[ViewVC] Diff of: midnightbsd-cvs/src/UPDATING

Comparing src/UPDATING (file contents):
Revision 1.38.2.19 by laffer1, Wed Jun 10 15:49:25 2009 UTC vs.
Revision 1.133 by laffer1, Thu Sep 29 00:04:55 2011 UTC

+Updating Information for MidnightBSD users
-<
+Items affecting the mports and packages system can be found in
-<
+/usr/mports/UPDATING.
->
+20110928:
->
+        Fix security issues with gzip and compress related to .Z
->
+        files that are corrupted.
-<
+20090610:
-<
+        MidnightBSD 0.2.1-RELEASE-p10
-<
-<
+        This should be applied to all systems running 0.2.1. Users on
-<
+        p9 simply should update their kernels. No world update is required.
->
+        Fix path validation with unix domain sockets.
-<
+        ipv6:
-<
+        The SIOCSIFINFO_IN6 ioctl is missing a necessary permissions check.
-<
+        Don't let everyone on the planet (with local access) change the
-<
+        properties on the ipv6 interfaces.
->
+20110917:
->
+        Remove dependance on mports perl for generating releases as
->
+        it's in the base system.
-<
+        anonymous pipes:
-<
+        Stop unprivileged processes from reading pages of memory belonging
-<
+        to other processes with anonymous pipes.
->
+20110914:
->
+        Import xz 5.0.3 with liblzma 5.0.3
-<
+20090521:
-<
+        MidnightBSD 0.2.1-RELEASE-p9
->
+20110813:
->
+        synced the sparc64 GENERIC kernel configuration with amd64.
-<
+        This fix is only in configuration files for ssh and sshd.  Users on
-<
+        p8 should simply add
->
+20110806:
->
+        sqlite 3.7.7.1 imported
-<
+        Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc
->
+        msearch(1), libmsearch and msearch.import added.  msearch(1) provides
->
+        a full text search command line tool.  libmsearch can also be used
->
+        to build a graphical based search in the future. You can enable
->
+        index building for msearch in periodic.conf or manually run the
->
+        /usr/libexec/msearch.index tool.  Full text indexes take considerable
->
+        space in /var.  I'm using approximately 500MB currently.
-<
+        to their configuration files for sshd_config and ssh_config in etc/ssh
->
+        Fix a long standing bug with the periodic script to check package
->
+        versions.  This will be obsolete with mport though.
-+
+20110710:
-+
+        kdb_enter_why added to MidnightBSD to allow the kernel debugger to
-+
+        know why it's in use and thus script can be run.
-+
-+
+        Yet another problem with the perl manifest was fixed
-+
-+
+20110709:
-+
+        cpufreq(1) is a new utility to monitor CPU frequency which may change
-+
+        with use of powerd(8) and cpufreq(4).
-+
-+
+20110612:
-+
+        Update mksh to R40
-+
-+
+        Catch up ObsoleteFiles.inc to remove Perl 5.10.x.  Good to run when
-+
+        updating current (cd /usr/src && make check-old)
-+
-+
+20110528:
-+
+        Fix CVE-2011-1910 in BIND 9.6.x.  This affects caching resolvers.
-+
-+
+20110526:
-+
+        newfs:
-+
+        Raised the default blocksize for UFS/FFS filesystems from
-+
+K to 32K and the default fragment size from 2K to 4K.
-+
-+
+        This should slightly imporve performance on "advanced format"
-+
+        hard drives such as the WD EARS drives. Drives of this type
-+
+        have emulation modes that slow down with lower sizes.  Of course
-+
+        the drive must still be aligned properly when using fdisk.
-+
-+
+20110521:
-+
+        mport tool now has a deleteall command.  This can be used to remove
-+
+        all packages from a system.
-+
-+
+        A few bugs with the perl 5.14 import have been fixed.
-+
-+
+20110518:
-+
+        Perl 5.14.0
-+
-+
+20110517:
-+
+        Sendmail 8.14.5
-+
-+
+20110314:
-+
+        DRM/DRI code updated to support newer video cards. (FreeBSD 7.1)
-+
-+
+        cdevpriv wrappers added
-+
-+
+        nss_mdns hack introduced to work around linking problem.
-+
-+
+        dnsextd fixed after update to mDNSResponder code.
-+
-+
+20110308:
-+
+        Introduce liblzma & xz 5.0.1 to the base system
-+
-+
+        Patch for OpenSSL security issue CVE-2011-0014.
-+
-+
+        "OSREVISION 4004"
-+
-+
+        nsswitch module for multicast dns (nss_mdns) added.
-+
-+
+        tzdata2011c
-+
-+
+20110220:
-+
+        cam(4) syncronized with FreeBSD 7.3.
-+
-+
+20110219:
-+
+        amdtemp(4) updated to support sensors framework.
-+
-+
+20110217:
-+
+        Perl 5.10.1 imported
-+
-+
+20110216:
-+
+        Introduce igb(4) and split Intel Gigabit Ethernet adapters between
-+
+        igb(4) and em(4).  Newer devices use igb(4).  The code has moved
-+
+        to sys/dev/e1000 for both devices in the kernel. igb(4) has
-+
+        been placed in GENERIC on i386 and amd64.
-+
-+
+        Update bfe(4) to support newer devices and WOL.
-+
-+
+20110215:
-+
+        age(4) added.
-+
-+
+20110208:
-+
+        BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
-+
-+
+20110206:
-+
+        eeemon(4) added to monitor Asus Eee PC.
-+
-+
+20110205:
-+
+        OpenSSH 5.7p1
-+
-+
+        GNU sort 6.9 (coreutils)
-+
-+
+20110203:
-+
+        one true awk 20100523 imported
-+
-+
+        sqlite 3.7.5
-+
-+
+        OpenSSL 0.9.8q
-+
-+
+20110202:
-+
+        tcsh 6.17.00
-+
-+
+        file 5.05
-+
-+
+20110122:
-+
+        Import it(4) and lm(4), with support for Super I/O hardware monitors. This
-+
+        uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
-+
-+
+20110120:
-+
+        BIND 9.6.2-P3
-+
-+
+        sudo 1.7.4-p6
-+
-+
+20110115:
-+
+        Add experimental jme(4) for Jmicron ethernet devices.
-+
-+
+20101130:
-+
+        A double free exists in the SSL client ECDH handling code, when
-+
+        processing specially crafted public keys with invalid prime
-+
+        numbers. [CVE-2010-2939]
-+
-+
+20101120:
-+
+        Several portions of the kernel and userland code related to UFS file
-+
+        systems (and UFS2) cannot properly handle inode counts above 2^31 due
-+
+        to use of int types.  Based on a patch from FreeBSD, I've modified
-+
+        our UFS2 implementation to handle unsigned values for inode counts
-+
+        which should allow for file systems greater than 16TB.
-+
-+
+        newfs and growfs was also modified.
-+
-+
+20101110:
-+
+        Fix a security issue with pseudofs which could result in running code in kernel
-+
+        context or a kernel panic depending on system configuration.  This affects file
-+
+        systems such as procfs for instance.
-+
-+
+20101021:
-+
+        sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
-+
+        This is similar to functions present in many linux distros. The utility was
-+
+        written by Devin Teske for FreeBSD.
-+
-+
+20100920:
-+
+        bzip2 security patch for integer overflow.
-+
-+
+20100905:
-+
+        MidnightBSD RELENG_0_3 branch created.  Aggressive development continues here
-+
+        for 0.4.
-+
-+
+20100902:
-+
+        Fix a security issue with libutil that allows users to bypass cpu limits in
-+
+        login.conf in some cases.  This combined with OpenSSH for example can allow
-+
+        the user to get more resources than they're allowed.
-+
-+
+20100822:
-+
+        Import Apple's mDNSResponder (mdnsd).
-+
-+
+20100814:
-+
+        libdispatch added to MidnightBSD.  This provides functionality found in
-+
+        Mac OS X's GCD.  We do not have blocks support yet.  As this code is
-+
+        licensed under Apache 2, we create a new MK_APACHE option so that
-+
+        it's not required for all users to run code under a license they
-+
+        may not like.
-+
-+
+20100713:
-+
+        mbuf readonly fix related to sendfile(2) data corruption.
-+
-+
+20100704:
-+
+        brainfuck(1) imported from MirBSD.
-+
-+
+20100505:
-+
+        zlib 1.2.5
-+
-+
+20100430:
-+
+        Sudo 1.7.2p6 imported
-+
-+
+20100321:
-+
+        Update zlib to 1.2.4
-+
-+
+20100319:
-+
+        Removed i586 from default i386 generic kernel.
-+
-+
+20100317:
-+
+        Update to tzdata2010e (time zones).  This includes changes in
-+
+        Mexico.
-+
-+
+        Add support for several newer sound cards via hda including
-+
+        ATI and Realtek chipsets.
-+
-+
+20100313:
-+
+        CPU detection has been changed.  VIA Padlock detection added.
-+
-+
+20100312:
-+
+        Fix a number of bugs and compiler warnings in libmport. Handle
-+
+        plus signs in paths for mport.check-fake
-+
-+
+20100311:
-+
+        mksh R39c
-+
-+
+20100309:
-+
+        Sudo 1.7.2p5
-+
-+
+        sqlite3 3.6.23
-+
-+
+        mksh R39b
-+
-+
+        libffi (ffi) 3.0.9
-+
-+
+20100206:
-+
+        WITHOUT_LIB32 is no longer needed on AMD64.  GCC was fixed to
-+
+        properly pass arguments to ld.
-+
-+
+        re(4) and rl(4) have been updated to support several new
-+
+        realtek chipsets.  Performance has been improved on re(4).
-+
-+
+20100204:
-+
+        Fix a bug cropping up on AMD64 MidnightBSD with sftp
-+
+        segfaulting.
-+
-+
+20100116:
-+
+        Import ash changes from FreeBSD (bin/sh) 8-Stable.
-+
-+
+        BIND 9.6.1-P2
-+
-+
+20100110:
-+
+        Import Sendmail 8.14.4. Fix for SSL vulnerability.
-+
-+
+        posix_spawn(3) added to MidnightBSD libc.  Users may need to build and
-+
+        install libc before doing a full buildworld when upating from 0.2 or
-+
+        older current systems.
-+
-+
+        kqueue(2) was modified to support portions of libdispatch functionality.
-+
-+
+20100106:
-+
+        Bind security update.  Fix a bug with DNSSEC that causes negative
-+
+        cache entries and thus a possible DNS cache poisoning attack.
-+
-+
+        Fix a bug in ZFS that can reset permissions on system crashes.
-+
-+
+20091228:
-+
+        amdtemp(4) was added.  It allows one to monitor to the temperature
-+
+        of an AMD CPU such as a Phenom.
-+
-+
+20091205:
-+
+        OpenSSL security fix
-+
-+
+        The SSL version 3 and TLS protocols support session renegotiation without
-+
+        cryptographically tying the new session parameters to the old parameters.
-+
-+
+20091128:
-+
+        OpenBSD sensors framework imported including sensorsd(8)
-+
-+
+20091126:
-+
+        OpenNTPD 4.4 import
-+
-+
+        Update OpenSSH to 5.3p1
-+
-+
+        mksh R39
-+
-+
+20091124:
-+
+        cpdup updated from DragonFly to 1.15
-+
-+
+        tzdata2009s updated with latest timezone data for November 2009.
-+
-+
+20091010:
-+
+        amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
-+
+        to test current.
-+
-+
+        Revert unicode filename fixes from ntfs code.  This was causing chaos
-+
+        on amd64 systems.
-+
-+
+20091006:
-+
+        Update timezone data with tzdata2009n with the Pakistan and
-+
+        Argentina changes.
-+
-+
+        Sync several userland utilities with versions from FreeBSD 7.0 in
-+
+        sbin and usr.sbin.
-+
-+
+20090919:
-+
+        Update timezone data with tzdate2009m from September 2009.
-+
-+
+20090729:
-+
+        Patch for Bind 9 security vulnerability. a dynmaic update packet
-+
+        can trigger an assertion and cause named to exit
-+
-+
+20090606:
-+
+        Remove PCC from the base system.  This compiler will not work
-+
+        as a system compiler for us as we've got some userland investment
-+
+        in C++ code and may have Objective-C in the future.  We're stuck
-+
+        with a solution that supports these three languages at a minimum.
-+
-+
+        I had wanted to keep it as an optional compiler because it is
-+
+        fast, however too many users want to try to use it for the base
-+
+        system which makes no sense.
-+
-+
+        A hack was added for Cypress based usb hard drive enclosures to
-+
+        the kernel.  This should cut down on commands it claims to support
-+
+        but does not (at the cam layer).  Found while testing ZFS on
-+
+        an external device.
-+
-+
+20090520:
-+
+        The powerd daemon no longer starts automatically to improve
-+
+        compatibility with many systems.  However, there is a new
-+
+        installer option in the startup section to enable it. This
-+
+        makes it easier to enable for users that have working systems. I                thought it was only a problem on older hardware, but it freaks
-+
+        out my new Phenom too.
-+
-+
+20090502:
-+
+        OpenSSH 5.2p1 import
-+
-+
+        ale(4) connected to the build. (kernel module only)
-+
-+
+20090501:
-+
+        Imported makefs utility from NetBSD/FreeBSD
-+
+20090422:
-<
+        MindightBSD 0.2.1-RELEASE-p8
->
+        OpenSSL security update
+        The function ASN1_STRING_print_ex does not properly validate the lengths
-<
+        of BMPString or UniversalString objects before attempting to print them.
->
+of BMPString or UniversalString objects before attempting to print them.
-<
+20090326:
-<
+        MidnightBSD 0.2.1-RELEASE-p7
->
+20090415:
->
+        Created a Symbol.map for libc/ohash symbols
-<
+        Fix several security problems with sudo.  It is now 1.6.9-p20
->
+        Updated several usr/bin usr/sbin utilities.
-<
+20090115:
-<
+        MidnightBSD 0.2.1-RELEASE-p6
->
+        Corrected a bug with Makefile.inc1 causing the bootstrap
->
+        tools to fail.
-<
+        Correct an issue with BIND that allows for DNSSEC spoofing
-<
+        attacks.
->
+20090405:
->
+        xorg 7.4 wants to configure its input devices via hald which does not
->
+        yet work with USB. If the keyboard/mouse does not work in xorg then
->
+        add
->
+                Option "AllowEmptyInput" "off"
->
+        to your ServerLayout section.  This will cause X to use the configured
->
+        kbd and mouse sections from your xorg.conf
-<
+20090110:
-<
+        MidnightBSD 0.2.1-RELEASE-p5
->
+20090403:
->
+        mksh was disconnected a few day ago do to bugs with
->
+        buildworld and mports.  Now, connect it back
->
+        for use as /bin/sh with a conditional called
->
+        MK_ASH.  By default, ash is the standard /bin/sh
->
+        but we may change this later.  This will allow further
->
+        testing by users and developers of mksh without
->
+        causing an unpleasant default experience.  In the
->
+        long run, we need to fix mksh compatibility.
-+
+20090328:
-+
+        Bring in mksh R37 from CVS. The dot.mkshrc files for root
-+
+        and skel were changed.  mksh(1) now replaces ash aka sh(1)
-+
+        as the default /bin/sh.  Please report bugs with
-+
+        ports, etc. The ash code will remain in the repo for awhile
-+
+        as I decide if we'll add something like MK_SHELL_ASH as
-+
+        an optional build parameter.
-+
-+
+        ahd was disconnected from the lint environment until
-+
+        the compiler bug is sorted (by updating gcc?)
-+
-+
+        Remove freebsd-tips from fortune files and change the
-+
+        default for login and profile.
-+
-+
+20090327:
-+
+        Update libarchive to 2.5.5, tar, and add bsdcpio.
-+
-+
+        Also previously, ctriv has been connecting Perl 5.10
-+
+        to the build (part of os).  This will have an impact
-+
+        on mports.
-+
-+
+20090325:
-+
+        Update Bind to 9.4.3-P1
-+
-+
+        Update mksh to R36b
-+
-+
+        Update tcpdump to 3.9.8, fix libpcap to work with current.
-+
-+
+        Update pnpinfo, sync with FreeBSD.
-+
-+
+20090115:
-+
+        Fix a problem with DNSSEC and BIND.
-+
-+
+20090110:
+        For applications using OpenSSL for SSL connections, an invalid SSL
+        certificate may be interpreted as valid.  This could for example be
+        used by an attacker to perform a man-in-the-middle attack.
+        Stop cross site request forgery attacks in lukemftpd
-<
+20081231:
-<
+        MidnightBSD 0.2.1-RELEASE-p4
->
+20090104:
->
+        Import GNU libreadline 5.2
-<
+        Correct a problem where function pointers for netgraph
-<
+        and bluetooth sockets are not initialized properly.
->
+20090101:
->
+        Update time zone data to 2008i.
-<
+20081124:
-<
+        MidnightBSD 0.2.1-RELEASE-p3
->
+20081231:
->
+        Correct a problem where bluetooth and netgraph sockets are not
->
+        properly initialized.
-<
+        Correct a problem in arc4random which causes the device
-<
+        not get get enough entropy for system services.  Geom
-<
+        classes initialized at startup will still have problems.
->
+        Happy 2009.
-<
+20081002:
-<
+        MidnightBSD 0.2.1-RELEASE-p2
->
+20081206:
->
+        Due to the massive change in the underlying system under way,
->
+        we're naming the next release 1.0.  The sys/sys/param.h was
->
+        changed accordingly.  ipfilter and ncurses were corrected
->
+        using __MidnightBSD__ tests in the code.
-<
+        IPv6 Neighbor Discovery Protocol routing vulnerability
->
+        The GENERIC kernel config was caught up on i386 today.  Consider
->
+        i386 still broken, but amd64 is running again.
-<
+        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2476
-<
+        http://www.kb.cert.org/vuls/id/472363
->
+        mdoc.local was updated with the new MidnightBSD version info.
-<
+        This fix causes IPv6 Neighbor Discovery Neighbor Solicitation
-<
+        messages to be ignored from non-neighbors.
->
+        batt(1) was rewritten in C.  It now supports several flags and
->
+        runs about 8 times faster on my laptop.  The default output
->
+        shows the number of minutes of battery life remaining and the
->
+        percentage.  You can use -u to display the number of batteries or
->
+        -c to get script friendly output.  Consult the man page for more.
-<
+        This can be re-enabled, if needed, by setting the newly added
-<
+        net.inet6.icmp6.nd6_onlink_ns_rfc4861 sysctl to 1.
->
+20081204:
->
+        Work has completed on importing ZFS, jemalloc, several
->
+        new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
->
+        support, improved locking for file desc., audit (openbsm),
->
+        openssl .98e, nfe, imporved intel high def audio, midi, updated
->
+        intel gigabit (em), support for several wifi cards (intel), ...
-<
+20080929:
-<
+        MidnightBSD 0.2.1-RELEASE-p1
->
+        Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
->
+        data from param.h instead of the FreeBSD version.  This means
->
+        testing is now possible in the ports tree for the version
->
+        and that any ports or code relying on the FreeBSD version from
->
+        sys/sys/param.h will need to be fixed.
-–
+        Fix a defect in ftpd.  The command buffer was split which allowed
-–
+        attackers to send arbritrary commands over the network.
-–
+20080905:
-<
+        Update nve(4) to support newer hardware.
->
+        update nve(4) to support new hardware.
-<
+20080903:
-<
+        Correct two defects in MidnightBSD.  AMD64/EMT64 systems had a
-<
+        privledge escalation issue.  CVE-2008-3890
->
+20080801:
->
+        Import OpenBSM 1.0
-<
+        In case of an incoming ICMPv6 'Packet Too Big Message', there is an
-<
+        insufficient check on the proposed new MTU for a path to the
-<
+        destination.
-<
+        CVE-2008-3530
->
+        Modify src/release to create 3 isos instead of 2 for packages.
-<
+20080830:
-<
+        MidnightBSD 0.2.1-RELEASE
->
+        etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
-<
+        Oops, fix some bugs with sysinstall's handling of packages found
-<
+        on the release ISOs.  Tweak etc/firstboot while where here.
->
+        Many ia64, alpha, powerpc items were removed.
-<
+20080829:
-<
+        MidnightBSD 0.2-RELEASE
->
+        The recent diffutils 2.8.7 import was fixed.
+20080703:
-<
+        Correct problem with pcc and DESTDIR that affected creating live cds
-<
+        and jails.
->
+        pcc was not installed properly when setting DESTDIR for live cds,
->
+        or posibly jails.
-–
+        sysinstall would incorrectly truncate DHCP info when configuring
-–
+        ipv4 networking.  This was the result of a bad patch several months
-–
+        ago.  Fix this error.  Found via testing a snapshot.
-–
+20080627:
+        Add firmware(9), WEP, CCMP, TKIP to GENERIC.
+        pcc connected to the build on i386. (alternative compiler)
-<
+20080613:
-<
+        Begin work for MidnightBSD 0.2-PRERELEASE
->
+        ath added to GENERIC.  (Atheros wireless NICs) on amd64/i386
+20080528:
+        Sendmail 8.14.3
+this document.
+$FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
-<
+$MidnightBSD: src/UPDATING,v 1.38.2.18 2009/05/21 23:11:43 laffer1 Exp $
->
+$MidnightBSD: src/UPDATING,v 1.132 2011/09/18 20:20:42 laffer1 Exp $

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing src/UPDATING (file contents): Revision 1.38.2.19 by laffer1, Wed Jun 10 15:49:25 2009 UTC vs. Revision 1.133 by laffer1, Thu Sep 29 00:04:55 2011 UTC

Diff Legend

Comparing src/UPDATING (file contents):
Revision 1.38.2.19 by laffer1, Wed Jun 10 15:49:25 2009 UTC vs.
Revision 1.133 by laffer1, Thu Sep 29 00:04:55 2011 UTC