386 generic kernel.
-+
-+
+20100317:
-+
+        Update to tzdata2010e (time zones).  This includes changes in
-+
+        Mexico.
-+
-+
+        Add support for several newer sound cards via hda including
-+
+        ATI and Realtek chipsets.
-+
-+
+20100313:
-+
+        CPU detection has been changed.  VIA Padlock detection added.
-+
-+
+20100312:
-+
+        Fix a number of bugs and compiler warnings in libmport. Handle
-+
+        plus signs in paths for mport.check-fake
-+
-+
+20100311:
-+
+        mksh R39c
-+
-+
+20100309:
-+
+        Sudo 1.7.2p5
-+
-+
+        sqlite3 3.6.23
-+
-+
+        mksh R39b
-+
-+
+        libffi (ffi) 3.0.9
-+
-+
+20100206:
-+
+        WITHOUT_LIB32 is no longer needed on AMD64.  GCC was fixed to
-+
+        properly pass arguments to ld.
-+
-+
+        re(4) and rl(4) have been updated to support several new
-+
+        realtek chipsets.  Performance has been improved on re(4).
-+
-+
+20100204:
-+
+        Fix a bug cropping up on AMD64 MidnightBSD with sftp
-+
+        segfaulting.
-+
-+
+20100116:
-+
+        Import ash changes from FreeBSD (bin/sh) 8-Stable.
-+
-+
+        BIND 9.6.1-P2
-+
-+
+20100110:
-+
+        Import Sendmail 8.14.4. Fix for SSL vulnerability.
-+
-+
+        posix_spawn(3) added to MidnightBSD libc.  Users may need to build and
-+
+        install libc before doing a full buildworld when upating from 0.2 or
-+
+        older current systems.
-+
-+
+        kqueue(2) was modified to support portions of libdispatch functionality.
-+
-+
+20100106:
-+
+        Bind security update.  Fix a bug with DNSSEC that causes negative
-+
+        cache entries and thus a possible DNS cache poisoning attack.
-+
-+
+        Fix a bug in ZFS that can reset permissions on system crashes.
-+
-+
+20091228:
-+
+        amdtemp(4) was added.  It allows one to monitor to the temperature
-+
+        of an AMD CPU such as a Phenom.
-+
-+
+20091205:
-+
+        OpenSSL security fix
-+
-+
+        The SSL version 3 and TLS protocols support session renegotiation without
-+
+        cryptographically tying the new session parameters to the old parameters.
-+
-+
+20091128:
-+
+        OpenBSD sensors framework imported including sensorsd(8)
-+
-+
+20091126:
-+
+        OpenNTPD 4.4 import
-+
-+
+        Update OpenSSH to 5.3p1
-+
-+
+        mksh R39
-+
-+
+20091124:
-+
+        cpdup updated from DragonFly to 1.15
-+
-+
+        tzdata2009s updated with latest timezone data for November 2009.
-+
-+
+20091010:
-+
+        amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
-+
+        to test current.
-+
-+
+        Revert unicode filename fixes from ntfs code.  This was causing chaos
-+
+        on amd64 systems.
-+
-+
+20091006:
-+
+        Update timezone data with tzdata2009n with the Pakistan and
-+
+        Argentina changes.
-+
-+
+        Sync several userland utilities with versions from FreeBSD 7.0 in
-+
+        sbin and usr.sbin.
-+
-+
+20090919:
-+
+        Update timezone data with tzdate2009m from September 2009.
-+
-+
+20090729:
-+
+        Patch for Bind 9 security vulnerability. a dynmaic update packet
-+
+        can trigger an assertion and cause named to exit
-+
-+
+20090606:
-+
+        Remove PCC from the base system.  This compiler will not work
-+
+        as a system compiler for us as we've got some userland investment
-+
+        in C++ code and may have Objective-C in the future.  We're stuck
-+
+        with a solution that supports these three languages at a minimum.
-+
-+
+        I had wanted to keep it as an optional compiler because it is
-+
+        fast, however too many users want to try to use it for the base
-+
+        system which makes no sense.
-+
-+
+        A hack was added for Cypress based usb hard drive enclosures to
-+
+        the kernel.  This should cut down on commands it claims to support
-+
+        but does not (at the cam layer).  Found while testing ZFS on
-+
+        an external device.
-+
-+
+20090520:
-+
+        The powerd daemon no longer starts automatically to improve
-+
+        compatibility with many systems.  However, there is a new
-+
+        installer option in the startup section to enable it. This
-+
+        makes it easier to enable for users that have working systems. I                thought it was only a problem on older hardware, but it freaks
-+
+        out my new Phenom too.
-+
-+
+20090502:
-+
+        OpenSSH 5.2p1 import
-+
-+
+        ale(4) connected to the build. (kernel module only)
-+
-+
+20090501:
-+
+        Imported makefs utility from NetBSD/FreeBSD
-+
-+
+20090422:
-+
+        OpenSSL security update
-+
-+
+        The function ASN1_STRING_print_ex does not properly validate the lengths
-+
+of BMPString or UniversalString objects before attempting to print them.
-+
-+
+20090415:
-+
+        Created a Symbol.map for libc/ohash symbols
-+
-+
+        Updated several usr/bin usr/sbin utilities.
-+
-+
+        Corrected a bug with Makefile.inc1 causing the bootstrap
-+
+        tools to fail.
-+
-+
+20090405:
-+
+        xorg 7.4 wants to configure its input devices via hald which does not
-+
+        yet work with USB. If the keyboard/mouse does not work in xorg then
-+
+        add
-+
+                Option "AllowEmptyInput" "off"
-+
+        to your ServerLayout section.  This will cause X to use the configured
-+
+        kbd and mouse sections from your xorg.conf
-+
-+
+20090403:
-+
+        mksh was disconnected a few day ago do to bugs with
-+
+        buildworld and mports.  Now, connect it back
-+
+        for use as /bin/sh with a conditional called
-+
+        MK_ASH.  By default, ash is the standard /bin/sh
-+
+        but we may change this later.  This will allow further
-+
+        testing by users and developers of mksh without
-+
+        causing an unpleasant default experience.  In the
-+
+        long run, we need to fix mksh compatibility.
-+
-+
+20090328:
-+
+        Bring in mksh R37 from CVS. The dot.mkshrc files for root
-+
+        and skel were changed.  mksh(1) now replaces ash aka sh(1)
-+
+        as the default /bin/sh.  Please report bugs with
-+
+        ports, etc. The ash code will remain in the repo for awhile
-+
+        as I decide if we'll add something like MK_SHELL_ASH as
-+
+        an optional build parameter.
-+
-+
+        ahd was disconnected from the lint environment until
-+
+        the compiler bug is sorted (by updating gcc?)
-+
-+
+        Remove freebsd-tips from fortune files and change the
-+
+        default for login and profile.
-+
-+
+20090327:
-+
+        Update libarchive to 2.5.5, tar, and add bsdcpio.
-+
-+
+        Also previously, ctriv has been connecting Perl 5.10
-+
+        to the build (part of os).  This will have an impact
-+
+        on mports.
-+
-+
+20090325:
-+
+        Update Bind to 9.4.3-P1
-+
-+
+        Update mksh to R36b
-+
-+
+        Update tcpdump to 3.9.8, fix libpcap to work with current.
-+
-+
+        Update pnpinfo, sync with FreeBSD.
-+
-+
+20090115:
-+
+        Fix a problem with DNSSEC and BIND.
-+
-+
+20090110:
-+
+        For applications using OpenSSL for SSL connections, an invalid SSL
-+
+        certificate may be interpreted as valid.  This could for example be
-+
+        used by an attacker to perform a man-in-the-middle attack.
-+
-+
+        Other applications which use the OpenSSL EVP API may similarly be
-+
+        affected.
-+
-+
+        Stop cross site request forgery attacks in lukemftpd
-+
-+
+20090104:
-+
+        Import GNU libreadline 5.2
-+
-+
+20090101:
-+
+        Update time zone data to 2008i.
-+
-+
+20081231:
-+
+        Correct a problem where bluetooth and netgraph sockets are not
-+
+        properly initialized.
-+
-+
+        Happy 2009.
-+
-+
+20081206:
-+
+        Due to the massive change in the underlying system under way,
-+
+        we're naming the next release 1.0.  The sys/sys/param.h was
-+
+        changed accordingly.  ipfilter and ncurses were corrected
-+
+        using __MidnightBSD__ tests in the code.
-+
-+
+        The GENERIC kernel config was caught up on i386 today.  Consider
-+
+        i386 still broken, but amd64 is running again.
-+
-+
+        mdoc.local was updated with the new MidnightBSD version info.
-+
-+
+        batt(1) was rewritten in C.  It now supports several flags and
-+
+        runs about 8 times faster on my laptop.  The default output
-+
+        shows the number of minutes of battery life remaining and the
-+
+        percentage.  You can use -u to display the number of batteries or
-+
+        -c to get script friendly output.  Consult the man page for more.
-+
-+
+20081204:
-+
+        Work has completed on importing ZFS, jemalloc, several
-+
+        new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
-+
+        support, improved locking for file desc., audit (openbsm),
-+
+        openssl .98e, nfe, imporved intel high def audio, midi, updated
-+
+        intel gigabit (em), support for several wifi cards (intel), ...
-+
-+
+        Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
-+
+        data from param.h instead of the FreeBSD version.  This means
-+
+        testing is now possible in the ports tree for the version
-+
+        and that any ports or code relying on the FreeBSD version from
-+
+        sys/sys/param.h will need to be fixed.
-+
-+
+20080905:
-+
+        update nve(4) to support new hardware.
-+
-+
+20080801:
-+
+        Import OpenBSM 1.0
-+
-+
+        Modify src/release to create 3 isos instead of 2 for packages.
-+
-+
+        etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
-+
-+
+        Many ia64, alpha, powerpc items were removed.
-+
-+
+        The recent diffutils 2.8.7 import was fixed.
-+
-+
+20080703:
-+
+        pcc was not installed properly when setting DESTDIR for live cds,
-+
+        or posibly jails.
-+
-+
+20080627:
-+
+        Add firmware(9), WEP, CCMP, TKIP to GENERIC.
-+
-+
+        Add glabel to GENERIC.
-+
-+
+        Intel ICH8 mobile chipset used on some iMacs included with ata.
-+
-+
+        pcc connected to the build on i386. (alternative compiler)
-+
-+
+        ath added to GENERIC.  (Atheros wireless NICs) on amd64/i386
-+
-+
+20080528:
-+
+        Sendmail 8.14.3
-+
-+
+20080516:
-+
+        ssh-vulnkey allows you to look for vulnerable ssh keys that
-+
+        were generated on Debian and Ubuntu hosts over the last
-+
+        few years.  sshd can block offending keys with a configuration
-+
+        option.
-+
-+
+        The elf note on binaries is now set to MidnightBSD.
-+
-+
+20080514:
-+
+        Fixed a number of problems with pcc.  It is not yet connected
-+
+        to the build, but usable on i386 hosts.  You may use it
-+
+        by make; make install in /usr/src/usr.bin/pcc.  It will
-+
+        install in /usr/local as some of the files conflict with
-+
+        GCC versions. __MidnightBSD__ is defined in PCC as well.
-+
-+
+        System headers were fixed to allow pcc to compile many binaries
-+
+        on MidnightBSD.  bin/cp will work now for instance.
-+
-+
+20080430:
-+
+        __MidnightBSD__ is now defined via gcc.  This can be tested
-+
+        to determine we're running on MidnightBSD in the preprocessor.
-+
-+
+20080429:
-+
+        Import bind 9.4.2 with threading
-+
-+
+        libpthread (KSE) and libthr are built earlier
-+
-+
+        pcvt(4) removed!
-+
-+
+        Alias added for core2 cpus.
-+
-+
+        Alpha and PC98 only utilities removed from usr/sbin
-+
-+
+        syslogd, adduser, rmuser, mergemaster and mailwrapper have been
-+
+        improved.  See the man pages for info.
-+
-+
+        periodic scripts will not send emails with empty message bodies.
-+
+        See mailwrapper fix.
-+
-+
+20080410:
-+
+        Sync cpdup with DragonFly.  Add parallel transaction support and
-+
+        -l flag to line-buffer stdout and stderr.
-+
-+
+20080406:
-+
+        Import bzip2 1.05
-+
+        Import OpenSSH 4.9p1
-+
-+
+20080322:
-+
+        The default umask was changed to 022.
-+
-+
+        /usr/X11R6 paths were removed from several config files.
-+
-+
+        .mkshrc files are now installed for root.
-+
-+
+20080316:
-+
+        FIx a problem with gif0 tunnels and neighbors with IPV6.
-+
-+
+20080312:
-+
+        Add lndir from X.org.  This aides in the porting of MirPorts.
-+
-+
+        New OS versions were added to the mapage code (groff)
-+
-+
+20080310:
-+
+        Correct a buffer overflow in ppp.
-+
-+
+20080308:
-+
+        Remove /usr/X11R6 from manpath config.
-+
-+
+20080307:
-+
+        Atheros driver no longer has several options set
-+
+        which corrects building in tinderbox on all three platforms.
-+
-+
+        Added a new macro to sx.h which returns true if the current
-+
+        thread holds an exclusive lock on a specifix sx.
-+
-+
+        Removed OS/2's HPFS file system.   It's not maintained and
-+
+        I don't know anyone using OS/2 or ecomstation these days.
-+
+        My copy is in the closet collecting dust.
-+
-+
+20080306:
-+
+        Synced tinderbox with FreeBSD.  Modified it for MidnightBSD.
-+
+        Developers can now use it to check src builds.
-+
-+
+20080303:
-+
+        Add mksh to /etc/shells, made some adjustments to options
-+
+        for mksh builds per suggestion upstream.
-+
-+
+        USB HID table updated with modern hardware list.
-+
-+
+        Updated BSD family true (we're not in there yet)
-+
-+
+        iso3166 file updated and import of tzdata2007k for
-+
+        new time zones.
-+
-+
+        Updated mksh to latest version R33.
-+
-+
+20080228:
-+
+        Remplaced the random IP id generation code with a new
-+
+        version by Amit Klein.
-+
-+
+20080221:
-+
+        Sendfile write only permissions fix.
-+
-+
+        Removed some HPFS and PC98 code.
-+
-+
+        iso639 file sycned with DragonFly.
-+
-+
+20080128:
-+
+        Changed NTP configuration so that ips aren't cached
-+
+        so multiple servers are used.
-+
-+
+        Fix an issue with fork() in libpthread.
-+
-+
+20080121:
-+
+        Add virtualization detection to set the HZ rate
-+
+        according to a VM present.  VMWare and Parallels
-+
+        should work better like this.
-+
-+
+        Change to full x11 install in sysinstall.  Add
-+
+        xorg 7 support.
-+
-+
+20080115:
-+
+        Fix the handling of PTY's.  CVE-2008-0216
-+
-+
+20080105:
-+
+        mport delete code added, USE_MPORT_TOOLS knob aded.
-+
-+
+20080101:
-+
+        Happy New Year
-+
-+
+20071123:
-+
+        Update sendmail to 8.14.2
-+
-+
+20071120:
-+
+        Update system compiler to gcc 3.4.6.
-+
-+
+20071023:
-+
+        Updated mksh to R31d.
-+
+20070911:
-<
+        libpthread output intended as an error is now written to
-<
+        stderr instead of stdout.
->
+        Updated mksh to version R31b.
-<
+        bzip2 updated to 1.0.4
->
+        Fixed stderr output in libpthread.  Previously it was
->
+        written to stdout.
-<
+        find:
-<
+        Add -Btime, -Bnewer, -Bmin, -newerB[Bacmt], -newer[acmt]B options to
-<
+        work with the st_birthtime field of struct stat.
-<
-<
+        'B' has been chosen to match the format specifier from stat(1).
->
+20070831:
->
+        Added dot.mkshrc file to support the recent change to
->
+        mksh from OpenBSD's ksh derived from pdksh.
-<
+20070810:
-<
+        src/usr.sbin/pkg_install was updated to work with
-<
+        mports properly.  If you get errors with plists
-<
+        with lines about dirrmtry, this will fix it.
->
+        Added new firewall configuration.  ipfw is enabled by default
->
+        with a "desktop" configuration.  Consult /etc/rc.firewall
->
+        or ipfw show to see the ruleset used.  You can disable
->
+        ipfw by setting firewall_enable="NO" in /etc/rc.conf This
->
+        change only effects IPv4.  IPv6 does not have a firewall
->
+        enabled by default.
-+
+20070814:
-+
+        Removed GNU tar source.  We've been using BSD tar
-+
+        for awhile.
-+
+20070806:
-<
+        /usr/share/mk/bsd.port.mk was not merged from current
-<
+        before 0.1 was released.  This caused the wrong
-<
+        file in /usr/mport/mk to be sourced when a port's
-<
+        makefile sourced bsd.port.mk.  Many ports where broken as
-<
+        a result.
->
+        Finished removing umapfs and autofs from the tree.
-–
+20070804:
-<
+.1-RELEASE
-<
-<
+        BIND 9.3.4-p1 security patch.
->
+        BIND and Tcpdump have been patched for recent vulnerabilities.
-<
+        Tcpdump was patched.
->
+        We switched to BSD cpio (pax).
-+
+20070719:
-+
+        Imported cpdup from DragonFly as /bin/cpdup
-+
-+
+20070716:
-+
+        Update GNU cpio to 2.8.
-+
-+
+20070410:
-+
+        cvs was updated to 1.12.13.  cvsbug was removed.
-+
+        cvs now behaves similarly to DragonFly's cvs with
-+
+        most of their local changes.
-+
-+
+20070409:
-+
+        RELENG_0_1 was created. More aggresive changes will
-+
+        continue here.
-+
+20070406:
+        Back out propolice.  propolice caused several problems
+        with our threading libraries libthr and libpthread.
+this document.
+$FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
-<
+$MidnightBSD: src/UPDATING,v 1.20.2.8 2008/04/19 17:19:41 laffer1 Exp $
->
+$MidnightBSD: src/UPDATING,v 1.94.2.12 2011/10/05 02:07:57 laffer1 Exp $

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing src/UPDATING (file contents): Revision 1.20.2.9 by laffer1, Tue Sep 30 04:17:04 2008 UTC vs. Revision 1.94.2.13 by laffer1, Sat Dec 24 03:05:55 2011 UTC

Diff Legend

Comparing src/UPDATING (file contents):
Revision 1.20.2.9 by laffer1, Tue Sep 30 04:17:04 2008 UTC vs.
Revision 1.94.2.13 by laffer1, Sat Dec 24 03:05:55 2011 UTC