ViewVC Help

View File | Revision Log | Show Annotations | Revision Graph | Download File | Root Listing

root/midnightbsd-cvs/src/UPDATING

Comparing src/UPDATING (file contents):
Revision 1.38.2.19 by laffer1, Wed Jun 10 15:49:25 2009 UTC vs.
Revision 1.101 by laffer1, Sat Jan 15 05:56:21 2011 UTC

#	Line 1 | Line 1
1		Updating Information for MidnightBSD users
2
3	<	Items affecting the mports and packages system can be found in
4	<	/usr/mports/UPDATING.
3	>	20110115:
4	>	Add experimental jme(4) for Jmicron ethernet devices.
5
6	<	20090610:
7	<	MidnightBSD 0.2.1-RELEASE-p10
8	<
9	<	This should be applied to all systems running 0.2.1. Users on
10	<	p9 simply should update their kernels. No world update is required.
6	>	20101130:
7	>	A double free exists in the SSL client ECDH handling code, when
8	>	processing specially crafted public keys with invalid prime
9	>	numbers. [CVE-2010-2939]
10
11	<	ipv6:
12	<	The SIOCSIFINFO_IN6 ioctl is missing a necessary permissions check.
13	<	Don't let everyone on the planet (with local access) change the
14	<	properties on the ipv6 interfaces.
11	>	20101120:
12	>	Several portions of the kernel and userland code related to UFS file
13	>	systems (and UFS2) cannot properly handle inode counts above 2^31 due
14	>	to use of int types.  Based on a patch from FreeBSD, I've modified
15	>	our UFS2 implementation to handle unsigned values for inode counts
16	>	which should allow for file systems greater than 16TB.
17
18	<	anonymous pipes:
18	<	Stop unprivileged processes from reading pages of memory belonging
19	<	to other processes with anonymous pipes.
18	>	newfs and growfs was also modified.
19
20	<	20090521:
21	<	MidnightBSD 0.2.1-RELEASE-p9
20	>	20101110:
21	>	Fix a security issue with pseudofs which could result in running code in kernel
22	>	context or a kernel panic depending on system configuration.  This affects file
23	>	systems such as procfs for instance.
24
25	<	This fix is only in configuration files for ssh and sshd.  Users on
26	<	p8 should simply add
25	>	20101021:
26	>	sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
27	>	This is similar to functions present in many linux distros. The utility was
28	>	written by Devin Teske for FreeBSD.
29
30	<	Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc
30	>	20100920:
31	>	bzip2 security patch for integer overflow.
32
33	<	to their configuration files for sshd_config and ssh_config in etc/ssh
33	>	20100905:
34	>	MidnightBSD RELENG_0_3 branch created.  Aggressive development continues here
35	>	for 0.4.
36
37	+	20100902:
38	+	Fix a security issue with libutil that allows users to bypass cpu limits in
39	+	login.conf in some cases.  This combined with OpenSSH for example can allow
40	+	the user to get more resources than they're allowed.
41	+
42	+	20100822:
43	+	Import Apple's mDNSResponder (mdnsd).
44	+
45	+	20100814:
46	+	libdispatch added to MidnightBSD.  This provides functionality found in
47	+	Mac OS X's GCD.  We do not have blocks support yet.  As this code is
48	+	licensed under Apache 2, we create a new MK_APACHE option so that
49	+	it's not required for all users to run code under a license they
50	+	may not like.
51	+
52	+	20100713:
53	+	mbuf readonly fix related to sendfile(2) data corruption.
54	+
55	+	20100704:
56	+	brainfuck(1) imported from MirBSD.
57	+
58	+	20100505:
59	+	zlib 1.2.5
60	+
61	+	20100430:
62	+	Sudo 1.7.2p6 imported
63	+
64	+	20100321:
65	+	Update zlib to 1.2.4
66	+
67	+	20100319:
68	+	Removed i586 from default i386 generic kernel.
69	+
70	+	20100317:
71	+	Update to tzdata2010e (time zones).  This includes changes in
72	+	Mexico.
73	+
74	+	Add support for several newer sound cards via hda including
75	+	ATI and Realtek chipsets.
76	+
77	+	20100313:
78	+	CPU detection has been changed.  VIA Padlock detection added.
79	+
80	+	20100312:
81	+	Fix a number of bugs and compiler warnings in libmport. Handle
82	+	plus signs in paths for mport.check-fake
83	+
84	+	20100311:
85	+	mksh R39c
86	+
87	+	20100309:
88	+	Sudo 1.7.2p5
89	+
90	+	sqlite3 3.6.23
91	+
92	+	mksh R39b
93	+
94	+	libffi (ffi) 3.0.9
95	+
96	+	20100206:
97	+	WITHOUT_LIB32 is no longer needed on AMD64.  GCC was fixed to
98	+	properly pass arguments to ld.
99	+
100	+	re(4) and rl(4) have been updated to support several new
101	+	realtek chipsets.  Performance has been improved on re(4).
102	+
103	+	20100204:
104	+	Fix a bug cropping up on AMD64 MidnightBSD with sftp
105	+	segfaulting.
106	+
107	+	20100116:
108	+	Import ash changes from FreeBSD (bin/sh) 8-Stable.
109	+
110	+	BIND 9.6.1-P2
111	+
112	+	20100110:
113	+	Import Sendmail 8.14.4. Fix for SSL vulnerability.
114	+
115	+	posix_spawn(3) added to MidnightBSD libc.  Users may need to build and
116	+	install libc before doing a full buildworld when upating from 0.2 or
117	+	older current systems.
118	+
119	+	kqueue(2) was modified to support portions of libdispatch functionality.
120	+
121	+	20100106:
122	+	Bind security update.  Fix a bug with DNSSEC that causes negative
123	+	cache entries and thus a possible DNS cache poisoning attack.
124	+
125	+	Fix a bug in ZFS that can reset permissions on system crashes.
126	+
127	+	20091228:
128	+	amdtemp(4) was added.  It allows one to monitor to the temperature
129	+	of an AMD CPU such as a Phenom.
130	+
131	+	20091205:
132	+	OpenSSL security fix
133	+
134	+	The SSL version 3 and TLS protocols support session renegotiation without
135	+	cryptographically tying the new session parameters to the old parameters.
136	+
137	+	20091128:
138	+	OpenBSD sensors framework imported including sensorsd(8)
139	+
140	+	20091126:
141	+	OpenNTPD 4.4 import
142	+
143	+	Update OpenSSH to 5.3p1
144	+
145	+	mksh R39
146	+
147	+	20091124:
148	+	cpdup updated from DragonFly to 1.15
149	+
150	+	tzdata2009s updated with latest timezone data for November 2009.
151	+
152	+	20091010:
153	+	amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
154	+	to test current.
155	+
156	+	Revert unicode filename fixes from ntfs code.  This was causing chaos
157	+	on amd64 systems.
158	+
159	+	20091006:
160	+	Update timezone data with tzdata2009n with the Pakistan and
161	+	Argentina changes.
162	+
163	+	Sync several userland utilities with versions from FreeBSD 7.0 in
164	+	sbin and usr.sbin.
165	+
166	+	20090919:
167	+	Update timezone data with tzdate2009m from September 2009.
168	+
169	+	20090729:
170	+	Patch for Bind 9 security vulnerability. a dynmaic update packet
171	+	can trigger an assertion and cause named to exit
172	+
173	+	20090606:
174	+	Remove PCC from the base system.  This compiler will not work
175	+	as a system compiler for us as we've got some userland investment
176	+	in C++ code and may have Objective-C in the future.  We're stuck
177	+	with a solution that supports these three languages at a minimum.
178	+
179	+	I had wanted to keep it as an optional compiler because it is
180	+	fast, however too many users want to try to use it for the base
181	+	system which makes no sense.
182	+
183	+	A hack was added for Cypress based usb hard drive enclosures to
184	+	the kernel.  This should cut down on commands it claims to support
185	+	but does not (at the cam layer).  Found while testing ZFS on
186	+	an external device.
187	+
188	+	20090520:
189	+	The powerd daemon no longer starts automatically to improve
190	+	compatibility with many systems.  However, there is a new
191	+	installer option in the startup section to enable it. This
192	+	makes it easier to enable for users that have working systems. I                thought it was only a problem on older hardware, but it freaks
193	+	out my new Phenom too.
194	+
195	+	20090502:
196	+	OpenSSH 5.2p1 import
197	+
198	+	ale(4) connected to the build. (kernel module only)
199	+
200	+	20090501:
201	+	Imported makefs utility from NetBSD/FreeBSD
202	+
203		20090422:
204	<	MindightBSD 0.2.1-RELEASE-p8
204	>	OpenSSL security update
205
206		The function ASN1_STRING_print_ex does not properly validate the lengths
207	<	of BMPString or UniversalString objects before attempting to print them.
207	>	of BMPString or UniversalString objects before attempting to print them.
208
209	<	20090326:
210	<	MidnightBSD 0.2.1-RELEASE-p7
209	>	20090415:
210	>	Created a Symbol.map for libc/ohash symbols
211
212	<	Fix several security problems with sudo.  It is now 1.6.9-p20
212	>	Updated several usr/bin usr/sbin utilities.
213
214	<	20090115:
215	<	MidnightBSD 0.2.1-RELEASE-p6
214	>	Corrected a bug with Makefile.inc1 causing the bootstrap
215	>	tools to fail.
216
217	<	Correct an issue with BIND that allows for DNSSEC spoofing
218	<	attacks.
217	>	20090405:
218	>	xorg 7.4 wants to configure its input devices via hald which does not
219	>	yet work with USB. If the keyboard/mouse does not work in xorg then
220	>	add
221	>	Option "AllowEmptyInput" "off"
222	>	to your ServerLayout section.  This will cause X to use the configured
223	>	kbd and mouse sections from your xorg.conf
224
225	<	20090110:
226	<	MidnightBSD 0.2.1-RELEASE-p5
225	>	20090403:
226	>	mksh was disconnected a few day ago do to bugs with
227	>	buildworld and mports.  Now, connect it back
228	>	for use as /bin/sh with a conditional called
229	>	MK_ASH.  By default, ash is the standard /bin/sh
230	>	but we may change this later.  This will allow further
231	>	testing by users and developers of mksh without
232	>	causing an unpleasant default experience.  In the
233	>	long run, we need to fix mksh compatibility.
234
235	+	20090328:
236	+	Bring in mksh R37 from CVS. The dot.mkshrc files for root
237	+	and skel were changed.  mksh(1) now replaces ash aka sh(1)
238	+	as the default /bin/sh.  Please report bugs with
239	+	ports, etc. The ash code will remain in the repo for awhile
240	+	as I decide if we'll add something like MK_SHELL_ASH as
241	+	an optional build parameter.
242	+
243	+	ahd was disconnected from the lint environment until
244	+	the compiler bug is sorted (by updating gcc?)
245	+
246	+	Remove freebsd-tips from fortune files and change the
247	+	default for login and profile.
248	+
249	+	20090327:
250	+	Update libarchive to 2.5.5, tar, and add bsdcpio.
251	+
252	+	Also previously, ctriv has been connecting Perl 5.10
253	+	to the build (part of os).  This will have an impact
254	+	on mports.
255	+
256	+	20090325:
257	+	Update Bind to 9.4.3-P1
258	+
259	+	Update mksh to R36b
260	+
261	+	Update tcpdump to 3.9.8, fix libpcap to work with current.
262	+
263	+	Update pnpinfo, sync with FreeBSD.
264	+
265	+	20090115:
266	+	Fix a problem with DNSSEC and BIND.
267	+
268	+	20090110:
269		For applications using OpenSSL for SSL connections, an invalid SSL
270		certificate may be interpreted as valid.  This could for example be
271		used by an attacker to perform a man-in-the-middle attack.
#	Line 57 | Line 275 | Items affecting the mports and packages system can be
275
276		Stop cross site request forgery attacks in lukemftpd
277
278	<	20081231:
279	<	MidnightBSD 0.2.1-RELEASE-p4
278	>	20090104:
279	>	Import GNU libreadline 5.2
280
281	<	Correct a problem where function pointers for netgraph
282	<	and bluetooth sockets are not initialized properly.
281	>	20090101:
282	>	Update time zone data to 2008i.
283
284	<	20081124:
285	<	MidnightBSD 0.2.1-RELEASE-p3
284	>	20081231:
285	>	Correct a problem where bluetooth and netgraph sockets are not
286	>	properly initialized.
287
288	<	Correct a problem in arc4random which causes the device
70	<	not get get enough entropy for system services.  Geom
71	<	classes initialized at startup will still have problems.
288	>	Happy 2009.
289
290	<	20081002:
291	<	MidnightBSD 0.2.1-RELEASE-p2
290	>	20081206:
291	>	Due to the massive change in the underlying system under way,
292	>	we're naming the next release 1.0.  The sys/sys/param.h was
293	>	changed accordingly.  ipfilter and ncurses were corrected
294	>	using __MidnightBSD__ tests in the code.
295
296	<	IPv6 Neighbor Discovery Protocol routing vulnerability
296	>	The GENERIC kernel config was caught up on i386 today.  Consider
297	>	i386 still broken, but amd64 is running again.
298
299	<	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2476
79	<	http://www.kb.cert.org/vuls/id/472363
299	>	mdoc.local was updated with the new MidnightBSD version info.
300
301	<	This fix causes IPv6 Neighbor Discovery Neighbor Solicitation
302	<	messages to be ignored from non-neighbors.
301	>	batt(1) was rewritten in C.  It now supports several flags and
302	>	runs about 8 times faster on my laptop.  The default output
303	>	shows the number of minutes of battery life remaining and the
304	>	percentage.  You can use -u to display the number of batteries or
305	>	-c to get script friendly output.  Consult the man page for more.
306
307	<	This can be re-enabled, if needed, by setting the newly added
308	<	net.inet6.icmp6.nd6_onlink_ns_rfc4861 sysctl to 1.
307	>	20081204:
308	>	Work has completed on importing ZFS, jemalloc, several
309	>	new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
310	>	support, improved locking for file desc., audit (openbsm),
311	>	openssl .98e, nfe, imporved intel high def audio, midi, updated
312	>	intel gigabit (em), support for several wifi cards (intel), ...
313
314	<	20080929:
315	<	MidnightBSD 0.2.1-RELEASE-p1
314	>	Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
315	>	data from param.h instead of the FreeBSD version.  This means
316	>	testing is now possible in the ports tree for the version
317	>	and that any ports or code relying on the FreeBSD version from
318	>	sys/sys/param.h will need to be fixed.
319
90	–	Fix a defect in ftpd.  The command buffer was split which allowed
91	–	attackers to send arbritrary commands over the network.
92	–
320		20080905:
321	<	Update nve(4) to support newer hardware.
321	>	update nve(4) to support new hardware.
322
323	<	20080903:
324	<	Correct two defects in MidnightBSD.  AMD64/EMT64 systems had a
98	<	privledge escalation issue.  CVE-2008-3890
323	>	20080801:
324	>	Import OpenBSM 1.0
325
326	<	In case of an incoming ICMPv6 'Packet Too Big Message', there is an
101	<	insufficient check on the proposed new MTU for a path to the
102	<	destination.
103	<	CVE-2008-3530
326	>	Modify src/release to create 3 isos instead of 2 for packages.
327
328	<	20080830:
106	<	MidnightBSD 0.2.1-RELEASE
328	>	etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
329
330	<	Oops, fix some bugs with sysinstall's handling of packages found
109	<	on the release ISOs.  Tweak etc/firstboot while where here.
330	>	Many ia64, alpha, powerpc items were removed.
331
332	<	20080829:
112	<	MidnightBSD 0.2-RELEASE
332	>	The recent diffutils 2.8.7 import was fixed.
333
334		20080703:
335	<	Correct problem with pcc and DESTDIR that affected creating live cds
336	<	and jails.
335	>	pcc was not installed properly when setting DESTDIR for live cds,
336	>	or posibly jails.
337
118	–	sysinstall would incorrectly truncate DHCP info when configuring
119	–	ipv4 networking.  This was the result of a bad patch several months
120	–	ago.  Fix this error.  Found via testing a snapshot.
121	–
338		20080627:
339		Add firmware(9), WEP, CCMP, TKIP to GENERIC.
340
#	Line 128 | Line 344 | Items affecting the mports and packages system can be
344
345		pcc connected to the build on i386. (alternative compiler)
346
347	<	20080613:
132	<	Begin work for MidnightBSD 0.2-PRERELEASE
347	>	ath added to GENERIC.  (Atheros wireless NICs) on amd64/i386
348
349		20080528:
350		Sendmail 8.14.3
#	Line 693 | Line 908 | Contact Warner Losh if you have any questions about yo
908		this document.
909
910		$FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
911	<	$MidnightBSD: src/UPDATING,v 1.38.2.18 2009/05/21 23:11:43 laffer1 Exp $
911	>	$MidnightBSD: src/UPDATING,v 1.100 2010/11/30 14:01:00 laffer1 Exp $

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines
>	Changed lines