ViewVC Help

View File | Revision Log | Show Annotations | Revision Graph | Download File | Root Listing

root/midnightbsd-cvs/src/UPDATING

Comparing src/UPDATING (file contents):
Revision 1.38.2.19 by laffer1, Wed Jun 10 15:49:25 2009 UTC vs.
Revision 1.106 by laffer1, Thu Feb 3 04:27:20 2011 UTC

#	Line 1 | Line 1
1		Updating Information for MidnightBSD users
2
3	<	Items affecting the mports and packages system can be found in
4	<	/usr/mports/UPDATING.
3	>	20110202:
4	>	tcsh 6.17.00
5
6	<	20090610:
7	<	MidnightBSD 0.2.1-RELEASE-p10
8	<
9	<	This should be applied to all systems running 0.2.1. Users on
10	<	p9 simply should update their kernels. No world update is required.
6	>	file  5.05
7
8	<	ipv6:
9	<	The SIOCSIFINFO_IN6 ioctl is missing a necessary permissions check.
10	<	Don't let everyone on the planet (with local access) change the
15	<	properties on the ipv6 interfaces.
8	>	20110122:
9	>	Import it(4) and lm(4), with support for Super I/O hardware monitors. This
10	>	uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
11
12	<	anonymous pipes:
13	<	Stop unprivileged processes from reading pages of memory belonging
19	<	to other processes with anonymous pipes.
12	>	20110120:
13	>	BIND 9.6.2-P3
14
15	<	20090521:
22	<	MidnightBSD 0.2.1-RELEASE-p9
15	>	sudo 1.7.4-p6
16
17	<	This fix is only in configuration files for ssh and sshd.  Users on
18	<	p8 should simply add
17	>	20110115:
18	>	Add experimental jme(4) for Jmicron ethernet devices.
19
20	<	Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc
20	>	20101130:
21	>	A double free exists in the SSL client ECDH handling code, when
22	>	processing specially crafted public keys with invalid prime
23	>	numbers. [CVE-2010-2939]
24
25	<	to their configuration files for sshd_config and ssh_config in etc/ssh
25	>	20101120:
26	>	Several portions of the kernel and userland code related to UFS file
27	>	systems (and UFS2) cannot properly handle inode counts above 2^31 due
28	>	to use of int types.  Based on a patch from FreeBSD, I've modified
29	>	our UFS2 implementation to handle unsigned values for inode counts
30	>	which should allow for file systems greater than 16TB.
31
32	+	newfs and growfs was also modified.
33	+
34	+	20101110:
35	+	Fix a security issue with pseudofs which could result in running code in kernel
36	+	context or a kernel panic depending on system configuration.  This affects file
37	+	systems such as procfs for instance.
38	+
39	+	20101021:
40	+	sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
41	+	This is similar to functions present in many linux distros. The utility was
42	+	written by Devin Teske for FreeBSD.
43	+
44	+	20100920:
45	+	bzip2 security patch for integer overflow.
46	+
47	+	20100905:
48	+	MidnightBSD RELENG_0_3 branch created.  Aggressive development continues here
49	+	for 0.4.
50	+
51	+	20100902:
52	+	Fix a security issue with libutil that allows users to bypass cpu limits in
53	+	login.conf in some cases.  This combined with OpenSSH for example can allow
54	+	the user to get more resources than they're allowed.
55	+
56	+	20100822:
57	+	Import Apple's mDNSResponder (mdnsd).
58	+
59	+	20100814:
60	+	libdispatch added to MidnightBSD.  This provides functionality found in
61	+	Mac OS X's GCD.  We do not have blocks support yet.  As this code is
62	+	licensed under Apache 2, we create a new MK_APACHE option so that
63	+	it's not required for all users to run code under a license they
64	+	may not like.
65	+
66	+	20100713:
67	+	mbuf readonly fix related to sendfile(2) data corruption.
68	+
69	+	20100704:
70	+	brainfuck(1) imported from MirBSD.
71	+
72	+	20100505:
73	+	zlib 1.2.5
74	+
75	+	20100430:
76	+	Sudo 1.7.2p6 imported
77	+
78	+	20100321:
79	+	Update zlib to 1.2.4
80	+
81	+	20100319:
82	+	Removed i586 from default i386 generic kernel.
83	+
84	+	20100317:
85	+	Update to tzdata2010e (time zones).  This includes changes in
86	+	Mexico.
87	+
88	+	Add support for several newer sound cards via hda including
89	+	ATI and Realtek chipsets.
90	+
91	+	20100313:
92	+	CPU detection has been changed.  VIA Padlock detection added.
93	+
94	+	20100312:
95	+	Fix a number of bugs and compiler warnings in libmport. Handle
96	+	plus signs in paths for mport.check-fake
97	+
98	+	20100311:
99	+	mksh R39c
100	+
101	+	20100309:
102	+	Sudo 1.7.2p5
103	+
104	+	sqlite3 3.6.23
105	+
106	+	mksh R39b
107	+
108	+	libffi (ffi) 3.0.9
109	+
110	+	20100206:
111	+	WITHOUT_LIB32 is no longer needed on AMD64.  GCC was fixed to
112	+	properly pass arguments to ld.
113	+
114	+	re(4) and rl(4) have been updated to support several new
115	+	realtek chipsets.  Performance has been improved on re(4).
116	+
117	+	20100204:
118	+	Fix a bug cropping up on AMD64 MidnightBSD with sftp
119	+	segfaulting.
120	+
121	+	20100116:
122	+	Import ash changes from FreeBSD (bin/sh) 8-Stable.
123	+
124	+	BIND 9.6.1-P2
125	+
126	+	20100110:
127	+	Import Sendmail 8.14.4. Fix for SSL vulnerability.
128	+
129	+	posix_spawn(3) added to MidnightBSD libc.  Users may need to build and
130	+	install libc before doing a full buildworld when upating from 0.2 or
131	+	older current systems.
132	+
133	+	kqueue(2) was modified to support portions of libdispatch functionality.
134	+
135	+	20100106:
136	+	Bind security update.  Fix a bug with DNSSEC that causes negative
137	+	cache entries and thus a possible DNS cache poisoning attack.
138	+
139	+	Fix a bug in ZFS that can reset permissions on system crashes.
140	+
141	+	20091228:
142	+	amdtemp(4) was added.  It allows one to monitor to the temperature
143	+	of an AMD CPU such as a Phenom.
144	+
145	+	20091205:
146	+	OpenSSL security fix
147	+
148	+	The SSL version 3 and TLS protocols support session renegotiation without
149	+	cryptographically tying the new session parameters to the old parameters.
150	+
151	+	20091128:
152	+	OpenBSD sensors framework imported including sensorsd(8)
153	+
154	+	20091126:
155	+	OpenNTPD 4.4 import
156	+
157	+	Update OpenSSH to 5.3p1
158	+
159	+	mksh R39
160	+
161	+	20091124:
162	+	cpdup updated from DragonFly to 1.15
163	+
164	+	tzdata2009s updated with latest timezone data for November 2009.
165	+
166	+	20091010:
167	+	amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
168	+	to test current.
169	+
170	+	Revert unicode filename fixes from ntfs code.  This was causing chaos
171	+	on amd64 systems.
172	+
173	+	20091006:
174	+	Update timezone data with tzdata2009n with the Pakistan and
175	+	Argentina changes.
176	+
177	+	Sync several userland utilities with versions from FreeBSD 7.0 in
178	+	sbin and usr.sbin.
179	+
180	+	20090919:
181	+	Update timezone data with tzdate2009m from September 2009.
182	+
183	+	20090729:
184	+	Patch for Bind 9 security vulnerability. a dynmaic update packet
185	+	can trigger an assertion and cause named to exit
186	+
187	+	20090606:
188	+	Remove PCC from the base system.  This compiler will not work
189	+	as a system compiler for us as we've got some userland investment
190	+	in C++ code and may have Objective-C in the future.  We're stuck
191	+	with a solution that supports these three languages at a minimum.
192	+
193	+	I had wanted to keep it as an optional compiler because it is
194	+	fast, however too many users want to try to use it for the base
195	+	system which makes no sense.
196	+
197	+	A hack was added for Cypress based usb hard drive enclosures to
198	+	the kernel.  This should cut down on commands it claims to support
199	+	but does not (at the cam layer).  Found while testing ZFS on
200	+	an external device.
201	+
202	+	20090520:
203	+	The powerd daemon no longer starts automatically to improve
204	+	compatibility with many systems.  However, there is a new
205	+	installer option in the startup section to enable it. This
206	+	makes it easier to enable for users that have working systems. I                thought it was only a problem on older hardware, but it freaks
207	+	out my new Phenom too.
208	+
209	+	20090502:
210	+	OpenSSH 5.2p1 import
211	+
212	+	ale(4) connected to the build. (kernel module only)
213	+
214	+	20090501:
215	+	Imported makefs utility from NetBSD/FreeBSD
216	+
217		20090422:
218	<	MindightBSD 0.2.1-RELEASE-p8
218	>	OpenSSL security update
219
220		The function ASN1_STRING_print_ex does not properly validate the lengths
221	<	of BMPString or UniversalString objects before attempting to print them.
221	>	of BMPString or UniversalString objects before attempting to print them.
222
223	<	20090326:
224	<	MidnightBSD 0.2.1-RELEASE-p7
223	>	20090415:
224	>	Created a Symbol.map for libc/ohash symbols
225
226	<	Fix several security problems with sudo.  It is now 1.6.9-p20
226	>	Updated several usr/bin usr/sbin utilities.
227
228	<	20090115:
229	<	MidnightBSD 0.2.1-RELEASE-p6
228	>	Corrected a bug with Makefile.inc1 causing the bootstrap
229	>	tools to fail.
230
231	<	Correct an issue with BIND that allows for DNSSEC spoofing
232	<	attacks.
231	>	20090405:
232	>	xorg 7.4 wants to configure its input devices via hald which does not
233	>	yet work with USB. If the keyboard/mouse does not work in xorg then
234	>	add
235	>	Option "AllowEmptyInput" "off"
236	>	to your ServerLayout section.  This will cause X to use the configured
237	>	kbd and mouse sections from your xorg.conf
238
239	<	20090110:
240	<	MidnightBSD 0.2.1-RELEASE-p5
239	>	20090403:
240	>	mksh was disconnected a few day ago do to bugs with
241	>	buildworld and mports.  Now, connect it back
242	>	for use as /bin/sh with a conditional called
243	>	MK_ASH.  By default, ash is the standard /bin/sh
244	>	but we may change this later.  This will allow further
245	>	testing by users and developers of mksh without
246	>	causing an unpleasant default experience.  In the
247	>	long run, we need to fix mksh compatibility.
248
249	+	20090328:
250	+	Bring in mksh R37 from CVS. The dot.mkshrc files for root
251	+	and skel were changed.  mksh(1) now replaces ash aka sh(1)
252	+	as the default /bin/sh.  Please report bugs with
253	+	ports, etc. The ash code will remain in the repo for awhile
254	+	as I decide if we'll add something like MK_SHELL_ASH as
255	+	an optional build parameter.
256	+
257	+	ahd was disconnected from the lint environment until
258	+	the compiler bug is sorted (by updating gcc?)
259	+
260	+	Remove freebsd-tips from fortune files and change the
261	+	default for login and profile.
262	+
263	+	20090327:
264	+	Update libarchive to 2.5.5, tar, and add bsdcpio.
265	+
266	+	Also previously, ctriv has been connecting Perl 5.10
267	+	to the build (part of os).  This will have an impact
268	+	on mports.
269	+
270	+	20090325:
271	+	Update Bind to 9.4.3-P1
272	+
273	+	Update mksh to R36b
274	+
275	+	Update tcpdump to 3.9.8, fix libpcap to work with current.
276	+
277	+	Update pnpinfo, sync with FreeBSD.
278	+
279	+	20090115:
280	+	Fix a problem with DNSSEC and BIND.
281	+
282	+	20090110:
283		For applications using OpenSSL for SSL connections, an invalid SSL
284		certificate may be interpreted as valid.  This could for example be
285		used by an attacker to perform a man-in-the-middle attack.
#	Line 57 | Line 289 | Items affecting the mports and packages system can be
289
290		Stop cross site request forgery attacks in lukemftpd
291
292	<	20081231:
293	<	MidnightBSD 0.2.1-RELEASE-p4
292	>	20090104:
293	>	Import GNU libreadline 5.2
294
295	<	Correct a problem where function pointers for netgraph
296	<	and bluetooth sockets are not initialized properly.
295	>	20090101:
296	>	Update time zone data to 2008i.
297
298	<	20081124:
299	<	MidnightBSD 0.2.1-RELEASE-p3
298	>	20081231:
299	>	Correct a problem where bluetooth and netgraph sockets are not
300	>	properly initialized.
301
302	<	Correct a problem in arc4random which causes the device
70	<	not get get enough entropy for system services.  Geom
71	<	classes initialized at startup will still have problems.
302	>	Happy 2009.
303
304	<	20081002:
305	<	MidnightBSD 0.2.1-RELEASE-p2
304	>	20081206:
305	>	Due to the massive change in the underlying system under way,
306	>	we're naming the next release 1.0.  The sys/sys/param.h was
307	>	changed accordingly.  ipfilter and ncurses were corrected
308	>	using __MidnightBSD__ tests in the code.
309
310	<	IPv6 Neighbor Discovery Protocol routing vulnerability
310	>	The GENERIC kernel config was caught up on i386 today.  Consider
311	>	i386 still broken, but amd64 is running again.
312
313	<	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2476
79	<	http://www.kb.cert.org/vuls/id/472363
313	>	mdoc.local was updated with the new MidnightBSD version info.
314
315	<	This fix causes IPv6 Neighbor Discovery Neighbor Solicitation
316	<	messages to be ignored from non-neighbors.
315	>	batt(1) was rewritten in C.  It now supports several flags and
316	>	runs about 8 times faster on my laptop.  The default output
317	>	shows the number of minutes of battery life remaining and the
318	>	percentage.  You can use -u to display the number of batteries or
319	>	-c to get script friendly output.  Consult the man page for more.
320
321	<	This can be re-enabled, if needed, by setting the newly added
322	<	net.inet6.icmp6.nd6_onlink_ns_rfc4861 sysctl to 1.
321	>	20081204:
322	>	Work has completed on importing ZFS, jemalloc, several
323	>	new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
324	>	support, improved locking for file desc., audit (openbsm),
325	>	openssl .98e, nfe, imporved intel high def audio, midi, updated
326	>	intel gigabit (em), support for several wifi cards (intel), ...
327
328	<	20080929:
329	<	MidnightBSD 0.2.1-RELEASE-p1
328	>	Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
329	>	data from param.h instead of the FreeBSD version.  This means
330	>	testing is now possible in the ports tree for the version
331	>	and that any ports or code relying on the FreeBSD version from
332	>	sys/sys/param.h will need to be fixed.
333
90	–	Fix a defect in ftpd.  The command buffer was split which allowed
91	–	attackers to send arbritrary commands over the network.
92	–
334		20080905:
335	<	Update nve(4) to support newer hardware.
335	>	update nve(4) to support new hardware.
336
337	<	20080903:
338	<	Correct two defects in MidnightBSD.  AMD64/EMT64 systems had a
98	<	privledge escalation issue.  CVE-2008-3890
337	>	20080801:
338	>	Import OpenBSM 1.0
339
340	<	In case of an incoming ICMPv6 'Packet Too Big Message', there is an
101	<	insufficient check on the proposed new MTU for a path to the
102	<	destination.
103	<	CVE-2008-3530
340	>	Modify src/release to create 3 isos instead of 2 for packages.
341
342	<	20080830:
106	<	MidnightBSD 0.2.1-RELEASE
342	>	etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
343
344	<	Oops, fix some bugs with sysinstall's handling of packages found
109	<	on the release ISOs.  Tweak etc/firstboot while where here.
344	>	Many ia64, alpha, powerpc items were removed.
345
346	<	20080829:
112	<	MidnightBSD 0.2-RELEASE
346	>	The recent diffutils 2.8.7 import was fixed.
347
348		20080703:
349	<	Correct problem with pcc and DESTDIR that affected creating live cds
350	<	and jails.
349	>	pcc was not installed properly when setting DESTDIR for live cds,
350	>	or posibly jails.
351
118	–	sysinstall would incorrectly truncate DHCP info when configuring
119	–	ipv4 networking.  This was the result of a bad patch several months
120	–	ago.  Fix this error.  Found via testing a snapshot.
121	–
352		20080627:
353		Add firmware(9), WEP, CCMP, TKIP to GENERIC.
354
#	Line 128 | Line 358 | Items affecting the mports and packages system can be
358
359		pcc connected to the build on i386. (alternative compiler)
360
361	<	20080613:
132	<	Begin work for MidnightBSD 0.2-PRERELEASE
361	>	ath added to GENERIC.  (Atheros wireless NICs) on amd64/i386
362
363		20080528:
364		Sendmail 8.14.3
#	Line 693 | Line 922 | Contact Warner Losh if you have any questions about yo
922		this document.
923
924		$FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
925	<	$MidnightBSD: src/UPDATING,v 1.38.2.18 2009/05/21 23:11:43 laffer1 Exp $
925	>	$MidnightBSD: src/UPDATING,v 1.105 2011/02/02 22:37:10 laffer1 Exp $

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines
>	Changed lines