ViewVC Help

View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing

root/src/stable/0.7/UPDATING

Comparing:
branches/MidnightBSD/UPDATING (file contents), Revision 5 by laffer1, Sat Feb 25 02:38:42 2006 UTC vs.
trunk/UPDATING (file contents), Revision 7210 by laffer1, Thu Aug 6 00:10:00 2015 UTC

#	Line 1 | Line 1
1	<	Updating Information for FreeBSD STABLE users
1	>	Updating Information for MidnightBSD users.
2
3	<	This file is maintained and copyrighted by M. Warner Losh
4	<	<imp@village.org>.  See end of file for further details.  For commonly
5	<	done items, please see the COMMON ITEMS: section later in the file.
3	>	20160805:
4	>	routed - fix a potential security issue where traffic from outside
5	>	the network can disrupt routing.
6
7	<	Items affecting the ports and packages system can be found in
8	<	/usr/ports/UPDATING.  Please read that file before running
9	<	portupgrade.
7	>	bsd patch - fix a bug with ed(1) scripts allowing unsanitized input
8	>	to run.
9
10	<	20060211:
11	<	An IPv6 support of ipfw was enabled by default.  If you don't
13	<	want to filter an IPv6 by ipfw, please add following line into
14	<	your ipfw rule:
10	>	20160802:
11	>	jansson 2.7 library added. (libjansson is a JSON library in C)
12
13	<	pass ip6 from any to any
13	>	20160728:
14	>	Heimdal 1.5.2 (kerberos implementation)
15
16	<	20060210:
19	<	Now most modules get their build-time options from the kernel
20	<	configuration file.  A few modules still have fixed options
21	<	due to their non-conformant implementation, but they will be
22	<	corrected eventually.  You may need to review the options of
23	<	the modules in use, explicitly specify the non-default options
24	<	in the kernel configuration file, and rebuild the kernel and
25	<	modules afterwards.
16	>	OpenSSL 1.0.1o
17
18	<	20060122:
28	<	/etc/rc.d/ppp-user has been renamed to /etc/rc.d/ppp.
29	<	Its /etc/rc.conf.d configuration file has been `ppp' from
30	<	the beginning, and hence there is no need to touch it.
18	>	cpucontrol(8) now supports VIA CPUs. Synced with FreeBSD 9.2.
19
20	<	20060113:
21	<	si(4)'s device files now contain the unit number.
22	<	Uses of {cua,tty}A[0-9a-f] should be replaced by {cua,tty}A0[0-9a-f].
20	>	TCP Resassemly resource exhaustion bug:
21	>	There is a mistake with the introduction of VNET, which converted the
22	>	global limit on the number of segments that could belong to reassembly
23	>	queues into a per-VNET limit.  Because mbufs are allocated from a
24	>	global pool, in the presence of a sufficient number of VNETs, the
25	>	total number of mbufs attached to reassembly queues can grow to the
26	>	total number of mbufs in the system, at which point all network
27	>	traffic would cease.
28	>	Obtained from: FreeBSD 8
29	>
30	>	OpenSSH
31	>
32	>	Fix two security vulnerabilities:
33	>	OpenSSH clients does not correctly verify DNS SSHFP records when a server
34	>	offers a certificate. [CVE-2014-2653]
35	>
36	>	OpenSSH servers which are configured to allow password authentication
37	>	using PAM (default) would allow many password attempts. A bug allows
38	>	MaxAuthTries to be bypassed. [CVE-2015-5600]
39	>
40	>
41	>	Switch to bsdpatch (from FreeBSD & OpenBSD)
42	>
43	>	20160726:
44	>	BSD Sort updated
45	>
46	>	sqlite 3.8.10.2
47	>
48	>	20160725:
49	>	Import reallocarray from OpenBSD's libc.
50	>
51	>	The reallocarray() function is similar to realloc() except it operates on
52	>	nmemb members of size size and checks for integer overflow in the
53	>	calculation nmemb * size.
54	>
55	>	20150722:
56	>	Fix a bug where TCP connections transitioning to LAST_ACK
57	>	state can get stuck. This can result in a denial of service.
58	>
59	>	20150715:
60	>	libmport now supports @shell and @sample in plists. This means that
61	>	a shell port can automatically add an entry to /etc/shells and remove
62	>	it upon uninstallation. For sample files, a copy is made without the
63	>	.sample extension if one does not exist and it is removed automatically
64	>	only if the md5 hash of the two files is the same.
65	>
66	>	20150709:
67	>	flex 2.5.39
68	>
69	>	20150702:
70	>	ZFS in MidnightBSD now supports lz4 compression. You can enable it
71	>	with zfs set compression=lz4 pool/path.
72	>
73	>	Verify it's working with
74	>	zfs get compressratio pool/path
75	>	du -h -s *
76	>
77	>	Note you must write new data when turning on compression to see
78	>	changes. Existing files are not compressed.
79	>
80	>	Note: While we used the same basic implementation of lz4 that
81	>	FreeBSD and OpenZFS uses, we did not yet implement features support
82	>	and the zfs version still reports 28. This may come in a future update
83	>	to ZFS.
84	>
85	>	20150621:
86	>	libmport now automatically stops services when deleting packages.
87	>
88	>	The package must have installed an rc.d script in /usr/local/etc
89	>	for this to work. This is equivalent to running service <name> onestop
90	>
91	>	20150618:
92	>	Sendmail
93	>
94	>	With the recent changes to OpenSSL to block 512 bit certificates,
95	>	sendmail can't connect with TLS to some servers.
96	>
97	>	Increase the default size to 1024 bit for client connections to
98	>	match the server configuration.
99	>
100	>	ZFS
101	>
102	>	Added ZFS TRIM support which is enabled by default. To disable
103	>	ZFS TRIM support set vfs.zfs.trim.enabled=0 in loader.conf.
104	>
105	>	Creating new ZFS pools and adding new devices to existing pools
106	>	first performs a full device level TRIM which can take a significant
107	>	amount of time. The sysctl vfs.zfs.vdev.trim_on_init can be set to 0
108	>	to disable this behaviour.
109	>
110	>	ZFS TRIM requires the underlying device support BIO_DELETE which
111	>	is currently provided by methods such as ATA TRIM and SCSI UNMAP
112	>	via CAM, which are typically supported by SSD's.
113	>
114	>	Stats for ZFS TRIM can be monitored by looking at the sysctl's
115	>	under kstat.zfs.misc.zio_trim.
116	>
117	>	rc.d
118	>
119	>	Reworked handling of cleanvar and FILESYSTEMS so that FILESYSTEMS
120	>	implies everything is mounted and ready to go.
121	>
122	>	Changed how ip6addressctl maps IPv6 on startup.
123	>
124	>	20150613:
125	>	tzdata 2015d
126	>
127	>	20150612:
128	>	OpenSSL 0.9.8zg
129	>
130	>	20150419:
131	>	MidnightBSD 0.6 stable branch created. Continue 0.7
132	>	development.
133	>
134	>	20150418:
135	>	sqlite 3.8.9
136	>
137	>	20150407:
138	>	Fix two security vulnerabilities:
139	>
140	>	The previous fix for IGMP had an overflow issue. This has been corrected.
141	>
142	>	ipv6: The Neighbor Discover Protocol allows a local router to advertise a
143	>	suggested Current Hop Limit value of a link, which will replace
144	>	Current Hop Limit on an interface connected to the link on the MidnightBSD
145	>	system.
146	>
147	>	20150319:
148	>	OpenSSL 0.9.8.zf
149	>
150	>	mksh R50e
151	>
152	>	Apple mDNSResponder 561.1.1
153	>
154	>	20150306:
155	>	Upgrade OpenSSL to 0.9.8ze
156	>
157	>	20150225:
158	>	Fix two security vulnerabilities.
159	>
160	>	1. BIND servers which are configured to perform DNSSEC validation and which
161	>	are using managed keys (which occurs implicitly when using
162	>	"dnssec-validation auto;" or "dnssec-lookaside auto;") may exhibit
163	>	unpredictable behavior due to the use of an improperly initialized
164	>	variable.
165	>
166	>	CVE-2015-1349
167	>
168	>	2. An integer overflow in computing the size of IGMPv3 data buffer can result
169	>	in a buffer which is too small for the requested operation.
170	>
171	>	This can result in a DOS attack.
172	>
173	>	20141211:
174	>	Fix a security issue with file and libmagic that can allow
175	>	an attacker to create a denial of service attack on any
176	>	program that uses libmagic.
177	>
178	>	20141109:
179	>	Fix building perl during buildworld when the GDBM port is installed.
180	>
181	>	20141106:
182	>	tzdata 2014i
183	>
184	>	20141102:
185	>	serf 1.3.8
186	>
187	>	20141031:
188	>	tnftp 20141031 fixes a security vulnerability with tnftp,
189	>	CVE-2014-8517.
190	>
191	>	20141028:
192	>	OpenSSL 0.9.8zc
193	>
194	>	20141021:
195	>	Fix several security vulnerabilities in routed, rtsold,
196	>	and namei with respect to Capsicum sandboxes looking up
197	>	nonexistent path names and leaking memory.
198	>
199	>	The input path in routed(8) will accept queries from any source and
200	>	attempt to answer them.  However, the output path assumes that the
201	>	destination address for the response is on a directly connected
202	>	network.
203	>
204	>	Due to a missing length check in the code that handles DNS parameters,
205	>	a malformed router advertisement message can result in a stack buffer
206	>	overflow in rtsold(8).
207	>
208	>	20141011:
209	>	mksh R50d - fix field splitting regression and null
210	>	pointer dereference
211	>
212	>	xz 5.0.7
213	>
214	>	OpenSSH 6.6p1
215	>
216	>	20141004:
217	>	mksh R50c - security update for environment var bug with
218	>	foo vs foo+
219	>
220	>	20141002:
221	>	sqlite 3.8.6
222	>
223	>	sudo 1.7.8 - some issues with the current version, but we're slowly
224	>	getting up to date.
225	>
226	>	20141001:
227	>	mksh R50b
228	>
229	>	libmport now supports plist commands @dir, @owner, @group, @mode.
230	>
231	>	sudo 1.7.6p2
232	>
233	>	20140916:
234	>	Fix a security issue with TCP SYN.
235	>
236	>	When a segment with the SYN flag for an already existing connection arrives,
237	>	the TCP stack tears down the connection, bypassing a check that the
238	>	sequence number in the segment is in the expected window.
239	>
240	>	20140909:
241	>	Fixed a bug with our clearenv(3) implementation that caused segfaults
242	>	with some programs including Dovecot.
243	>
244	>	OpenSSL security patch:
245	>
246	>	The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
247	>	to consume large amounts of memory. [CVE-2014-3506]
248	>
249	>	The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
250	>	memory. [CVE-2014-3507]
251	>
252	>	A flaw in OBJ_obj2txt may cause pretty printing functions such as
253	>	X509_name_oneline, X509_name_print_ex et al. to leak some information from
254	>	the stack. [CVE-2014-3508]
255	>
256	>	OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
257	>	a denial of service attack. [CVE-2014-3510]
258	>
259	>	20140902:
260	>	We're now 0.6-CURRENT
261	>
262	>	Update USB quirks to support K70 Corsair keyboard, and several
263	>	other devices.
264	>
265	>	20140827:
266	>	Perl 5.18.2
267	>
268	>	20140728:
269	>	Jails now run shutdown scripts.
270	>
271	>	20140710:
272	>	Fix a vulnerability in the control message API. A buffer is not properly cleared
273	>	before sharing with userland.
274	>
275	>	20140701:
276	>	MKSH R50
277	>
278	>	20140630:
279	>	File 5.19
280	>
281	>	20140605:
282	>	Fix four security issues with OpenSSL
283	>
284	>	20140604:
285	>	Sendmail failed to properly set close-on-exec for open file descriptors.
286	>
287	>	ktrace page fault kernel trace entries were set to an incorrect size which resulted
288	>	in a leak of information.
289	>
290	>	20140430:
291	>	Fix a TCP reassembly bug that could result in a DOS attack
292	>	of the system. It may be possible to obtain portions
293	>	of kernel memory as well.
294	>
295	>	20140411:
296	>	Update zlib to 1.2.7
297	>
298	>	20140122:
299	>	Support for username with length 32. Previous limit was 16
300	>
301	>	20140114:
302	>	Fix two security vulnerabilities.
303	>
304	>	bsnmpd contains a stack overflow when sent certain queries.
305	>
306	>	bind 9.8 when using NSEC3-signed zones zones, will crash with special
307	>	crafted packets.
308	>
309	>	20131228:
310	>	Imported FreeBSD 9.2 usb stack (plus z87 patches from stable)
311	>
312	>	Updated em(4), igb(4) and ixgbe(4)
313	>
314	>	MidnightBSD now works with Z87 Intel chipsets.
315	>
316	>	20131207:
317	>	Remove sparc64 architecture. It hasn't been working for awhile
318	>	and it's not useful for desktops anymore.
319	>
320	>	20131205:
321	>	OpenSSH 6.4p1
322	>
323	>	20131203:
324	>	Perl 5.18.1 imported.
325	>
326	>	Update less to v458
327	>
328	>	20131130:
329	>	Remove named from base. We still include the client utilities for
330	>	now until replacements can be found.
331	>
332	>	20131004:
333	>	rarpd supports vlan(4) and has a pid flag. (from FreeBSD)
334	>
335	>	20130917:
336	>	Support for 65,536 routing tables was added.  A new fib specific
337	>	field has been added to mbuf.  This is an increase from 16.
338	>
339	>	20130910:
340	>	Security updates: (kern.osreldate 5001)
341	>
342	>	nullfs(5)
343	>
344	>	The nullfs(5) implementation of the VOP_LINK(9) VFS operation does not
345	>	check whether the source and target of the link are both in the same
346	>	nullfs instance.  It is therefore possible to create a hardlink from a
347	>	location in one nullfs instance to a file in another, as long as the
348	>	underlying (source) filesystem is the same.
349	>
350	>	ifioctl
351	>
352	>	As is commonly the case, the IPv6 and ATM network layer ioctl request
353	>	handlers are written in such a way that an unrecognized request is
354	>	passed on unmodified to the link layer, which will either handle it or
355	>	return an error code.
356	>
357	>	Network interface drivers, however, assume that the SIOCSIFADDR,
358	>	SIOCSIFBRDADDR, SIOCSIFDSTADDR and SIOCSIFNETMASK requests have been
359	>	handled at the network layer, and therefore do not perform input
360	>	validation or verify the caller's credentials.  Typical link-layer
361	>	actions for these requests may include marking the interface as "up"
362	>	and resetting the underlying hardware.
363	>
364	>	20130824:
365	>	Fix a bug in sendmail 8.14.7 that interferes with how it
366	>	handles AAAA records interoperating with Microsoft DNS servers.
367	>	FreeBSD has already reported this to Sendmail and a fix
368	>	will be included in the next release.
369	>
370	>	Subversion 1.8.1 is now in the base system as a static
371	>	binary.  It has limited functionality, but can be used to
372	>	checkout/commit code.  It is named svnlite.
373	>
374	>	20130822:
375	>	Fix two security vulnerabilities.
376	>
377	>	Fix an integer overflow in IP_MSFILTER (IP MULTICAST).
378	>	This could be exploited to read memory by a user process.
379	>
380	>	When initializing the SCTP state cookie being sent in INIT-ACK chunks,
381	>	a buffer allocated from the kernel stack is not completely initialized.
382	>
383	>	Import xz 5.0.4
384	>
385	>	Import sqlite 3.7.17
386	>
387	>	Import BIND 9.8.5-P2
388	>
389	>	20130814:
390	>	mksh R48 imported.
391	>
392	>	Sendmail 8.14.7 imported.
393	>
394	>	20130717:
395	>	libmport bug was fixed causing hash verification to fail.
396	>
397	>	virtio(4) imported from FreeBSD 9-stable. SCSI support not
398	>	included.
399	>
400	>	20130612:
401	>	RELENG_0_4 created for 0.4. Development continues on 0.5.
402	>
403	>	20130402:
404	>	Update BIND and OpenSSL to resolve security advisories.
405	>
406	>	20130305:
407	>	MKSH R44 imported.
408	>
409	>	20130213:
410	>	MKSH R42b imported
411	>
412	>	20130211:
413	>	MKSH R42 imported
414	>
415	>	20130125:
416	>	MKSH R41 imported
417	>
418	>	20130122:
419	>	OpenSSH 5.8p2 imported
420	>
421	>	SQLite 3.7.15.2 imported
422	>
423	>	Fixed a longstanding bug in libmport extrating new index files.
424	>
425	>	20120710:
426	>	BSD licensed sort imported from FreeBSD-CURRENT
427	>
428	>	For now, GNU sort is installed as gnusort, but it will
429	>	go away in time.
430	>
431	>	20120708:
432	>	tcsh 6.18.01 imported.
433	>
434	>	NetBSD's iconv imported.
435	>
436	>	libc gains strnlen(3), memrchr(3), stpncpy(3).
437	>
438	>	20120612:
439	>	BIND security update related to CVE-2012-1667.
440	>
441	>	Zero length resource records can cause BIND to crash resulting
442	>	in a DOS attack or information disclosure.
443	>
444	>	20120407:
445	>	mksh R40f (fixes regression)
446	>
447	>	20120328:
448	>	mksh R40e
449	>
450	>	Perl 5.14.2
451	>
452	>	20120229:
453	>	cpucontrol(8) and cpuctl(4) added from FreeBSD 7-stable.
454	>
455	>	20120209:
456	>	mDNSResponder 333.10 imported
457	>
458	>	20111227:
459	>	import raid5 module for GEOM, graid5(8)
460	>
461	>	This is experimental and known to use a lot of kernel
462	>	memory.
463	>
464	>	20111223:
465	>	telnetd: fix a root exploit from a fixed buffer that was not checked
466	>
467	>	pam: don't allow escape from policy path.  Exploitable in KDE, etc.
468	>
469	>	Fix pam_ssh module:
470	>
471	>	If the pam_ssh module is enabled, attackers may be able to gain access
472	>	to user accounts which have unencrypted SSH private keys.
473	>
474	>	This has to due with the way that openssl works.  It ignores unencrpted data.
475	>
476	>	Fix security issue with chroot and ftpd.
477	>
478	>	nsdispatch(3) doesn't know it's working in a chroot and some
479	>	operations can cause files to get reloaded causing a security
480	>	hole in things like ftpd.
481	>
482	>	20111217:
483	>	libdialog/dialog upgraded to an lgpl version. As it's not
484	>	backwardly compatable, include the old libdialog as libodialog
485	>
486	>	20111212:
487	>	mksh r40d imported
488	>
489	>	20111210:
490	>	re(4) and rl(4) updated to support new chips.
491	>
492	>	GEOM synced with FreeBSD 7-stable.
493	>
494	>	MidnightBSD GPT partition types created in sys/gpt.h and
495	>	setup in boot loader and GEOM.
496	>
497	>	amdsbwd(4) (amd watchdog for south bridge) updated to support
498	>	8xx series chipset.
499	>
500	>	20111207:
501	>	import bsd grep from FreeBSD/OpenBSD.
502	>
503	>	MK_BSD_GREP controls which grep is installed
504	>	as grep with the other as bsdgrep or gnugrep.
505	>
506	>	20111122:
507	>	mksh vR40c imported.
508	>
509	>	20111117:
510	>	BIND 9.6 ESV R5 P1
511	>
512	>	20111107:
513	>	tzdata 2011n
514	>
515	>	20111026:
516	>	mDNSResponder v320
517	>
518	>	BIND 9.6 ESV R5
519	>
520	>	20111022:
521	>	cflow 0.0.6 imported
522	>
523	>	20111020:
524	>	less v436 imported
525	>
526	>	amdsbwd(4) AMD southbridge watchdog
527	>
528	>	20111019:
529	>	awk 20110810 imported
530	>
531	>	et(4) Agere Gigabit Ethernet/Fast Ethernet driver added, but
532	>	not included in GENERIC kernel.  The kernel module needs
533	>	testing before we can include it in GENERIC.
534	>
535	>	intr_bind code ported to allow an IRQ to be bound to one
536	>	specific CPU core.
537	>
538	>	20111017:
539	>	Time Zone Data v. 2011l (Released 10 October 2011)
540	>
541	>	Updated list of countries (iso3166) to work with new timezone data.
542	>
543	>	20111015:
544	>	Introduce CPU Affinity in MidnightBSD. cpuset(1) can be used
545	>	to control which core or group of cores can be used for a given
546	>	process. Several new system calls were added to support this
547	>	functionality in the running kernel and for 32bit binary
548	>	compatibility on amd64.
549	>
550	>	The scheduler default has been changed to ULE in i386 and
551	>	amd64.  Changes were made to both schedulers (4BSD AND ULE)
552	>	for this feature.
553	>
554	>	This work is based on Jeff Roberson's FreeBSD 7.1 patches.
555	>
556	>	20111004:
557	>	Fix a problem with unix socket handling caused by the recent
558	>	patch to unix socket path handling. This allows network
559	>	apps to work under the linuxolator again.
560	>
561	>	20111001:
562	>	Import libfetch & fetch(1) from FreeBSD 9. Passive FTP is
563	>	now default and an environment variable must be set to use
564	>	active.
565	>
566	>	20110930:
567	>	Introduce quirks handling for several umass devices including
568	>	USB cameras.  Add workaround for Cyberpower UPS devices.
569	>
570	>	Bring in further bug fixes from FreeBSD and NetBSD for alc(4).
571	>	Stale ip/tcp header pointers are no longer used, lockups fixed
572	>	when network cable is unplugged on bootup, enable TX checksum
573	>	offloading.
574	>
575	>	Add a new man page for gcache(8), a useful geom class when
576	>	working with large raid3 sets.
577	>
578	>	Restore previous workaround for Cypress pata storage controller.
579	>
580	>	20110929:
581	>	Sync ath(4) with FreeBSD 7.3.
582	>
583	>	The following modules are no longer available, and should be
584	>	removed from loader.conf:
585	>	ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
586	>
587	>	alc(4) would hibernate when a cable was unplugged and often
588	>	required bring the interface down and up to "wake up" so that
589	>	a connection could be established.  Disable hibernation.
590	>
591	>	20110928:
592	>	Fix security issues with gzip and compress related to .Z
593	>	files that are corrupted.
594	>
595	>	Fix path validation with unix domain sockets.
596	>
597	>	20110917:
598	>	Remove dependance on mports perl for generating releases as
599	>	it's in the base system.
600	>
601	>	20110914:
602	>	Import xz 5.0.3 with liblzma 5.0.3
603	>
604	>	20110813:
605	>	synced the sparc64 GENERIC kernel configuration with amd64.
606	>
607	>	20110806:
608	>	sqlite 3.7.7.1 imported
609	>
610	>	msearch(1), libmsearch and msearch.import added.  msearch(1) provides
611	>	a full text search command line tool.  libmsearch can also be used
612	>	to build a graphical based search in the future. You can enable
613	>	index building for msearch in periodic.conf or manually run the
614	>	/usr/libexec/msearch.index tool.  Full text indexes take considerable
615	>	space in /var.  I'm using approximately 500MB currently.
616	>
617	>	Fix a long standing bug with the periodic script to check package
618	>	versions.  This will be obsolete with mport though.
619	>
620	>	20110710:
621	>	kdb_enter_why added to MidnightBSD to allow the kernel debugger to
622	>	know why it's in use and thus script can be run.
623	>
624	>	Yet another problem with the perl manifest was fixed
625	>
626	>	20110709:
627	>	cpufreq(1) is a new utility to monitor CPU frequency which may change
628	>	with use of powerd(8) and cpufreq(4).
629	>
630	>	20110612:
631	>	Update mksh to R40
632	>
633	>	Catch up ObsoleteFiles.inc to remove Perl 5.10.x.  Good to run when
634	>	updating current (cd /usr/src && make check-old)
635	>
636	>	20110528:
637	>	Fix CVE-2011-1910 in BIND 9.6.x.  This affects caching resolvers.
638	>
639	>	20110526:
640	>	newfs:
641	>	Raised the default blocksize for UFS/FFS filesystems from
642	>	16K to 32K and the default fragment size from 2K to 4K.
643	>
644	>	This should slightly imporve performance on "advanced format"
645	>	hard drives such as the WD EARS drives. Drives of this type
646	>	have emulation modes that slow down with lower sizes.  Of course
647	>	the drive must still be aligned properly when using fdisk.
648	>
649	>	20110521:
650	>	mport tool now has a deleteall command.  This can be used to remove
651	>	all packages from a system.
652	>
653	>	A few bugs with the perl 5.14 import have been fixed.
654	>
655	>	20110518:
656	>	Perl 5.14.0
657	>
658	>	20110517:
659	>	Sendmail 8.14.5
660	>
661	>	20110314:
662	>	DRM/DRI code updated to support newer video cards. (FreeBSD 7.1)
663	>
664	>	cdevpriv wrappers added
665	>
666	>	nss_mdns hack introduced to work around linking problem.
667	>
668	>	dnsextd fixed after update to mDNSResponder code.
669	>
670	>	20110308:
671	>	Introduce liblzma & xz 5.0.1 to the base system
672	>
673	>	Patch for OpenSSL security issue CVE-2011-0014.
674	>
675	>	"OSREVISION 4004"
676	>
677	>	nsswitch module for multicast dns (nss_mdns) added.
678	>
679	>	tzdata2011c
680	>
681	>	20110220:
682	>	cam(4) syncronized with FreeBSD 7.3.
683	>
684	>	20110219:
685	>	amdtemp(4) updated to support sensors framework.
686	>
687	>	20110217:
688	>	Perl 5.10.1 imported
689	>
690	>	20110216:
691	>	Introduce igb(4) and split Intel Gigabit Ethernet adapters between
692	>	igb(4) and em(4).  Newer devices use igb(4).  The code has moved
693	>	to sys/dev/e1000 for both devices in the kernel. igb(4) has
694	>	been placed in GENERIC on i386 and amd64.
695	>
696	>	Update bfe(4) to support newer devices and WOL.
697	>
698	>	20110215:
699	>	age(4) added.
700	>
701	>	20110208:
702	>	BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
703	>
704	>	20110206:
705	>	eeemon(4) added to monitor Asus Eee PC.
706	>
707	>	20110205:
708	>	OpenSSH 5.7p1
709	>
710	>	GNU sort 6.9 (coreutils)
711	>
712	>	20110203:
713	>	one true awk 20100523 imported
714	>
715	>	sqlite 3.7.5
716	>
717	>	OpenSSL 0.9.8q
718	>
719	>	20110202:
720	>	tcsh 6.17.00
721	>
722	>	file 5.05
723	>
724	>	20110122:
725	>	Import it(4) and lm(4), with support for Super I/O hardware monitors. This
726	>	uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
727	>
728	>	20110120:
729	>	BIND 9.6.2-P3
730	>
731	>	sudo 1.7.4-p6
732	>
733	>	20110115:
734	>	Add experimental jme(4) for Jmicron ethernet devices.
735	>
736	>	20101130:
737	>	A double free exists in the SSL client ECDH handling code, when
738	>	processing specially crafted public keys with invalid prime
739	>	numbers. [CVE-2010-2939]
740	>
741	>	20101120:
742	>	Several portions of the kernel and userland code related to UFS file
743	>	systems (and UFS2) cannot properly handle inode counts above 2^31 due
744	>	to use of int types.  Based on a patch from FreeBSD, I've modified
745	>	our UFS2 implementation to handle unsigned values for inode counts
746	>	which should allow for file systems greater than 16TB.
747	>
748	>	newfs and growfs was also modified.
749	>
750	>	20101110:
751	>	Fix a security issue with pseudofs which could result in running code in kernel
752	>	context or a kernel panic depending on system configuration.  This affects file
753	>	systems such as procfs for instance.
754	>
755	>	20101021:
756	>	sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
757	>	This is similar to functions present in many linux distros. The utility was
758	>	written by Devin Teske for FreeBSD.
759	>
760	>	20100920:
761	>	bzip2 security patch for integer overflow.
762	>
763	>	20100905:
764	>	MidnightBSD RELENG_0_3 branch created.  Aggressive development continues here
765	>	for 0.4.
766	>
767	>	20100902:
768	>	Fix a security issue with libutil that allows users to bypass cpu limits in
769	>	login.conf in some cases.  This combined with OpenSSH for example can allow
770	>	the user to get more resources than they're allowed.
771	>
772	>	20100822:
773	>	Import Apple's mDNSResponder (mdnsd).
774	>
775	>	20100814:
776	>	libdispatch added to MidnightBSD.  This provides functionality found in
777	>	Mac OS X's GCD.  We do not have blocks support yet.  As this code is
778	>	licensed under Apache 2, we create a new MK_APACHE option so that
779	>	it's not required for all users to run code under a license they
780	>	may not like.
781	>
782	>	20100713:
783	>	mbuf readonly fix related to sendfile(2) data corruption.
784	>
785	>	20100704:
786	>	brainfuck(1) imported from MirBSD.
787	>
788	>	20100505:
789	>	zlib 1.2.5
790	>
791	>	20100430:
792	>	Sudo 1.7.2p6 imported
793	>
794	>	20100321:
795	>	Update zlib to 1.2.4
796	>
797	>	20100319:
798	>	Removed i586 from default i386 generic kernel.
799	>
800	>	20100317:
801	>	Update to tzdata2010e (time zones).  This includes changes in
802	>	Mexico.
803	>
804	>	Add support for several newer sound cards via hda including
805	>	ATI and Realtek chipsets.
806	>
807	>	20100313:
808	>	CPU detection has been changed.  VIA Padlock detection added.
809	>
810	>	20100312:
811	>	Fix a number of bugs and compiler warnings in libmport. Handle
812	>	plus signs in paths for mport.check-fake
813	>
814	>	20100311:
815	>	mksh R39c
816	>
817	>	20100309:
818	>	Sudo 1.7.2p5
819	>
820	>	sqlite3 3.6.23
821	>
822	>	mksh R39b
823	>
824	>	libffi (ffi) 3.0.9
825	>
826	>	20100206:
827	>	WITHOUT_LIB32 is no longer needed on AMD64.  GCC was fixed to
828	>	properly pass arguments to ld.
829	>
830	>	re(4) and rl(4) have been updated to support several new
831	>	realtek chipsets.  Performance has been improved on re(4).
832	>
833	>	20100204:
834	>	Fix a bug cropping up on AMD64 MidnightBSD with sftp
835	>	segfaulting.
836	>
837	>	20100116:
838	>	Import ash changes from FreeBSD (bin/sh) 8-Stable.
839	>
840	>	BIND 9.6.1-P2
841	>
842	>	20100110:
843	>	Import Sendmail 8.14.4. Fix for SSL vulnerability.
844	>
845	>	posix_spawn(3) added to MidnightBSD libc.  Users may need to build and
846	>	install libc before doing a full buildworld when upating from 0.2 or
847	>	older current systems.
848	>
849	>	kqueue(2) was modified to support portions of libdispatch functionality.
850	>
851	>	20100106:
852	>	Bind security update.  Fix a bug with DNSSEC that causes negative
853	>	cache entries and thus a possible DNS cache poisoning attack.
854	>
855	>	Fix a bug in ZFS that can reset permissions on system crashes.
856	>
857	>	20091228:
858	>	amdtemp(4) was added.  It allows one to monitor to the temperature
859	>	of an AMD CPU such as a Phenom.
860	>
861	>	20091205:
862	>	OpenSSL security fix
863	>
864	>	The SSL version 3 and TLS protocols support session renegotiation without
865	>	cryptographically tying the new session parameters to the old parameters.
866	>
867	>	20091128:
868	>	OpenBSD sensors framework imported including sensorsd(8)
869	>
870	>	20091126:
871	>	OpenNTPD 4.4 import
872	>
873	>	Update OpenSSH to 5.3p1
874	>
875	>	mksh R39
876	>
877	>	20091124:
878	>	cpdup updated from DragonFly to 1.15
879	>
880	>	tzdata2009s updated with latest timezone data for November 2009.
881	>
882	>	20091010:
883	>	amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
884	>	to test current.
885	>
886	>	Revert unicode filename fixes from ntfs code.  This was causing chaos
887	>	on amd64 systems.
888	>
889	>	20091006:
890	>	Update timezone data with tzdata2009n with the Pakistan and
891	>	Argentina changes.
892	>
893	>	Sync several userland utilities with versions from FreeBSD 7.0 in
894	>	sbin and usr.sbin.
895	>
896	>	20090919:
897	>	Update timezone data with tzdate2009m from September 2009.
898	>
899	>	20090729:
900	>	Patch for Bind 9 security vulnerability. a dynmaic update packet
901	>	can trigger an assertion and cause named to exit
902	>
903	>	20090606:
904	>	Remove PCC from the base system.  This compiler will not work
905	>	as a system compiler for us as we've got some userland investment
906	>	in C++ code and may have Objective-C in the future.  We're stuck
907	>	with a solution that supports these three languages at a minimum.
908	>
909	>	I had wanted to keep it as an optional compiler because it is
910	>	fast, however too many users want to try to use it for the base
911	>	system which makes no sense.
912	>
913	>	A hack was added for Cypress based usb hard drive enclosures to
914	>	the kernel.  This should cut down on commands it claims to support
915	>	but does not (at the cam layer).  Found while testing ZFS on
916	>	an external device.
917	>
918	>	20090520:
919	>	The powerd daemon no longer starts automatically to improve
920	>	compatibility with many systems.  However, there is a new
921	>	installer option in the startup section to enable it. This
922	>	makes it easier to enable for users that have working systems. I                thought it was only a problem on older hardware, but it freaks
923	>	out my new Phenom too.
924	>
925	>	20090502:
926	>	OpenSSH 5.2p1 import
927	>
928	>	ale(4) connected to the build. (kernel module only)
929	>
930	>	20090501:
931	>	Imported makefs utility from NetBSD/FreeBSD
932	>
933	>	20090422:
934	>	OpenSSL security update
935	>
936	>	The function ASN1_STRING_print_ex does not properly validate the lengths
937	>	of BMPString or UniversalString objects before attempting to print them.
938	>
939	>	20090415:
940	>	Created a Symbol.map for libc/ohash symbols
941	>
942	>	Updated several usr/bin usr/sbin utilities.
943	>
944	>	Corrected a bug with Makefile.inc1 causing the bootstrap
945	>	tools to fail.
946	>
947	>	20090405:
948	>	xorg 7.4 wants to configure its input devices via hald which does not
949	>	yet work with USB. If the keyboard/mouse does not work in xorg then
950	>	add
951	>	Option "AllowEmptyInput" "off"
952	>	to your ServerLayout section.  This will cause X to use the configured
953	>	kbd and mouse sections from your xorg.conf
954	>
955	>	20090403:
956	>	mksh was disconnected a few day ago do to bugs with
957	>	buildworld and mports.  Now, connect it back
958	>	for use as /bin/sh with a conditional called
959	>	MK_ASH.  By default, ash is the standard /bin/sh
960	>	but we may change this later.  This will allow further
961	>	testing by users and developers of mksh without
962	>	causing an unpleasant default experience.  In the
963	>	long run, we need to fix mksh compatibility.
964	>
965	>	20090328:
966	>	Bring in mksh R37 from CVS. The dot.mkshrc files for root
967	>	and skel were changed.  mksh(1) now replaces ash aka sh(1)
968	>	as the default /bin/sh.  Please report bugs with
969	>	ports, etc. The ash code will remain in the repo for awhile
970	>	as I decide if we'll add something like MK_SHELL_ASH as
971	>	an optional build parameter.
972	>
973	>	ahd was disconnected from the lint environment until
974	>	the compiler bug is sorted (by updating gcc?)
975	>
976	>	Remove freebsd-tips from fortune files and change the
977	>	default for login and profile.
978	>
979	>	20090327:
980	>	Update libarchive to 2.5.5, tar, and add bsdcpio.
981	>
982	>	Also previously, ctriv has been connecting Perl 5.10
983	>	to the build (part of os).  This will have an impact
984	>	on mports.
985	>
986	>	20090325:
987	>	Update Bind to 9.4.3-P1
988	>
989	>	Update mksh to R36b
990	>
991	>	Update tcpdump to 3.9.8, fix libpcap to work with current.
992	>
993	>	Update pnpinfo, sync with FreeBSD.
994	>
995	>	20090115:
996	>	Fix a problem with DNSSEC and BIND.
997	>
998	>	20090110:
999	>	For applications using OpenSSL for SSL connections, an invalid SSL
1000	>	certificate may be interpreted as valid.  This could for example be
1001	>	used by an attacker to perform a man-in-the-middle attack.
1002	>
1003	>	Other applications which use the OpenSSL EVP API may similarly be
1004	>	affected.
1005	>
1006	>	Stop cross site request forgery attacks in lukemftpd
1007	>
1008	>	20090104:
1009	>	Import GNU libreadline 5.2
1010	>
1011	>	20090101:
1012	>	Update time zone data to 2008i.
1013	>
1014	>	20081231:
1015	>	Correct a problem where bluetooth and netgraph sockets are not
1016	>	properly initialized.
1017	>
1018	>	Happy 2009.
1019	>
1020	>	20081206:
1021	>	Due to the massive change in the underlying system under way,
1022	>	we're naming the next release 1.0.  The sys/sys/param.h was
1023	>	changed accordingly.  ipfilter and ncurses were corrected
1024	>	using __MidnightBSD__ tests in the code.
1025	>
1026	>	The GENERIC kernel config was caught up on i386 today.  Consider
1027	>	i386 still broken, but amd64 is running again.
1028	>
1029	>	mdoc.local was updated with the new MidnightBSD version info.
1030	>
1031	>	batt(1) was rewritten in C.  It now supports several flags and
1032	>	runs about 8 times faster on my laptop.  The default output
1033	>	shows the number of minutes of battery life remaining and the
1034	>	percentage.  You can use -u to display the number of batteries or
1035	>	-c to get script friendly output.  Consult the man page for more.
1036	>
1037	>	20081204:
1038	>	Work has completed on importing ZFS, jemalloc, several
1039	>	new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
1040	>	support, improved locking for file desc., audit (openbsm),
1041	>	openssl .98e, nfe, imporved intel high def audio, midi, updated
1042	>	intel gigabit (em), support for several wifi cards (intel), ...
1043	>
1044	>	Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
1045	>	data from param.h instead of the FreeBSD version.  This means
1046	>	testing is now possible in the ports tree for the version
1047	>	and that any ports or code relying on the FreeBSD version from
1048	>	sys/sys/param.h will need to be fixed.
1049	>
1050	>	20080905:
1051	>	update nve(4) to support new hardware.
1052	>
1053	>	20080801:
1054	>	Import OpenBSM 1.0
1055	>
1056	>	Modify src/release to create 3 isos instead of 2 for packages.
1057	>
1058	>	etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
1059	>
1060	>	Many ia64, alpha, powerpc items were removed.
1061	>
1062	>	The recent diffutils 2.8.7 import was fixed.
1063	>
1064	>	20080703:
1065	>	pcc was not installed properly when setting DESTDIR for live cds,
1066	>	or posibly jails.
1067	>
1068	>	20080627:
1069	>	Add firmware(9), WEP, CCMP, TKIP to GENERIC.
1070	>
1071	>	Add glabel to GENERIC.
1072	>
1073	>	Intel ICH8 mobile chipset used on some iMacs included with ata.
1074	>
1075	>	pcc connected to the build on i386. (alternative compiler)
1076	>
1077	>	ath added to GENERIC.  (Atheros wireless NICs) on amd64/i386
1078	>
1079	>	20080528:
1080	>	Sendmail 8.14.3
1081	>
1082	>	20080516:
1083	>	ssh-vulnkey allows you to look for vulnerable ssh keys that
1084	>	were generated on Debian and Ubuntu hosts over the last
1085	>	few years.  sshd can block offending keys with a configuration
1086	>	option.
1087	>
1088	>	The elf note on binaries is now set to MidnightBSD.
1089	>
1090	>	20080514:
1091	>	Fixed a number of problems with pcc.  It is not yet connected
1092	>	to the build, but usable on i386 hosts.  You may use it
1093	>	by make; make install in /usr/src/usr.bin/pcc.  It will
1094	>	install in /usr/local as some of the files conflict with
1095	>	GCC versions. __MidnightBSD__ is defined in PCC as well.
1096	>
1097	>	System headers were fixed to allow pcc to compile many binaries
1098	>	on MidnightBSD.  bin/cp will work now for instance.
1099	>
1100	>	20080430:
1101	>	__MidnightBSD__ is now defined via gcc.  This can be tested
1102	>	to determine we're running on MidnightBSD in the preprocessor.
1103	>
1104	>	20080429:
1105	>	Import bind 9.4.2 with threading
1106	>
1107	>	libpthread (KSE) and libthr are built earlier
1108
1109	<	20051230:
37	<	A lot of fixes and new features in the soundsystem. To get all
38	<	benefits, you may want to recompile mplayer (if installed) after
39	<	booting the new world.
1109	>	pcvt(4) removed!
1110
1111	<	20051222:
42	<	Bug fixes to the trimdomain(3) function in libutil may result in
43	<	slight changes to the host names appearing in log files under
44	<	relatively rare circumstances.
1111	>	Alias added for core2 cpus.
1112
1113	<	20051220:
47	<	Scripts in the local_startup directories (as defined in
48	<	/etc/defaults/rc.conf) that have the new rc.d semantics will
49	<	now be run as part of the base system rcorder. If there are
50	<	errors or problems with one of these local scripts, it could
51	<	cause boot problems. If you encounter such problems, boot in
52	<	single user mode, remove that script from the */rc.d directory.
53	<	Please report the problem to the port's maintainer, and the
54	<	freebsd-ports@freebsd.org mailing list.
1113	>	Alpha and PC98 only utilities removed from usr/sbin
1114
1115	<	20051215:
1116	<	The setkey(8) utility was moved from /usr/sbin/setkey to /sbin/setkey.
58	<	You may want to update scripts which depend on its location.
1115	>	syslogd, adduser, rmuser, mergemaster and mailwrapper have been
1116	>	improved.  See the man pages for info.
1117
1118	<	20051108:
1119	<	rp(4)'s device files now contain the unit number.
62	<	Uses of {cua,tty}R[0-9a-f] should be replaced by {cua,tty}R0[0-9a-f].
1118	>	periodic scripts will not send emails with empty message bodies.
1119	>	See mailwrapper fix.
1120
1121	<	20051101:
1122	<	FreeBSD 6.0-RELEASE
1121	>	20080410:
1122	>	Sync cpdup with DragonFly.  Add parallel transaction support and
1123	>	-l flag to line-buffer stdout and stderr.
1124
1125	<	20051001:
1126	<	kern.polling.enable sysctl MIB is now deprecated. Use ifconfig(8)
1127	<	to turn polling(4) on your interfaces.
1125	>	20080406:
1126	>	Import bzip2 1.05
1127	>	Import OpenSSH 4.9p1
1128
1129	<	20050722:
1130	<	The ai_addrlen of a struct addrinfo was changed to a socklen_t
1131	<	to conform to POSIX-2001.  This change broke an ABI
1132	<	compatibility on 64 bit architecture.  You have to recompile
75	<	userland programs that use getaddrinfo(3) on 64 bit
76	<	architecture.
1129	>	20080322:
1130	>	The default umask was changed to 022.
1131	>
1132	>	/usr/X11R6 paths were removed from several config files.
1133
1134	<	20050711:
79	<	RELENG_6 branched here.
1134	>	.mkshrc files are now installed for root.
1135
1136	<	20050629:
1137	<	The pccard_ifconfig rc.conf variable has been removed and a new
83	<	variable, ifconfig_DEFAULT has been introduced.  Unlike
84	<	pccard_ifconfig, ifconfig_DEFAULT applies to ALL interfaces that
85	<	do not have ifconfig_ifn entries rather than just those in
86	<	removable_interfaces.
1136	>	20080316:
1137	>	FIx a problem with gif0 tunnels and neighbors with IPV6.
1138
1139	<	20050616:
1140	<	Some previous versions of PAM have permitted the use of
90	<	non-absolute paths in /etc/pam.conf or /etc/pam.d/* when referring
91	<	to third party PAM modules in /usr/local/lib.  A change has been
92	<	made to require the use of absolute paths in order to avoid
93	<	ambiguity and dependence on library path configuration, which may
94	<	affect existing configurations.
1139	>	20080312:
1140	>	Add lndir from X.org.  This aides in the porting of MirPorts.
1141
1142	<	20050610:
97	<	Major changes to network interface API.  All drivers must be
98	<	recompiled.  Drivers not in the base system will need to be
99	<	updated to the new APIs.
1142	>	New OS versions were added to the mapage code (groff)
1143
1144	<	20050609:
1145	<	Changes were made to kinfo_proc in sys/user.h.  Please recompile
103	<	userland, or commands like `fstat', `pkill', `ps', `top' and `w'
104	<	will not behave correctly.
1144	>	20080310:
1145	>	Correct a buffer overflow in ppp.
1146
1147	<	The API and ABI for hwpmc(4) have changed with the addition
1148	<	of sampling support.  Please recompile lib/libpmc(3) and
108	<	usr.sbin/{pmcstat,pmccontrol}.
1147	>	20080308:
1148	>	Remove /usr/X11R6 from manpath config.
1149
1150	<	20050606:
1151	<	The OpenBSD dhclient was imported in place of the ISC dhclient
1152	<	and the network interface configuration scripts were updated
113	<	accordingly.  If you use DHCP to configure your interfaces, you
114	<	must now run devd.  Also, DNS updating was lost so you will need
115	<	to find a workaround if you use this feature.
1150	>	20080307:
1151	>	Atheros driver no longer has several options set
1152	>	which corrects building in tinderbox on all three platforms.
1153
1154	<	20050605:
1155	<	if_bridge was added to the tree. This has changed struct ifnet.
119	<	Please recompile userland and all network related modules.
1154	>	Added a new macro to sx.h which returns true if the current
1155	>	thread holds an exclusive lock on a specifix sx.
1156
1157	<	20050603:
1158	<	The n_net of a struct netent was changed to an uint32_t, and
1159	<	1st argument of getnetbyaddr() was changed to an uint32_t, to
124	<	conform to POSIX-2001.  These changes broke an ABI
125	<	compatibility on 64 bit architecture.  With these changes,
126	<	shlib major of libpcap was bumped.  You have to recompile
127	<	userland programs that use getnetbyaddr(3), getnetbyname(3),
128	<	getnetent(3) and/or libpcap on 64 bit architecture.
1157	>	Removed OS/2's HPFS file system.   It's not maintained and
1158	>	I don't know anyone using OS/2 or ecomstation these days.
1159	>	My copy is in the closet collecting dust.
1160
1161	<	20050528:
1162	<	Kernel parsing of extra options on '#!' first lines of shell
1163	<	scripts has changed.  Lines with multiple options likely will
133	<	fail after this date.  For full details, please see
134	<	http://people.freebsd.org/~gad/Updating-20050528.txt
1161	>	20080306:
1162	>	Synced tinderbox with FreeBSD.  Modified it for MidnightBSD.
1163	>	Developers can now use it to check src builds.
1164
1165	<	20050503:
1166	<	The packet filter (pf) code has been updated to OpenBSD 3.7
1167	<	Please note the changed anchor syntax and the fact that
139	<	authpf(8) now needs a mounted fdescfs(5) to function.
1165	>	20080303:
1166	>	Add mksh to /etc/shells, made some adjustments to options
1167	>	for mksh builds per suggestion upstream.
1168
1169	<	20050415:
142	<	The NO_MIXED_MODE kernel option has been removed from the i386
143	<	amd64 platforms as its use has been superceded by the new local
144	<	APIC timer code.  Any kernel config files containing this option
145	<	should be updated.
1169	>	USB HID table updated with modern hardware list.
1170
1171	<	20050227:
148	<	The on-disk format of LC_CTYPE files was changed to be machine
149	<	independent.  Please make sure NOT to use NO_CLEAN buildworld
150	<	when crossing this point. Crossing this point also requires
151	<	recompile or reinstall of all locale depended packages.
1171	>	Updated BSD family true (we're not in there yet)
1172
1173	<	20050225:
1174	<	The ifi_epoch member of struct if_data has been changed to
155	<	contain the uptime at which the interface was created or the
156	<	statistics zeroed rather then the wall clock time because
157	<	wallclock time may go backwards.  This should have no impact
158	<	unless an snmp implementation is using this value (I know of
159	<	none at this point.)
1173	>	iso3166 file updated and import of tzdata2007k for
1174	>	new time zones.
1175
1176	<	20050224:
162	<	The acpi_perf and acpi_throttle drivers are now part of the
163	<	acpi(4) main module.  They are no longer built separately.
1176	>	Updated mksh to latest version R33.
1177
1178	<	20050223:
1179	<	The layout of struct image_params has changed. You have to
1180	<	recompile all compatibility modules (linux, svr4, etc) for use
168	<	with the new kernel.
1178	>	20080228:
1179	>	Remplaced the random IP id generation code with a new
1180	>	version by Amit Klein.
1181
1182	<	20050223:
1183	<	The p4tcc driver has been merged into cpufreq(4).  This makes
172	<	"options CPU_ENABLE_TCC" obsolete.  Please load cpufreq.ko or
173	<	compile in "device cpufreq" to restore this functionality.
1182	>	20080221:
1183	>	Sendfile write only permissions fix.
1184
1185	<	20050220:
176	<	The responsibility of recomputing the file system summary of
177	<	a SoftUpdates-enabled dirty volume has been transferred to the
178	<	background fsck.  A rebuild of fsck(8) utility is recommended
179	<	if you have updated the kernel.
1185	>	Removed some HPFS and PC98 code.
1186
1187	<	To get the old behavior (recompute file system summary at mount
182	<	time), you can set vfs.ffs.compute_summary_at_mount=1 before
183	<	mounting the new volume.
1187	>	iso639 file sycned with DragonFly.
1188
1189	<	20050206:
1190	<	The cpufreq import is complete.  As part of this, the sysctls for
1191	<	acpi(4) throttling have been removed.  The power_profile script
188	<	has been updated, so you can use performance/economy_cpu_freq in
189	<	rc.conf(5) to set AC on/offline cpu frequencies.
1189	>	20080128:
1190	>	Changed NTP configuration so that ips aren't cached
1191	>	so multiple servers are used.
1192
1193	<	20050206:
192	<	NG_VERSION has been increased. Recompiling kernel (or ng_socket.ko)
193	<	requires recompiling libnetgraph and userland netgraph utilities.
1193	>	Fix an issue with fork() in libpthread.
1194
1195	<	20050114:
1196	<	Support for abbreviated forms of a number of ipfw options is
1197	<	now deprecated.  Warnings are printed to stderr indicating the
1198	<	correct full form when a match occurs.  Some abbreviations may
199	<	be supported at a later date based on user feedback.  To be
200	<	considered for support, abbreviations must be in use prior to
201	<	this commit and unlikely to be confused with current key words.
1195	>	20080121:
1196	>	Add virtualization detection to set the HZ rate
1197	>	according to a VM present.  VMWare and Parallels
1198	>	should work better like this.
1199
1200	<	20041221:
1201	<	By a popular demand, a lot of NOFOO options were renamed
205	<	to NO_FOO (see bsd.compat.mk for a full list).  The old
206	<	spellings are still supported, but will cause annoying
207	<	warnings on stderr.  Make sure you upgrade properly (see
208	<	the COMMON ITEMS: section later in this file).
1200	>	Change to full x11 install in sysinstall.  Add
1201	>	xorg 7 support.
1202
1203	<	20041219:
1204	<	Auto-loading of ancillary wlan modules such as wlan_wep has
212	<	been temporarily disabled; you need to statically configure
213	<	the modules you need into your kernel or explicitly load them
214	<	prior to use.  Specifically, if you intend to use WEP encryption
215	<	with an 802.11 device load/configure wlan_wep; if you want to
216	<	use WPA with the ath driver load/configure wlan_tkip, wlan_ccmp,
217	<	and wlan_xauth as required.
1203	>	20080115:
1204	>	Fix the handling of PTY's.  CVE-2008-0216
1205
1206	<	20041213:
1207	<	The behaviour of ppp(8) has changed slightly.  If lqr is enabled
221	<	(``enable lqr''), older versions would revert to LCP ECHO mode on
222	<	negotiation failure.  Now, ``enable echo'' is required for this
223	<	behaviour.  The ppp version number has been bumped to 3.4.2 to
224	<	reflect the change.
1206	>	20080105:
1207	>	mport delete code added, USE_MPORT_TOOLS knob aded.
1208
1209	<	20041201:
1210	<	The wlan support has been updated to split the crypto support
228	<	into separate modules.  For static WEP you must configure the
229	<	wlan_wep module in your system or build and install the module
230	<	in place where it can be loaded (the kernel will auto-load
231	<	the module when a wep key is configured).
1209	>	20080101:
1210	>	Happy New Year
1211
1212	<	20041201:
1213	<	The ath driver has been updated to split the tx rate control
235	<	algorithm into a separate module.  You need to include either
236	<	ath_rate_onoe or ath_rate_amrr when configuring the kernel.
1212	>	20071123:
1213	>	Update sendmail to 8.14.2
1214
1215	<	20041116:
1216	<	Support for systems with an 80386 CPU has been removed.  Please
240	<	use FreeBSD 5.x or earlier on systems with an 80386.
1215	>	20071120:
1216	>	Update system compiler to gcc 3.4.6.
1217
1218	<	20041110:
1219	<	We have had a hack which would mount the root filesystem
244	<	R/W if the device were named 'md*'.  As part of the vnode
245	<	work I'm doing I have had to remove this hack.  People
246	<	building systems which use preloaded MD root filesystems
247	<	may need to insert a "/sbin/mount -u -o rw /dev/md0 /" in
248	<	their /etc/rc scripts.
1218	>	20071023:
1219	>	Updated mksh to R31d.
1220
1221	<	20041104:
1222	<	FreeBSD 5.3 shipped here.
1221	>	20070911:
1222	>	Updated mksh to version R31b.
1223
1224	<	20041102:
1225	<	The size of struct tcpcb has changed again due to the removal
255	<	of RFC1644 T/TCP.  You have to recompile userland programs that
256	<	read kmem for tcp sockets directly (netstat, sockstat, etc.)
1224	>	Fixed stderr output in libpthread.  Previously it was
1225	>	written to stdout.
1226
1227	<	20041022:
1228	<	The size of struct tcpcb has changed.  You have to recompile
1229	<	userland programs that read kmem for tcp sockets directly
261	<	(netstat, sockstat, etc.)
1227	>	20070831:
1228	>	Added dot.mkshrc file to support the recent change to
1229	>	mksh from OpenBSD's ksh derived from pdksh.
1230
1231	<	20041016:
1232	<	RELENG_5 branched here.  For older entries, please see updating
1233	<	in the RELENG_5 branch.
1231	>	Added new firewall configuration.  ipfw is enabled by default
1232	>	with a "desktop" configuration.  Consult /etc/rc.firewall
1233	>	or ipfw show to see the ruleset used.  You can disable
1234	>	ipfw by setting firewall_enable="NO" in /etc/rc.conf This
1235	>	change only effects IPv4.  IPv6 does not have a firewall
1236	>	enabled by default.
1237
1238	<	COMMON ITEMS:
1238	>	20070814:
1239	>	Removed GNU tar source.  We've been using BSD tar
1240	>	for awhile.
1241
1242	<	General Notes
1243	<	-------------
271	<	Avoid using make -j when upgrading.  From time to time in the
272	<	past there have been problems using -j with buildworld and/or
273	<	installworld.  This is especially true when upgrading between
274	<	"distant" versions (eg one that cross a major release boundary
275	<	or several minor releases, or when several months have passed
276	<	on the -current branch).
1242	>	20070806:
1243	>	Finished removing umapfs and autofs from the tree.
1244
1245	<	Sometimes, obscure build problems are the result of environment
1246	<	poisoning.  This can happen because the make utility reads its
280	<	environment when searching for values for global variables.
281	<	To run your build attempts in an "environmental clean room",
282	<	prefix all make commands with 'env -i '.  See the env(1) manual
283	<	page for more details.
1245	>	20070804:
1246	>	BIND and Tcpdump have been patched for recent vulnerabilities.
1247
1248	<	Due to several updates to the build infrastructure, source
286	<	upgrades from versions prior to 5.3 no longer supported.
1248	>	We switched to BSD cpio (pax).
1249
1250	<	When upgrading from one major version to another it is generally
1251	<	best to upgrade to the latest code in the currently installed branch
290	<	first, then do an upgrade to the new branch. This is the best-tested
291	<	upgrade path, and has the highest probability of being successful.
292	<	Please try this approach before reporting problems with a major
293	<	version upgrade.
1250	>	20070719:
1251	>	Imported cpdup from DragonFly as /bin/cpdup
1252
1253	+	20070716:
1254	+	Update GNU cpio to 2.8.
1255	+
1256	+	20070410:
1257	+	cvs was updated to 1.12.13.  cvsbug was removed.
1258	+	cvs now behaves similarly to DragonFly's cvs with
1259	+	most of their local changes.
1260	+
1261	+	20070409:
1262	+	RELENG_0_1 was created. More aggresive changes will
1263	+	continue here.
1264	+
1265	+	20070406:
1266	+	Back out propolice.  propolice caused several problems
1267	+	with our threading libraries libthr and libpthread.
1268	+	curthread was often NULL after the patch and many
1269	+	multithreaded applications would crash.  We plan to
1270	+	work on either bringing in gcc 4.1 or developing a new
1271	+	patch which also corrects our threading issues later.
1272	+
1273	+	It is more important to have a stable system for our
1274	+	mport work and other projects at this time.
1275	+
1276	+	This is not a clean removal.  It is recommended that you
1277	+	have a recently SNAP CD handy.  You can either reinstall
1278	+	or perform a make buildworld and make buildkernel and
1279	+	make installkernel.  Reboot on the cd and copy the contents
1280	+	of /bin, /sbin, /lib, /libexec, and /usr/bin, /usr/sbin,
1281	+	/usr/lib, and /usr/libexec to the respective directories on
1282	+	your disk.  Then you should be able to boot into single user
1283	+	mode and run make installworld.  You will need to run
1284	+	chflags noschg on some of the files if you can't overwrite
1285	+	them.
1286	+
1287	+	You will get __guard missing errors since we had to remove
1288	+	this from libc.
1289	+
1290	+	You will need to rebuild any ports built while propolice was
1291	+	installed.
1292	+
1293	+	20070401:
1294	+	Importing propolice into MidnightBSD. Propolice is going to
1295	+	provide us with much greater security and stability in the
1296	+	long run. If upgrading from a pre-propolice system, please
1297	+	follow the these instructions:
1298	+
1299	+	cd /usr/src/lib/libc && make obj && make && make install
1300	+	cd /usr/src/gnu/usr.bin/cc && make obj && make && make install
1301	+	cd /usr/src/lib/libpthread && make obj && make && make install
1302	+	cd /usr/src/lib/libthr && make obj && make && make install
1303	+	buildworld and kernel
1304	+
1305	+	It is adviced that any mports which were installed and/or built
1306	+	prior to the propolice update also be updated. If any errors
1307	+	or issue are encounted, please contact security@midnightbsd.org
1308	+	and we will be sure to investigate and come up with an expeditious
1309	+	fix.
1310	+
1311	+	20070314:
1312	+	Remove send-pr from src.
1313	+
1314	+	Switch to NetBSD's gzip.
1315	+
1316	+	Bump MBSD minor revision.
1317	+
1318	+	20070313:
1319	+	Imported OpenSSH 4.6p1.
1320	+
1321	+	Imported FreeBSD's libarchive and updated tar to work with it.
1322	+
1323	+	Disabled debug statements cluttering up /var/log/messages for
1324	+	the tcp autobuf patch applied previously.
1325	+
1326	+	20070312:
1327	+	Synced several audio changes from FreeBSD 6.1. Removed the
1328	+	BSD Daemon files from src/share.
1329	+
1330	+	20070308:
1331	+	Added mfi which supports LSI Logic MegaRAID SAS devices including
1332	+	the Dell perc5i.
1333	+
1334	+	20070206:
1335	+	Imported OpenBSD's sudo into source. Please install
1336	+	/usr/src/usr.bin/sudo/lib first before building.
1337	+
1338	+	Those who install from a snapshot after this date
1339	+	will not be effected.
1340	+
1341	+	20070119:
1342	+	Added audit group.  Be sure to add audit to your /etc/group file
1343	+	before installing world.
1344	+
1345	+	hostapd was updated to 0.4.8.
1346	+
1347	+	An accidental commit in usr.sbin/bluetooth/hccontrol was fixed to
1348	+	unbreak world.
1349	+
1350	+	wpa_supplicant was updated.
1351	+
1352	+	For stability and compatibility reasons, it was decided that MidnightBSD
1353	+	sync with FreeBSD 6.1 Release.  Nearly every change between the original
1354	+	fork date of February 24, 2006 and the release of FreeBSD 6.1 in May
1355	+	2006 will be merged.  Beyond this, MidnightBSD will be a "real" fork and
1356	+	will not sync every little change with FreeBSD.
1357	+
1358	+	20061231:
1359	+	Updated COPYRIGHT for 2007.
1360	+
1361	+	Updated and bumped libutil after importing NetBSD efun(3) functions.
1362	+
1363	+	Added MidnightBSD_version and bumped the FreeBSD version as we've
1364	+	synced all commits between the fork and that version.  It is now safe
1365	+	to assume MidnightBSD is compatible with FreeBSD RELENG_6 from
1366	+	Feb 26, 2006.
1367	+
1368	+	Added spell(1) and deroff(1) from NetBSD.  Also added additional
1369	+	dict files to work with it. /usr/share/dict/american,
1370	+	/usr/share/dict/british and /usr/share/dict/special/math
1371	+
1372	+	Numerous man page and bug fixes.
1373	+
1374	+	20061226:
1375	+	Setup /usr/share/examples/cvsup SUPfiles for the new
1376	+	MidnightBSD CVSup server.
1377	+
1378	+	Fix a bug in burncd where it would continue forever while
1379	+	erasing CDRW media.
1380	+
1381	+	Add csup to /usr/bin.  csup is a CVSup replacement written
1382	+	in C.
1383	+
1384	+	Fixed a bug with bsnmpd build from Oct 30.
1385	+
1386	+	Corrected some race conditions and fixed a few bugs in
1387	+	geom.  Imported changes from FreeBSD RELENG_6.
1388	+
1389	+	20061225:
1390	+	Fixed a typo in src/lib/libc/sparc64/fpu/fpu_implode.c
1391	+	that caused long double to long and long long
1392	+	conversion of negative numbers to always result in -1.
1393	+
1394	+	20061221:
1395	+	Fixed acpi_battery.c to not report an ERROR if no
1396	+	batteries are present.
1397	+
1398	+	Performed some minor updates on the RL and RE NIC drivers.
1399	+	RL should no longer panic when trying to print errors.
1400	+
1401	+	Corrected a bug with TTY.
1402	+
1403	+	20061218:
1404	+	Corrected a bug with libpthread where newly created suspended
1405	+	threads don't get scheduled.
1406	+
1407	+	20061206:
1408	+	Fixed a typo with the firewire security patch.
1409	+
1410	+	20061129:
1411	+	Minor cleanups to utilities in bin.
1412	+
1413	+	Fixed msdos file system short file name behavior to match
1414	+	FreeBSD.
1415	+
1416	+	20061031:
1417	+	Updated man pages in section 7.
1418	+
1419	+	20061030:
1420	+	Updated sys/dev/drm to support intel 915 and radeon
1421	+	r300 cards properly.
1422	+
1423	+	Synced snmpd with FreeBSD-stable.
1424	+
1425	+	Fixed a bug in rm which could cause data loss.
1426	+
1427	+	20061027:
1428	+	Added Intel ICH8 and nForce 5 support to ATA. cam, mpt,
1429	+	random, kbdmux, atkbd, and usb were updated.  Changes
1430	+	to clearing registers on SSE enabled processors (i386)
1431	+	commited.
1432	+
1433	+	lukemftpd updated.
1434	+
1435	+	openssh rc script was altered which effects initial
1436	+	seeding.
1437	+
1438	+	20061014:
1439	+	Workaround for em driver problem on shared IRQ.
1440	+
1441	+	Started removal of alpha support.
1442	+
1443	+	20061013:
1444	+	ATA driver was updated.  USB/USB1/USB2 types added.
1445	+
1446	+	20061010:
1447	+	OpenSSH was updated to 4.4p1.
1448	+
1449	+	20060909:
1450	+	OpenNTPD was added to MidnightBSD.  Run make delete-old to remove
1451	+	the old ntpd daemon.
1452	+
1453	+	cat has a new option -D which allows you to timestamp output
1454	+	on a per line basis.
1455	+
1456	+	The kernel has a keyboard mux which allows you to have multiple
1457	+	keyboard connected simultaneously.  USB keyboard support was also
1458	+	improved with this patch.
1459	+
1460	+	The Intel em driver was updated.  Network performance was greatly
1461	+	increased on many systems.  Additional models are supported.
1462	+
1463	+	The ATA driver was patched to fix a potential deadlock.
1464	+
1465	+	Bind was patched to fix a potential denial of service condition.
1466	+
1467	+	20060817:
1468	+	ksh has been added to the base system.  If you previously had
1469	+	the port installed, it will be overwritten on the next buildworld.
1470	+
1471	+
1472	+
1473		To build a kernel
1474		-----------------
1475	<	If you are updating from a prior version of FreeBSD (even one just
1475	>	If you are updating from a prior version of MidnightBSD (even one just
1476		a few days old), you should follow this procedure. With a
1477		/usr/obj tree with a fresh buildworld,
1478		make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
#	Line 312 | Line 1490 | COMMON ITEMS:
1490		--------------------------------------------------------------
1491		This assumes you are already running a 6.X system.  Replace
1492		${arch} with the architecture of your machine (e.g. "i386",
1493	<	"alpha", "amd64", "ia64", "pc98", "sparc64", etc).
1493	>	"amd64", "ia64", "pc98", "sparc64", etc).
1494
1495		cd src/sys/${arch}/conf
1496		config KERNEL_NAME_HERE
#	Line 432 | Line 1610 | COMMON ITEMS:
1610		MAKEOBJDIRPREFIX must be defined in an environment variable, and
1611		not on the command line, or in /etc/make.conf.  buildworld will
1612		warn if it is improperly defined.
435	–	FORMAT:
1613
437	–	This file contains a list, in reverse chronological order, of major
438	–	breakages in tracking -STABLE.  Not all things will be listed here,
439	–	and it only starts on October 16, 2004.  Updating files can found in
440	–	previous releases if your system is older than this.
441	–
1614		Copyright information:
1615
1616		Copyright 1998-2005 M. Warner Losh.  All Rights Reserved.
#	Line 466 | Line 1638 | Contact Warner Losh if you have any questions about yo
1638		this document.
1639
1640		$FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
1641	+	$MidnightBSD$

Comparing:
branches/MidnightBSD/UPDATING (property cvs2svn:cvs-rev), Revision 5 by laffer1, Sat Feb 25 02:38:42 2006 UTC vs.
trunk/UPDATING (property cvs2svn:cvs-rev), Revision 7210 by laffer1, Thu Aug 6 00:10:00 2015 UTC

#	Line 1 | Line 0
1	–	1.1.1.2

Comparing:
branches/MidnightBSD/UPDATING (property svn:keywords), Revision 5 by laffer1, Sat Feb 25 02:38:42 2006 UTC vs.
trunk/UPDATING (property svn:keywords), Revision 7210 by laffer1, Thu Aug 6 00:10:00 2015 UTC

#	Line 0 | Line 1
1	+	MidnightBSD=%H

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines
>	Changed lines