0.4-RELEASE-p9

Fix a security issue affecting NFS server where a trusted client can deadlock the server.

document dot.profile fix.

Move RELENG_0_4 to stable/0.4

        0.4-RELEASE-p3

        nullfs(5)

        The nullfs(5) implementation of the VOP_LINK(9) VFS operation does not
        check whether the source and target of the link are both in the same
        nullfs instance.  It is therefore possible to create a hardlink from a
        location in one nullfs instance to a file in another, as long as the
        underlying (source) filesystem is the same.

        ifioctl

        As is commonly the case, the IPv6 and ATM network layer ioctl request
        handlers are written in such a way that an unrecognized request is
        passed on unmodified to the link layer, which will either handle it or
        return an error code.

        Network interface drivers, however, assume that the SIOCSIFADDR,
        SIOCSIFBRDADDR, SIOCSIFDSTADDR and SIOCSIFNETMASK requests have been
        handled at the network layer, and therefore do not perform input
        validation or verify the caller's credentials.  Typical link-layer
        actions for these requests may include marking the interface as "up"
        and resetting the underlying hardware.

0.4-RELEASE-p2

Fix two security vulnerabilities.

Fix an integer overflow in IP_MSFILTER (IP MULTICAST). This could be exploited to read memory by a user process.

When initializing the SCTP state cookie being sent in INIT-ACK chunks,
a buffer allocated from the kernel stack is not completely initialized.

Patches obtained from: FreeBSD

add release note

This commit was manufactured by cvs2svn to create branch 'RELENG_0_4'.

mksh update to r44

mksh bump

OpenSSH updated

gnusort -> bsdsort

BIND / cve-2012-1667

Perl 5.14.2

document cpucontrol(8)

document new graid5(8)

pam: don't allow escape from policy path.  Exploitable in KDE, etc.

fix security hole in ftpd/libc/

mksh r40d

Introduce BSD licensed version of grep.

MK_BSD_GREP = yes turns it on as grep, otherwise gnu grep is installed as grep and bsdgrep is bsd licensed grep. In the inverse, gnu grep becomes gnugrep.

For "compatibility", bsdgrep can use the gnu regex library which is also faster, but then it's not purely bsd.

Update bind for ANOTHER security hole.

Document mDNSResponder and BIND upgrades

Document less v436, intr_bind, awk update, ...

timezone++

Fix linuxolator unix socket handling after recent security patch.

Document alc(4)work, usb umass/usbdevs

document security updates

xz 5.0.3

Document new msearch(1) utility.

add cpufreq(1)

Document and bump midnightbsd version for bind 9 fix

mention perl and mport changes.

Document recent changes.

document nss_mdns addition

xz/lzma

Document perl update.

age(4)

eeemon(4) mention

Document openssl update.

document  awk upgrade

tcsh 6.17

update sudo while we're at it.

add  jme(4) for JMicron ethernet  devices. This is experimental and  any bugs should be reported.

 Several portions of the kernel and userland code related to UFS file
        systems (and UFS2) cannot properly handle inode counts above 2^31 due
        to use of int types.  Based on a patch from FreeBSD, I've modified
        our UFS2 implementation to handle unsigned values for inode counts
        which should allow for file systems greater than 16TB.

        newfs and growfs was also modified.

Document new sysrc utility.

Move things along.. current is now 0.4-CURRENT.  Change the man pages, osreldate and other tunables in the system accordingly.  While we're here, update other bsd systems in our mdoc.local.

Document mdnsd

Denote mbuf fix

zlib++

Document zlib 1.2.4 update

timezones and ati updates

MKSH R39c.. missed it by a few hours.

Update system sudo

fix sftp on amd64.

Sendmail 8.14.4

zfs and bind security updates

Mention OpenSSL change.

OpenNTPD 4.4

Mention recent updates.

document timezone update yesterday and some other things we've been up to

mention the bind issue in updating

Mention the new installer option and change for powerd to be disabled by default.

makefs++

document some of the adventures i've had in the last two days.

add a comment about Xorg sucking with hald and mouse/kbd problems.

remove comment about UPDATING in mports since we dont' have one right now.

Mention libarchive update and ctriv's perl work.

DNSSEC bind update.

OpenSSL security patch

timezones are fun

Explain the status of batt(1), and ongoing work.

Update nve(4) to support newer hardware.

Mention pcc fix.

Document recent changes

Explain the pcc, elf, ssh-vulnkey + blacklists changes.

Boy we did a lot this month.

Import OpenSSH 4.9p1

We haven't been maintaining UPDATING since Jan 1.  Catch it up with changes since then that are relevant.

Update sendmail to 8.14.2

Add comment about the older mksh update.

Document mksh update and the changes to libpthread.

GNU tar be gone

Mention cpdup import

Explain that we branched and begin doing real work with src again.

cvs was updated to 1.12.13.

Back out propolice.  More information in UPDATING.

In short, propolice broke libpthread and libthr.

Small correction to install directions for proplice. Added requirement
to build libpthread and libthr first.

Document today's changes.. gzip, removal of send-pr, etc.

A summary of some of today's changes.

Updated to include instructions for installing sudo.

We've been busy today.

Catch this up a bit with recent changes.

Described various src/sys/dev updates, lukemftpd and other exiting things.

*** empty log message ***

This commit was generated by cvs2svn to compensate for changes in r5, which
included commits to RCS files with non-trunk default branches.

Imported from FreeBSD 6.0 sources