branch moved

branch moved

branch moved

branch moved

branch moved

branch moved

branch was moved

move redhat branch

sqlite3 was moved

branch was removed

mDNSResponder dist

move one-true-awk

expat vendor

move gcc to dist dir

cpio

move bind 9.8 (latest) to dist dir

move libarchive

move mksh

move openntpd

move file to vendor

move openssh to vendor dist

Move sendmail to vendor branch

Move xz vendor branch 

Move perl vendor branch

Move RELENG_0_2 to stable/0.2

Move RELENG_0_4 to stable/0.4

Move 0.3-RELEASE to the release directory.

Move 0.2-RELEASE to the release directory.

Move 0.1-RELEASE to the release directory.

Remove useless branch.

Remove useless branch.

        0.4-RELEASE-p3

        nullfs(5)

        The nullfs(5) implementation of the VOP_LINK(9) VFS operation does not
        check whether the source and target of the link are both in the same
        nullfs instance.  It is therefore possible to create a hardlink from a
        location in one nullfs instance to a file in another, as long as the
        underlying (source) filesystem is the same.

        ifioctl

        As is commonly the case, the IPv6 and ATM network layer ioctl request
        handlers are written in such a way that an unrecognized request is
        passed on unmodified to the link layer, which will either handle it or
        return an error code.

        Network interface drivers, however, assume that the SIOCSIFADDR,
        SIOCSIFBRDADDR, SIOCSIFDSTADDR and SIOCSIFNETMASK requests have been
        handled at the network layer, and therefore do not perform input
        validation or verify the caller's credentials.  Typical link-layer
        actions for these requests may include marking the interface as "up"
        and resetting the underlying hardware.

Import FreeBSD 10-CURRENT svnlite build infrastructure

import sqlite 3.7.17 (trimmed)

0.4-RELEASE-p2

Fix two security vulnerabilities.

Fix an integer overflow in IP_MSFILTER (IP MULTICAST). This could be exploited to read memory by a user process.

When initializing the SCTP state cookie being sent in INIT-ACK chunks,
a buffer allocated from the kernel stack is not completely initialized.

Patches obtained from: FreeBSD

Import sendmail 8.14.7

bump to p1 to cover the recent security issues.

Long term plan is to stop using p1, p2, p3, ... and increment release version like NetBSD does, but we'll "announce" that before making the change.

BIND can crash on invalid rdata.

wrong parameter.

add release note

tag

fix branding missed in the last commit

Due to insufficient permission checks in the virtual memory system, a
tracing process (such as a debugger) may be able to modify portions of
the traced process's address space to which the traced process itself
does not have write access.

This error can be exploited to allow unauthorized modification of an
arbitrary file to which the attacker has read access, but not write
access.  Depending on the file and the nature of the modifications,
this can result in privilege escalation.

To exploit this vulnerability, an attacker must be able to run
arbitrary code with user privileges on the target system.

Obtained from: FreeBSD

Remove additional old files

bump midnightbsd version after prerelease bump

This commit was manufactured by cvs2svn to create branch 'RELENG_0_4_BP'.

Virgin import of mksh R44

Virgin import of mksh R42

Import tnftp (lukemftp) with FreeBSD modifications.

import openssh 5.8

Import ee 1.5.0 with FreeBSD modifications

Virgin import (trimmed) of eXpat 2.0.1

Import from FreeBSD 9-stable sources.

Import from FreeBSD 9-stable sources

MFC: Fix exit status of mport_xsystem so that failed commands are handled properly during install/uninstall

Import libprocstat from FreeBSD 9 sources.

Import blocks runtime make file.

Import FreeBSD 9 sources.

Import libulog from FreeBSD 9 sources.

Import FreeBSD 9 sources.

Import FreeBSD 9-stable sources.

Import FreeBSD 9-stable sources.

Import FreeBSD 9-stable sources.

Imported from FreeBSD 9-stable sources.

Imported from FreeBSD 9-stable sources.

Import of tcsh-6.18.01

This commit was manufactured by cvs2svn to create branch 'FSF'.

Virgin import of diffutils 2.9 (trimmed)

MidnightBSD 0.3-RELEASE-p9

Bind vulnerability related to resource records.  See CVE-2012-1667.

0.3-RELEASE-p7

add SGC and BUF_MEM_grow_clean(3) bug fixes.

Vendor import of libffi 3.0.10

Virgin import of Perl 5.14.2 (trimmed)

Vendor import of mDNSResponder

Vendor import of libarchive 2.8.5

0.3-release-p5

pam: don't allow escape from policy path.  Exploitable in KDE, etc.

fix security issue with chroot and ftpd

Virgin import of MKSH R39b

Vendor import of BIND 9.6 ESV R5

Virgin import of less v436

        Fix a problem with unix socket handling caused by the recent
        patch to unix socket path handling. This allows network
        apps to work under the linuxolator again.

0.3-RELEASE-p3.  Fix a security hole in compress and gzip

Import sqlite 3.7.7.1

Virgin import of MKSH R40

Virgin import (not trimmed) of perl version 5.14.0.

Import sendmail 8.14.5

Vendor import of xz 5.0.1 (trimmed)

Vendor import of BIND 9.6.3

Vendor import of OpenSSH 5.7p1.

Vendor import of OpenSSL 0.9.8q

bump to p1 for sqlite minor issue.

Vendor import sqlite  3.7.5 (very trimmed)

Virgin import of FILE  5.05

This commit was manufactured by cvs2svn to create branch
'RELENG_0_3_0_RELEASE'.

add apache src dist and remove compat which isn't valid

Disable the firewall and install xorg for all three cases.

While the user may have installed xorg from the installation media, some users did not during 0.2.  Let's be sure x is there.

I'd like to setup .xinitrc files for each user (or modify the global xinitrc file) but that seems like something the installer should handle directly in the future during user creation. Just document it needs to be done for now.

0.3-RELEASE

since wine isn't working at the moment remove from package split

Make some changes to firstboot in hopes of simplifying installation of several graphical environments.

tag

Set pkg_add to use 0.3-release folder on ftp server

libperl.so is not old.

Fix a typo.  This was already corrected on current.

get rid of extra /

Happy new year.

add working directory for bind 9

Add documentation for mports bsd.mport.mk

MFC:
  When reopening a stream backed by an open file descriptor, do not close
  the existing file descriptor.  Instead, let dup2() atomically close the
  old file descriptor when assigning the newly opened file to the same
  descriptor.  This closes a race in a multithreaded application where a
  concurrent open() could allocate the existing file descriptor in between
  the calls to close() and dup2().

A double free exists in the SSL client ECDH handling code, when
processing specially crafted public keys with invalid prime
numbers. [CVE-2010-2939]

Drat pseudofs.

MFC: Deal with crazy plists that define @mode or @group without arguments.  Just ignore the line.

Fix a warning about strlen

Virgin import (trimmed) of bzip2 version 1.0.6.

Security update for bzip2 integer overflow.

Security update for bzip2 integer overflow

Remove isdn startup.. we killed that a few months ago.

Cleanup networks to align with today's reality.  Add mentions of networks(5) and hostname(7).

Remove xz for now

This commit was manufactured by cvs2svn to create branch 'RELENG_0_3_BP'.

Vendor import of mDNSResponder

Vendor import of xz utils and lzma library.

Fix for opie security vulnerability

Remove "bootstrapping" check.  We want to continue builds in tinderbox and this was a freebsd version not the new midnightbsd versions.

import sqlite 3.6.23 (very trimmed)

Vendor import of libffi 3.0.9

Vendor import of BIND 9.6.1-P2 (for real)

Import sendmail 8.14.4

Import OpenSSH 5.3p1

6bone decommisioned on 6/6/06.

0.2.1-p11

Add text for security advisory

The SIOCSIFINFO_IN6 ioctl is missing a necessary permissions check.
Don't let everyone on the planet (with local access) change the properties on the ipv6 interfaces.

Vendor import of libffi 3.0.8

Import of binutils

Import of gdb

Import of gcc 4.2.0 objective c

Import of gcc 4.2.0 libstdc++

http://www.openssh.com/txt/cbc.adv fix

Virgin import of MKSH R38 from cvs

Clear the memory so we don't write contents to .db files all over the place.

GCC 4.2.1 20070718

MidnightBSD 0.2.1-RELEASE-p7

Update for sudo security issue.

We should deal with the security bugs in sudo on this branch too.

Imported from FreeBSD 7.0 sources

This commit was manufactured by cvs2svn to create branch 'PERL'.

Trimmed import of perl 5.10.0.

Correct lukemftpd security issue

openssl security fix

Virgin import of GNU Readline 5.2 (trimmed)

 Correct a problem where function pointers for netgraph
 	         and bluetooth sockets are not initialized properly

Imported from FreeBSD 7.0

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

Imported FreeBSD 7.0 sources

Imported from FreeBSD 7.0 sources

This commit was manufactured by cvs2svn to create branch 'FreeBSD'.

IPv6 Neighbor Discovery Protocol routing vulnerability

Bump patch level to signify ftp, icmp, .. patches.

We should start doing this until we're on the new mport tools.  At that point, the os version won't impact nearly as much and we can start using version number increments like 0.2.2, 0.2.3, etc.

Document the ftpd issue

Bump for ftpd security update.

Don't split large commands into multiple commands on a 512-byte
boundary but just fail on them. This prevents CSRF-like attacks,
when a web browser is used to access an ftp server.

Reported to OpenBSD by Maksymilian Arciemowicz <cxib@securityreason.com>

Also includes a command "500 Command too long" as part of a revised patch by Luke Mewburn.

http://web.nvd.nist.gov/view/vuln/detail;jsessionid=df97c3e18c5c787b6c316f886ad5?execution=e1s1

CVE-2008-4247

Update nve(5) to support newer hardware.

Import OpenBSM

0.2.1-release

Bump MidnightBSD version to coincide with etc/firstboot and usr.sbin/sysinstall fixes post 0.2-RELEASE

Build depends can be larger that our buffer for some of the larger situations.  Allow us to ignore things we don't need to know about.

Back out some previous changes that caused hell with 0.2-RELEASE

release time

Make final adjustements for release, fix mports/Distfiles

Update package-split.  This gives us ~500MB on disc2 and ~360MB on disc3 of packages.

Bump the os version so we can easily know it's the release

remove unused architectures

Revert changes in this file to test against the recent failure with sysinstall package installation.

Adjust build name.

Work in progress.  Modify the package-split to use 3 cds.

Add kde-lite (if svn is fixed, full kde can be used), wine, portupgrade, bash3, ...

Remove bash2

Remove hard coding the source address.  This is bad.

Make 0.2 fetch packages from the 0.2-release directory.

Mention pcc and sysinstall fixes.

Bug 128.

The truncated output of dhcp was caused by using strlcpy.  I didn't do a very good job of looking at the usages, and each of these fields is passed to the function as a char *, which explains the 3 character cutoff. The length is not passed with the char *'s.

Add msk.

MSI is off, I've disabled some features that we don't have available in MidnightBSD.

Bring in changes from CURRENT.

This fixes the GNU autotools problems with newer software.

Add phk's macros for bus_read_x and bus_write_x.  In combination with a few other things, this should make porting easier.

Add firmware, atheros wireless, WEP, WPA to GENERIC

Let users know we've modified GENERIC and added pcc as a second system compiler.

Connect pcc to the build on i386.  (we don't have an amd64 version in yet)

The path for the pcc binary was still pointed at /usr/local/, adjust it as necessary.

Add PCI ID for Intel ICH8M chip used in santa rosa based iMac (black and silver) 2.0Ghz.

Add glabel and cpufreq to generic on i386.

Set to prerelease

Make csh report HOSTTYPE OSTYPE as MidnightBSD

Begin RELENG_0_2

This commit was manufactured by cvs2svn to create branch 'RELENG_0_2'.

This commit was manufactured by cvs2svn to create branch 'ISC'.

Add a new macro, sx_xlocked(), that returns true if the current thread holds an exclusive lock on the specified sx lock.

Bump MidnightBSD version for the OpenSSH patch.

Correct OpenSSH bug reported by Debian project.

virgin import of OpenSSH 5.0p1

Virgin import of MKSH R33d

Import virgin OpenSSH 4.9p1

Modify tinderbox for MidnightBSD.

Fix sendfile issue where files with permissions for write only can be read.

Update copyright

Update to sqlite 3.5.4.

Import sendmail 8.14.2

More adjustments for 0.1.1 release build.

This commit was manufactured by cvs2svn to create branch
'RELENG_0_1_1_RELEASE'.

a few changes for 0.1.1

updated list of packages

Update for 0.1.1 release. Packages will go in that directory.

Forced commit to get mergemaster to generate the cf files.

clean up parenthesis

document openssl update.

Fix a security issue with openssl.

For applications using the SSL_get_shared_ciphers() function, the
buffer overflow could allow an attacker to crash or potentially
execute arbitrary code with the permissions of the user running the
application. (freebsd advisory text).

forgot to mention libpthread fix.

Obtained from FreeBSD:
Add -Btime, -Bnewer, -Bmin, -newerB[Bacmt], -newer[acmt]B options to
work with the st_birthtime field of struct stat.

'B' has been chosen to match the format specifier from stat(1).

$MidnightBSD$

MFC:
bzip 1.0.4 (part 2 of 2)

MFC: stderr fix.

pkg_add and friends were fixed for mports.  add that to updating

Note the fix for bsd.port.mk.

Fix the tag so it checks out RELENG_0_1 instead of CURRENT.  Someone might be infor a nasty surprise without this.

Adjust for packages we'll end up including with the release

0.1-Release

Fix interaction with Windows 2000/XP servers.  Directories with exactly 50 entries (newly created) can cause a weird error.  This is noticable using rsync.

Source GNUstep shell scripts if they exist.

Correct buffer overflow in tcpdump

Import GNU cpio 2.8 (trimmed)

Apply FreeBSD-SA-07:04.file as it effects us as well.

Here is an excert from that advisory:

When writing data into a buffer in the file_printf function, the length
of the unused portion of the buffer is not correctly tracked, resulting
in a buffer overflow when processing certain files.

Correct memory leak.

MFC ipv6 type 0 security patch.

Import GNU cpio 2.7 (trimmed)

Virgin import(trimmed) of Bzip2 Version 1.0.4

Import of tcsh-6.15.00

Import cvs-1.11.22.  The previous import included several security vulnerabilities and failed sanity-check.  

Import cvs-1.11.18

libarchive 1.3.1

Vendor import of BIND 9.3.4

Importing OpenSSH 4.4p1

fix lost file from server crash

fix groff

Import OpenNTPD 3.9p1

Import sendmail 8.13.8

Imported from FreeBSD 6.1 beta sources

Standard project directories initialized by cvs2svn.