ViewVC Help
View File | Revision Log | Show Annotations | Revision Graph | Download File | Root Listing
root/midnightbsd-cvs/src/UPDATING
(Generate patch)

Comparing src/UPDATING (file contents):
Revision 1.38.2.19 by laffer1, Wed Jun 10 15:49:25 2009 UTC vs.
Revision 1.155 by laffer1, Wed Dec 28 00:46:31 2011 UTC

# Line 1 | Line 1
1   Updating Information for MidnightBSD users
2  
3 < Items affecting the mports and packages system can be found in
4 < /usr/mports/UPDATING.
3 > 20111227:
4 >        import raid5 module for GEOM, graid5(8)
5  
6 < 20090610:
7 <        MidnightBSD 0.2.1-RELEASE-p10
8 <        
9 <        This should be applied to all systems running 0.2.1. Users on
10 <        p9 simply should update their kernels. No world update is required.
6 >        This is experimental and known to use a lot of kernel
7 >        memory.
8  
9 <        ipv6:
10 <        The SIOCSIFINFO_IN6 ioctl is missing a necessary permissions check.
14 <        Don't let everyone on the planet (with local access) change the
15 <        properties on the ipv6 interfaces.
9 > 20111223:
10 >        telnetd: fix a root exploit from a fixed buffer that was not checked
11  
12 <        anonymous pipes:
18 <        Stop unprivileged processes from reading pages of memory belonging
19 <        to other processes with anonymous pipes.
12 >        pam: don't allow escape from policy path.  Exploitable in KDE, etc.
13  
14 < 20090521:
22 <        MidnightBSD 0.2.1-RELEASE-p9
14 >        Fix pam_ssh module:
15  
16 <        This fix is only in configuration files for ssh and sshd.  Users on
17 <        p8 should simply add
16 >        If the pam_ssh module is enabled, attackers may be able to gain access
17 >        to user accounts which have unencrypted SSH private keys.
18  
19 <        Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc
19 >        This has to due with the way that openssl works.  It ignores unencrpted data.
20  
21 <        to their configuration files for sshd_config and ssh_config in etc/ssh
21 >        Fix security issue with chroot and ftpd.
22  
23 +        nsdispatch(3) doesn't know it's working in a chroot and some
24 +        operations can cause files to get reloaded causing a security
25 +        hole in things like ftpd.
26 +
27 + 20111217:
28 +        libdialog/dialog upgraded to an lgpl version. As it's not
29 +        backwardly compatable, include the old libdialog as libodialog
30 +
31 + 20111212:
32 +        mksh r40d imported
33 +
34 + 20111210:
35 +        re(4) and rl(4) updated to support new chips.
36 +
37 +        GEOM synced with FreeBSD 7-stable.
38 +
39 +        MidnightBSD GPT partition types created in sys/gpt.h and
40 +        setup in boot loader and GEOM.
41 +
42 +        amdsbwd(4) (amd watchdog for south bridge) updated to support
43 +        8xx series chipset.
44 +
45 + 20111207:
46 +        import bsd grep from FreeBSD/OpenBSD.
47 +
48 +        MK_BSD_GREP controls which grep is installed
49 +        as grep with the other as bsdgrep or gnugrep.
50 +
51 + 20111122:
52 +        mksh vR40c imported.
53 +
54 + 20111117:
55 +        BIND 9.6 ESV R5 P1
56 +
57 + 20111107:
58 +        tzdata 2011n
59 +
60 + 20111026:
61 +        mDNSResponder v320
62 +
63 +        BIND 9.6 ESV R5
64 +
65 + 20111022:
66 +        cflow 0.0.6 imported
67 +
68 + 20111020:
69 +        less v436 imported
70 +
71 +        amdsbwd(4) AMD southbridge watchdog
72 +
73 + 20111019:
74 +        awk 20110810 imported
75 +
76 +        et(4) Agere Gigabit Ethernet/Fast Ethernet driver added, but
77 +        not included in GENERIC kernel.  The kernel module needs
78 +        testing before we can include it in GENERIC.
79 +
80 +        intr_bind code ported to allow an IRQ to be bound to one
81 +        specific CPU core.
82 +
83 + 20111017:
84 +        Time Zone Data v. 2011l (Released 10 October 2011)
85 +
86 +        Updated list of countries (iso3166) to work with new timezone data.
87 +
88 + 20111015:
89 +        Introduce CPU Affinity in MidnightBSD. cpuset(1) can be used
90 +        to control which core or group of cores can be used for a given
91 +        process. Several new system calls were added to support this
92 +        functionality in the running kernel and for 32bit binary
93 +        compatibility on amd64.
94 +
95 +        The scheduler default has been changed to ULE in i386 and
96 +        amd64.  Changes were made to both schedulers (4BSD AND ULE)
97 +        for this feature.
98 +
99 +        This work is based on Jeff Roberson's FreeBSD 7.1 patches.
100 +
101 + 20111004:
102 +        Fix a problem with unix socket handling caused by the recent
103 +        patch to unix socket path handling. This allows network
104 +        apps to work under the linuxolator again.
105 +
106 + 20111001:
107 +        Import libfetch & fetch(1) from FreeBSD 9. Passive FTP is
108 +        now default and an environment variable must be set to use
109 +        active.
110 +
111 + 20110930:
112 +        Introduce quirks handling for several umass devices including
113 +        USB cameras.  Add workaround for Cyberpower UPS devices.
114 +
115 +        Bring in further bug fixes from FreeBSD and NetBSD for alc(4).
116 +        Stale ip/tcp header pointers are no longer used, lockups fixed
117 +        when network cable is unplugged on bootup, enable TX checksum
118 +        offloading.
119 +
120 +        Add a new man page for gcache(8), a useful geom class when
121 +        working with large raid3 sets.
122 +
123 +        Restore previous workaround for Cypress pata storage controller.
124 +
125 + 20110929:
126 +        Sync ath(4) with FreeBSD 7.3.
127 +
128 +        The following modules are no longer available, and should be
129 +        removed from loader.conf:
130 +        ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
131 +
132 +        alc(4) would hibernate when a cable was unplugged and often
133 +        required bring the interface down and up to "wake up" so that
134 +        a connection could be established.  Disable hibernation.
135 +
136 + 20110928:
137 +        Fix security issues with gzip and compress related to .Z
138 +        files that are corrupted.
139 +
140 +        Fix path validation with unix domain sockets.
141 +
142 + 20110917:
143 +        Remove dependance on mports perl for generating releases as
144 +        it's in the base system.
145 +
146 + 20110914:
147 +        Import xz 5.0.3 with liblzma 5.0.3
148 +
149 + 20110813:
150 +        synced the sparc64 GENERIC kernel configuration with amd64.
151 +
152 + 20110806:
153 +        sqlite 3.7.7.1 imported
154 +
155 +        msearch(1), libmsearch and msearch.import added.  msearch(1) provides
156 +        a full text search command line tool.  libmsearch can also be used
157 +        to build a graphical based search in the future. You can enable
158 +        index building for msearch in periodic.conf or manually run the
159 +        /usr/libexec/msearch.index tool.  Full text indexes take considerable
160 +        space in /var.  I'm using approximately 500MB currently.
161 +
162 +        Fix a long standing bug with the periodic script to check package
163 +        versions.  This will be obsolete with mport though.
164 +
165 + 20110710:
166 +        kdb_enter_why added to MidnightBSD to allow the kernel debugger to
167 +        know why it's in use and thus script can be run.
168 +
169 +        Yet another problem with the perl manifest was fixed
170 +
171 + 20110709:
172 +        cpufreq(1) is a new utility to monitor CPU frequency which may change
173 +        with use of powerd(8) and cpufreq(4).
174 +
175 + 20110612:
176 +        Update mksh to R40
177 +
178 +        Catch up ObsoleteFiles.inc to remove Perl 5.10.x.  Good to run when
179 +        updating current (cd /usr/src && make check-old)
180 +
181 + 20110528:
182 +        Fix CVE-2011-1910 in BIND 9.6.x.  This affects caching resolvers.
183 +
184 + 20110526:
185 +        newfs:
186 +        Raised the default blocksize for UFS/FFS filesystems from
187 +        16K to 32K and the default fragment size from 2K to 4K.
188 +
189 +        This should slightly imporve performance on "advanced format"
190 +        hard drives such as the WD EARS drives. Drives of this type
191 +        have emulation modes that slow down with lower sizes.  Of course
192 +        the drive must still be aligned properly when using fdisk.
193 +
194 + 20110521:
195 +        mport tool now has a deleteall command.  This can be used to remove
196 +        all packages from a system.
197 +
198 +        A few bugs with the perl 5.14 import have been fixed.
199 +
200 + 20110518:
201 +        Perl 5.14.0
202 +
203 + 20110517:
204 +        Sendmail 8.14.5
205 +
206 + 20110314:
207 +        DRM/DRI code updated to support newer video cards. (FreeBSD 7.1)
208 +
209 +        cdevpriv wrappers added
210 +
211 +        nss_mdns hack introduced to work around linking problem.
212 +
213 +        dnsextd fixed after update to mDNSResponder code.
214 +
215 + 20110308:
216 +        Introduce liblzma & xz 5.0.1 to the base system
217 +
218 +        Patch for OpenSSL security issue CVE-2011-0014.
219 +
220 +        "OSREVISION 4004"
221 +
222 +        nsswitch module for multicast dns (nss_mdns) added.
223 +
224 +        tzdata2011c
225 +
226 + 20110220:
227 +        cam(4) syncronized with FreeBSD 7.3.
228 +
229 + 20110219:
230 +        amdtemp(4) updated to support sensors framework.
231 +
232 + 20110217:
233 +        Perl 5.10.1 imported
234 +
235 + 20110216:
236 +        Introduce igb(4) and split Intel Gigabit Ethernet adapters between
237 +        igb(4) and em(4).  Newer devices use igb(4).  The code has moved
238 +        to sys/dev/e1000 for both devices in the kernel. igb(4) has
239 +        been placed in GENERIC on i386 and amd64.
240 +
241 +        Update bfe(4) to support newer devices and WOL.
242 +
243 + 20110215:
244 +        age(4) added.
245 +
246 + 20110208:
247 +        BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
248 +
249 + 20110206:
250 +        eeemon(4) added to monitor Asus Eee PC.
251 +
252 + 20110205:
253 +        OpenSSH 5.7p1
254 +
255 +        GNU sort 6.9 (coreutils)
256 +
257 + 20110203:
258 +        one true awk 20100523 imported
259 +
260 +        sqlite 3.7.5
261 +
262 +        OpenSSL 0.9.8q
263 +
264 + 20110202:
265 +        tcsh 6.17.00
266 +
267 +        file 5.05
268 +
269 + 20110122:
270 +        Import it(4) and lm(4), with support for Super I/O hardware monitors. This
271 +        uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
272 +
273 + 20110120:
274 +        BIND 9.6.2-P3
275 +
276 +        sudo 1.7.4-p6
277 +
278 + 20110115:
279 +        Add experimental jme(4) for Jmicron ethernet devices.
280 +
281 + 20101130:
282 +        A double free exists in the SSL client ECDH handling code, when
283 +        processing specially crafted public keys with invalid prime
284 +        numbers. [CVE-2010-2939]
285 +
286 + 20101120:
287 +        Several portions of the kernel and userland code related to UFS file
288 +        systems (and UFS2) cannot properly handle inode counts above 2^31 due
289 +        to use of int types.  Based on a patch from FreeBSD, I've modified
290 +        our UFS2 implementation to handle unsigned values for inode counts
291 +        which should allow for file systems greater than 16TB.
292 +
293 +        newfs and growfs was also modified.
294 +
295 + 20101110:
296 +        Fix a security issue with pseudofs which could result in running code in kernel
297 +        context or a kernel panic depending on system configuration.  This affects file
298 +        systems such as procfs for instance.
299 +
300 + 20101021:
301 +        sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
302 +        This is similar to functions present in many linux distros. The utility was
303 +        written by Devin Teske for FreeBSD.
304 +
305 + 20100920:
306 +        bzip2 security patch for integer overflow.
307 +
308 + 20100905:
309 +        MidnightBSD RELENG_0_3 branch created.  Aggressive development continues here
310 +        for 0.4.
311 +
312 + 20100902:
313 +        Fix a security issue with libutil that allows users to bypass cpu limits in
314 +        login.conf in some cases.  This combined with OpenSSH for example can allow
315 +        the user to get more resources than they're allowed.
316 +
317 + 20100822:
318 +        Import Apple's mDNSResponder (mdnsd).
319 +
320 + 20100814:
321 +        libdispatch added to MidnightBSD.  This provides functionality found in
322 +        Mac OS X's GCD.  We do not have blocks support yet.  As this code is
323 +        licensed under Apache 2, we create a new MK_APACHE option so that
324 +        it's not required for all users to run code under a license they
325 +        may not like.
326 +
327 + 20100713:
328 +        mbuf readonly fix related to sendfile(2) data corruption.
329 +
330 + 20100704:
331 +        brainfuck(1) imported from MirBSD.
332 +
333 + 20100505:
334 +        zlib 1.2.5
335 +
336 + 20100430:
337 +        Sudo 1.7.2p6 imported
338 +
339 + 20100321:
340 +        Update zlib to 1.2.4
341 +
342 + 20100319:
343 +        Removed i586 from default i386 generic kernel.
344 +
345 + 20100317:
346 +        Update to tzdata2010e (time zones).  This includes changes in
347 +        Mexico.
348 +
349 +        Add support for several newer sound cards via hda including
350 +        ATI and Realtek chipsets.
351 +
352 + 20100313:
353 +        CPU detection has been changed.  VIA Padlock detection added.
354 +
355 + 20100312:
356 +        Fix a number of bugs and compiler warnings in libmport. Handle
357 +        plus signs in paths for mport.check-fake
358 +
359 + 20100311:
360 +        mksh R39c
361 +
362 + 20100309:
363 +        Sudo 1.7.2p5
364 +
365 +        sqlite3 3.6.23
366 +
367 +        mksh R39b
368 +
369 +        libffi (ffi) 3.0.9
370 +
371 + 20100206:
372 +        WITHOUT_LIB32 is no longer needed on AMD64.  GCC was fixed to
373 +        properly pass arguments to ld.
374 +
375 +        re(4) and rl(4) have been updated to support several new
376 +        realtek chipsets.  Performance has been improved on re(4).
377 +
378 + 20100204:
379 +        Fix a bug cropping up on AMD64 MidnightBSD with sftp
380 +        segfaulting.  
381 +
382 + 20100116:
383 +        Import ash changes from FreeBSD (bin/sh) 8-Stable.
384 +
385 +        BIND 9.6.1-P2
386 +
387 + 20100110:
388 +        Import Sendmail 8.14.4. Fix for SSL vulnerability.
389 +
390 +        posix_spawn(3) added to MidnightBSD libc.  Users may need to build and
391 +        install libc before doing a full buildworld when upating from 0.2 or
392 +        older current systems.
393 +
394 +        kqueue(2) was modified to support portions of libdispatch functionality.
395 +
396 + 20100106:
397 +        Bind security update.  Fix a bug with DNSSEC that causes negative
398 +        cache entries and thus a possible DNS cache poisoning attack.
399 +
400 +        Fix a bug in ZFS that can reset permissions on system crashes.
401 +
402 + 20091228:
403 +        amdtemp(4) was added.  It allows one to monitor to the temperature
404 +        of an AMD CPU such as a Phenom.
405 +
406 + 20091205:
407 +        OpenSSL security fix
408 +
409 +        The SSL version 3 and TLS protocols support session renegotiation without
410 +        cryptographically tying the new session parameters to the old parameters.
411 +
412 + 20091128:
413 +        OpenBSD sensors framework imported including sensorsd(8)
414 +
415 + 20091126:
416 +        OpenNTPD 4.4 import
417 +
418 +        Update OpenSSH to 5.3p1
419 +
420 +        mksh R39
421 +
422 + 20091124:
423 +        cpdup updated from DragonFly to 1.15
424 +
425 +        tzdata2009s updated with latest timezone data for November 2009.
426 +
427 + 20091010:
428 +        amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
429 +        to test current.
430 +
431 +        Revert unicode filename fixes from ntfs code.  This was causing chaos
432 +        on amd64 systems.
433 +
434 + 20091006:
435 +        Update timezone data with tzdata2009n with the Pakistan and
436 +        Argentina changes.
437 +
438 +        Sync several userland utilities with versions from FreeBSD 7.0 in
439 +        sbin and usr.sbin.
440 +
441 + 20090919:
442 +        Update timezone data with tzdate2009m from September 2009.
443 +
444 + 20090729:
445 +        Patch for Bind 9 security vulnerability. a dynmaic update packet
446 +        can trigger an assertion and cause named to exit
447 +
448 + 20090606:
449 +        Remove PCC from the base system.  This compiler will not work
450 +        as a system compiler for us as we've got some userland investment
451 +        in C++ code and may have Objective-C in the future.  We're stuck
452 +        with a solution that supports these three languages at a minimum.
453 +
454 +        I had wanted to keep it as an optional compiler because it is
455 +        fast, however too many users want to try to use it for the base
456 +        system which makes no sense.
457 +
458 +        A hack was added for Cypress based usb hard drive enclosures to
459 +        the kernel.  This should cut down on commands it claims to support
460 +        but does not (at the cam layer).  Found while testing ZFS on
461 +        an external device.
462 +
463 + 20090520:
464 +        The powerd daemon no longer starts automatically to improve
465 +        compatibility with many systems.  However, there is a new
466 +        installer option in the startup section to enable it. This
467 +        makes it easier to enable for users that have working systems. I                thought it was only a problem on older hardware, but it freaks
468 +        out my new Phenom too.
469 +
470 + 20090502:
471 +        OpenSSH 5.2p1 import
472 +
473 +        ale(4) connected to the build. (kernel module only)
474 +
475 + 20090501:
476 +        Imported makefs utility from NetBSD/FreeBSD
477 +
478   20090422:
479 <        MindightBSD 0.2.1-RELEASE-p8
479 >        OpenSSL security update
480  
481          The function ASN1_STRING_print_ex does not properly validate the lengths
482 <        of BMPString or UniversalString objects before attempting to print them.
482 > of BMPString or UniversalString objects before attempting to print them.
483  
484 < 20090326:
485 <        MidnightBSD 0.2.1-RELEASE-p7
484 > 20090415:
485 >        Created a Symbol.map for libc/ohash symbols
486  
487 <        Fix several security problems with sudo.  It is now 1.6.9-p20
487 >        Updated several usr/bin usr/sbin utilities.
488  
489 < 20090115:
490 <        MidnightBSD 0.2.1-RELEASE-p6
489 >        Corrected a bug with Makefile.inc1 causing the bootstrap
490 >        tools to fail.
491  
492 <        Correct an issue with BIND that allows for DNSSEC spoofing
493 <        attacks.
492 > 20090405:
493 >        xorg 7.4 wants to configure its input devices via hald which does not
494 >        yet work with USB. If the keyboard/mouse does not work in xorg then
495 >        add
496 >                Option "AllowEmptyInput" "off"
497 >        to your ServerLayout section.  This will cause X to use the configured
498 >        kbd and mouse sections from your xorg.conf
499  
500 < 20090110:
501 <        MidnightBSD 0.2.1-RELEASE-p5
500 > 20090403:
501 >        mksh was disconnected a few day ago do to bugs with
502 >        buildworld and mports.  Now, connect it back
503 >        for use as /bin/sh with a conditional called
504 >        MK_ASH.  By default, ash is the standard /bin/sh
505 >        but we may change this later.  This will allow further
506 >        testing by users and developers of mksh without
507 >        causing an unpleasant default experience.  In the
508 >        long run, we need to fix mksh compatibility.
509  
510 + 20090328:
511 +        Bring in mksh R37 from CVS. The dot.mkshrc files for root
512 +        and skel were changed.  mksh(1) now replaces ash aka sh(1)
513 +        as the default /bin/sh.  Please report bugs with
514 +        ports, etc. The ash code will remain in the repo for awhile
515 +        as I decide if we'll add something like MK_SHELL_ASH as
516 +        an optional build parameter.  
517 +
518 +        ahd was disconnected from the lint environment until
519 +        the compiler bug is sorted (by updating gcc?)
520 +
521 +        Remove freebsd-tips from fortune files and change the
522 +        default for login and profile.
523 +
524 + 20090327:
525 +        Update libarchive to 2.5.5, tar, and add bsdcpio.
526 +
527 +        Also previously, ctriv has been connecting Perl 5.10
528 +        to the build (part of os).  This will have an impact
529 +        on mports.
530 +
531 + 20090325:
532 +        Update Bind to 9.4.3-P1
533 +
534 +        Update mksh to R36b
535 +
536 +        Update tcpdump to 3.9.8, fix libpcap to work with current.
537 +
538 +        Update pnpinfo, sync with FreeBSD.
539 +
540 + 20090115:
541 +        Fix a problem with DNSSEC and BIND.
542 +
543 + 20090110:
544          For applications using OpenSSL for SSL connections, an invalid SSL
545          certificate may be interpreted as valid.  This could for example be
546          used by an attacker to perform a man-in-the-middle attack.
# Line 57 | Line 550 | Items affecting the mports and packages system can be
550  
551          Stop cross site request forgery attacks in lukemftpd
552  
553 < 20081231:
554 <        MidnightBSD 0.2.1-RELEASE-p4
553 > 20090104:
554 >        Import GNU libreadline 5.2
555  
556 <        Correct a problem where function pointers for netgraph
557 <        and bluetooth sockets are not initialized properly.
556 > 20090101:
557 >        Update time zone data to 2008i.
558  
559 < 20081124:
560 <        MidnightBSD 0.2.1-RELEASE-p3
559 > 20081231:
560 >        Correct a problem where bluetooth and netgraph sockets are not
561 >        properly initialized.
562  
563 <        Correct a problem in arc4random which causes the device
70 <        not get get enough entropy for system services.  Geom
71 <        classes initialized at startup will still have problems.
563 >        Happy 2009.
564  
565 < 20081002:
566 <        MidnightBSD 0.2.1-RELEASE-p2
565 > 20081206:
566 >        Due to the massive change in the underlying system under way,
567 >        we're naming the next release 1.0.  The sys/sys/param.h was
568 >        changed accordingly.  ipfilter and ncurses were corrected
569 >        using __MidnightBSD__ tests in the code.  
570  
571 <        IPv6 Neighbor Discovery Protocol routing vulnerability
571 >        The GENERIC kernel config was caught up on i386 today.  Consider
572 >        i386 still broken, but amd64 is running again.
573  
574 <        http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2476
79 <        http://www.kb.cert.org/vuls/id/472363
574 >        mdoc.local was updated with the new MidnightBSD version info.
575  
576 <        This fix causes IPv6 Neighbor Discovery Neighbor Solicitation
577 <        messages to be ignored from non-neighbors.
576 >        batt(1) was rewritten in C.  It now supports several flags and
577 >        runs about 8 times faster on my laptop.  The default output
578 >        shows the number of minutes of battery life remaining and the
579 >        percentage.  You can use -u to display the number of batteries or
580 >        -c to get script friendly output.  Consult the man page for more.
581  
582 <        This can be re-enabled, if needed, by setting the newly added
583 <        net.inet6.icmp6.nd6_onlink_ns_rfc4861 sysctl to 1.
582 > 20081204:
583 >        Work has completed on importing ZFS, jemalloc, several
584 >        new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
585 >        support, improved locking for file desc., audit (openbsm),
586 >        openssl .98e, nfe, imporved intel high def audio, midi, updated
587 >        intel gigabit (em), support for several wifi cards (intel), ...
588  
589 < 20080929:
590 <        MidnightBSD 0.2.1-RELEASE-p1
589 >        Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
590 >        data from param.h instead of the FreeBSD version.  This means
591 >        testing is now possible in the ports tree for the version
592 >        and that any ports or code relying on the FreeBSD version from
593 >        sys/sys/param.h will need to be fixed.
594  
90        Fix a defect in ftpd.  The command buffer was split which allowed
91        attackers to send arbritrary commands over the network.
92
595   20080905:
596 <        Update nve(4) to support newer hardware.
596 >        update nve(4) to support new hardware.
597  
598 < 20080903:
599 <        Correct two defects in MidnightBSD.  AMD64/EMT64 systems had a
98 <        privledge escalation issue.  CVE-2008-3890
598 > 20080801:
599 >        Import OpenBSM 1.0
600  
601 <        In case of an incoming ICMPv6 'Packet Too Big Message', there is an
101 <        insufficient check on the proposed new MTU for a path to the
102 <        destination.
103 <        CVE-2008-3530
601 >        Modify src/release to create 3 isos instead of 2 for packages.
602  
603 < 20080830:
106 <        MidnightBSD 0.2.1-RELEASE
603 >        etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
604  
605 <        Oops, fix some bugs with sysinstall's handling of packages found
109 <        on the release ISOs.  Tweak etc/firstboot while where here.
605 >        Many ia64, alpha, powerpc items were removed.
606  
607 < 20080829:
112 <        MidnightBSD 0.2-RELEASE
607 >        The recent diffutils 2.8.7 import was fixed.
608  
609   20080703:
610 <        Correct problem with pcc and DESTDIR that affected creating live cds
611 <        and jails.
610 >        pcc was not installed properly when setting DESTDIR for live cds,
611 >        or posibly jails.
612  
118        sysinstall would incorrectly truncate DHCP info when configuring
119        ipv4 networking.  This was the result of a bad patch several months
120        ago.  Fix this error.  Found via testing a snapshot.
121
613   20080627:
614          Add firmware(9), WEP, CCMP, TKIP to GENERIC.
615  
# Line 128 | Line 619 | Items affecting the mports and packages system can be
619  
620          pcc connected to the build on i386. (alternative compiler)
621  
622 < 20080613:
132 <        Begin work for MidnightBSD 0.2-PRERELEASE
622 >        ath added to GENERIC.  (Atheros wireless NICs) on amd64/i386
623  
624   20080528:
625          Sendmail 8.14.3
# Line 693 | Line 1183 | Contact Warner Losh if you have any questions about yo
1183   this document.
1184  
1185   $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
1186 < $MidnightBSD: src/UPDATING,v 1.38.2.18 2009/05/21 23:11:43 laffer1 Exp $
1186 > $MidnightBSD: src/UPDATING,v 1.154 2011/12/24 03:30:18 laffer1 Exp $

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines