ViewVC Help
View Directory | Revision Log | View Changeset | Root Listing
root/src/stable
Revision 12403 - Directory Listing - [select for diffs]
Modified Tue Mar 17 01:12:19 2020 UTC (22 months, 1 week ago) by laffer1
Diff to previous 12295
fixup

Revision 12295 - Directory Listing - [select for diffs]
Modified Tue Jan 28 20:47:09 2020 UTC (23 months, 4 weeks ago) by laffer1
Diff to previous 12292
fix a buffer overflow in libfetch

Revision 12292 - Directory Listing - [select for diffs]
Modified Wed Jan 1 00:02:55 2020 UTC (2 years ago) by laffer1
Diff to previous 12290
Fix some installation problems with samples that have an absolute prefix.  (firebird-server)

Revision 12290 - Directory Listing - [select for diffs]
Modified Wed Nov 13 06:03:52 2019 UTC (2 years, 2 months ago) by laffer1
Diff to previous 12289
remove some of the debug logging. add an os check for now to work around old versions that won't upgrade

Revision 12289 - Directory Listing - [select for diffs]
Modified Wed Nov 13 06:01:17 2019 UTC (2 years, 2 months ago) by laffer1
Diff to previous 12285
workaround some bugs with mport upgrade for now

Revision 12285 - Directory Listing - [select for diffs]
Modified Wed Nov 13 03:34:36 2019 UTC (2 years, 2 months ago) by laffer1
Diff to previous 12284
Introduce the ability to clean packages that fail checksum or don't match the current index.

Revision 12284 - Directory Listing - [select for diffs]
Modified Wed Nov 13 03:32:20 2019 UTC (2 years, 2 months ago) by laffer1
Diff to previous 12282
clean needs the index loaded in order to delete packages.

Revision 12282 - Directory Listing - [select for diffs]
Modified Thu Oct 31 15:22:37 2019 UTC (2 years, 2 months ago) by laffer1
Diff to previous 12281
mark release

Revision 12281 - Directory Listing - [select for diffs]
Modified Tue Oct 29 15:01:04 2019 UTC (2 years, 2 months ago) by laffer1
Diff to previous 12280
fix packages exclude

Revision 12280 - Directory Listing - [select for diffs]
Modified Tue Oct 29 14:57:27 2019 UTC (2 years, 2 months ago) by laffer1
Diff to previous 12278
add hasmap imp

Revision 12278 - Directory Listing - [select for diffs]
Modified Tue Oct 29 14:14:05 2019 UTC (2 years, 2 months ago) by laffer1
Diff to previous 12277
fix path

Revision 12277 - Directory Listing - [select for diffs]
Modified Fri Oct 18 22:08:02 2019 UTC (2 years, 3 months ago) by laffer1
Diff to previous 12274
remove debug stuff

Revision 12274 - Directory Listing - [select for diffs]
Modified Fri Oct 18 16:19:58 2019 UTC (2 years, 3 months ago) by laffer1
Diff to previous 12273
Bump MidnightBSD version to 1.1.3

Revision 12273 - Directory Listing - [select for diffs]
Modified Fri Oct 18 16:18:49 2019 UTC (2 years, 3 months ago) by laffer1
Diff to previous 12272
document some improvements

Revision 12272 - Directory Listing - [select for diffs]
Modified Fri Oct 18 16:16:05 2019 UTC (2 years, 3 months ago) by laffer1
Diff to previous 12271
update acpi_ibm compatibiility

Revision 12271 - Directory Listing - [select for diffs]
Modified Fri Oct 18 16:13:38 2019 UTC (2 years, 3 months ago) by laffer1
Diff to previous 12268
fix a write bug with updating nsswitch.conf

Revision 12268 - Directory Listing - [select for diffs]
Modified Thu Oct 17 23:03:21 2019 UTC (2 years, 3 months ago) by laffer1
Diff to previous 12263
Create stable branch for 1.2

Revision 12263 - Directory Listing - [select for diffs]
Modified Thu Aug 22 22:48:41 2019 UTC (2 years, 5 months ago) by laffer1
Diff to previous 12261
System calls operating on file descriptors obtain a reference to
relevant struct file which due to a programming error was not always put
back, which in turn could be used to overflow the counter of affected
struct file.

Revision 12261 - Directory Listing - [select for diffs]
Modified Thu Aug 22 22:45:11 2019 UTC (2 years, 5 months ago) by laffer1
Diff to previous 12258
        The kernel driver for /dev/midistat implements a handler for read(2).
        This handler is not thread-safe, and a multi-threaded program can
        exploit races in the handler to cause it to copy out kernel memory
        outside the boundaries of midistat's data buffer.

Revision 12258 - Directory Listing - [select for diffs]
Modified Thu Aug 22 12:32:20 2019 UTC (2 years, 5 months ago) by laffer1
Diff to previous 12257
document releases vs patches

Revision 12257 - Directory Listing - [select for diffs]
Modified Thu Aug 22 12:31:35 2019 UTC (2 years, 5 months ago) by laffer1
Diff to previous 12256
document patch

Revision 12256 - Directory Listing - [select for diffs]
Modified Wed Aug 21 13:20:27 2019 UTC (2 years, 5 months ago) by laffer1
Diff to previous 12254
Due do a missing check in the code of m_pulldown(9) data returned may not be
contiguous as requested by the caller.

Revision 12254 - Directory Listing - [select for diffs]
Modified Sun Aug 18 19:35:40 2019 UTC (2 years, 5 months ago) by laffer1
Diff to previous 12242
update version

Revision 12242 - Directory Listing - [select for diffs]
Modified Fri Aug 9 01:32:27 2019 UTC (2 years, 5 months ago) by laffer1
Diff to previous 12239
document some patches

Revision 12239 - Directory Listing - [select for diffs]
Modified Fri Aug 9 01:29:32 2019 UTC (2 years, 5 months ago) by laffer1
Diff to previous 12232
A function extracting the length from type-length-value encoding is not
properly validating the submitted length.

Revision 12232 - Directory Listing - [select for diffs]
Modified Thu Aug 8 23:06:02 2019 UTC (2 years, 5 months ago) by laffer1
Diff to previous 12231
update to 1.0.7

Revision 12231 - Directory Listing - [select for diffs]
Modified Thu Aug 8 23:05:20 2019 UTC (2 years, 5 months ago) by laffer1
Diff to previous 12225
update bzip2

Revision 12225 - Directory Listing - [select for diffs]
Modified Thu Aug 1 14:01:04 2019 UTC (2 years, 5 months ago) by laffer1
Diff to previous 12224
update path for 5.28.0

Revision 12224 - Directory Listing - [select for diffs]
Modified Sat Jul 27 16:12:38 2019 UTC (2 years, 6 months ago) by laffer1
Diff to previous 12223
bump version for security patches

Revision 12223 - Directory Listing - [select for diffs]
Modified Thu Jul 25 03:22:27 2019 UTC (2 years, 6 months ago) by laffer1
Diff to previous 12221
If a process attempts to transmit rights over a UNIX-domain socket and
an error causes the attempt to fail, references acquired on the rights
are not released and are leaked.  This bug can be used to cause the
reference counter to wrap around and free the corresponding file
structure.

Revision 12221 - Directory Listing - [select for diffs]
Modified Thu Jul 25 03:20:00 2019 UTC (2 years, 6 months ago) by laffer1
Diff to previous 12220
document mqueuefs(5) issue

Revision 12220 - Directory Listing - [select for diffs]
Modified Thu Jul 25 03:18:44 2019 UTC (2 years, 6 months ago) by laffer1
Diff to previous 12218
System calls operating on file descriptors obtain a reference to
relevant struct file which due to a programming error was not always put
back, which in turn could be used to overflow the counter of affected
struct file.

Revision 12218 - Directory Listing - [select for diffs]
Modified Wed Jul 24 22:55:45 2019 UTC (2 years, 6 months ago) by laffer1
Diff to previous 12215
Due to insufficient initialization of memory copied to userland in the
components listed above small amounts of kernel memory may be disclosed
to userland processes.

Revision 12215 - Directory Listing - [select for diffs]
Modified Wed Jul 24 22:52:34 2019 UTC (2 years, 6 months ago) by laffer1
Diff to previous 12212
The code which handles a close(2) of a descriptor created by
posix_openpt(2) fails to undo the configuration which causes SIGIO to be
raised.  This bug can lead to a write-after-free of kernel memory.

Revision 12212 - Directory Listing - [select for diffs]
Modified Wed Jul 24 22:49:32 2019 UTC (2 years, 6 months ago) by laffer1
Diff to previous 12204
Fix some security issues in telnet client.

Revision 12204 - Directory Listing - [select for diffs]
Modified Sun May 26 17:22:01 2019 UTC (2 years, 8 months ago) by laffer1
Diff to previous 12194
fix some bugs with pkg message printing

Revision 12194 - Directory Listing - [select for diffs]
Modified Wed Apr 17 22:35:57 2019 UTC (2 years, 9 months ago) by laffer1
Diff to previous 12191
bring back deroff to fix spell(1)

Revision 12191 - Directory Listing - [select for diffs]
Modified Wed Apr 17 22:31:51 2019 UTC (2 years, 9 months ago) by laffer1
Diff to previous 12190
bring deroff back to fix spell

Revision 12190 - Directory Listing - [select for diffs]
Modified Sat Feb 23 22:14:18 2019 UTC (2 years, 11 months ago) by laffer1
Diff to previous 12189
add config get/set for regions

Revision 12189 - Directory Listing - [select for diffs]
Modified Sat Feb 23 22:12:13 2019 UTC (2 years, 11 months ago) by laffer1
Diff to previous 12188
document mport upgrade

Revision 12188 - Directory Listing - [select for diffs]
Modified Sat Feb 23 22:11:31 2019 UTC (2 years, 11 months ago) by laffer1
Diff to previous 12187
MFC: mport origin feature for info and query

Revision 12187 - Directory Listing - [select for diffs]
Modified Sat Feb 23 22:10:34 2019 UTC (2 years, 11 months ago) by laffer1
Diff to previous 12186
Update mport tool with latest from current. fixes memory free issue, adds region support

Revision 12186 - Directory Listing - [select for diffs]
Modified Sat Feb 23 22:09:01 2019 UTC (2 years, 11 months ago) by laffer1
Diff to previous 12185
document mport changes.

Revision 12185 - Directory Listing - [select for diffs]
Modified Sat Feb 23 22:07:58 2019 UTC (2 years, 11 months ago) by laffer1
Diff to previous 12184
add origin flag aka -o which will print out the origin with query or info

Revision 12184 - Directory Listing - [select for diffs]
Modified Sat Feb 23 22:07:31 2019 UTC (2 years, 11 months ago) by laffer1
Diff to previous 12181
update version checks

Revision 12181 - Directory Listing - [select for diffs]
Modified Tue Feb 19 00:33:02 2019 UTC (2 years, 11 months ago) by laffer1
Diff to previous 12180
document abs path issue

Revision 12180 - Directory Listing - [select for diffs]
Modified Tue Feb 19 00:32:13 2019 UTC (2 years, 11 months ago) by laffer1
Diff to previous 12174
Fix a bug in mport package manager when creating packages with absolute paths.

Revision 12174 - Directory Listing - [select for diffs]
Modified Sun Feb 10 17:02:00 2019 UTC (2 years, 11 months ago) by laffer1
Diff to previous 12163
Add portsnap(8)

Revision 12163 - Directory Listing - [select for diffs]
Modified Mon Jan 21 15:29:52 2019 UTC (3 years ago) by laffer1
Diff to previous 12159
Release config for kernels

Revision 12159 - Directory Listing - [select for diffs]
Modified Sun Jan 20 18:21:53 2019 UTC (3 years ago) by laffer1
Diff to previous 12113
Create stable branch for 1.1

Revision 12113 - Directory Listing - [select for diffs]
Modified Tue Oct 30 01:51:12 2018 UTC (3 years, 2 months ago) by laffer1
Diff to previous 12100
avoid double free

Revision 12100 - Directory Listing - [select for diffs]
Modified Sun Oct 7 17:11:16 2018 UTC (3 years, 3 months ago) by laffer1
Diff to previous 12096
MFC: fix typo

Revision 12096 - Directory Listing - [select for diffs]
Modified Tue Oct 2 14:47:48 2018 UTC (3 years, 3 months ago) by laffer1
Diff to previous 12095
document groff is back

Revision 12095 - Directory Listing - [select for diffs]
Modified Tue Oct 2 14:45:05 2018 UTC (3 years, 3 months ago) by laffer1
Diff to previous 12094
switch to prod configs for kernel

Revision 12094 - Directory Listing - [select for diffs]
Modified Tue Oct 2 14:42:31 2018 UTC (3 years, 3 months ago) by laffer1
Diff to previous 12082
fixup

Revision 12082 - Directory Listing - [select for diffs]
Modified Sat Sep 29 16:05:34 2018 UTC (3 years, 3 months ago) by laffer1
Diff to previous 9844
MidnightBSD 1.0

Revision 9844 - Directory Listing - [select for diffs]
Modified Tue May 15 20:52:32 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9843
fix double free

Revision 9843 - Directory Listing - [select for diffs]
Modified Tue May 15 20:51:58 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9841
fix double free

Revision 9841 - Directory Listing - [select for diffs]
Modified Sun May 13 23:23:30 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9839
drop rsa1 from sshd, not safe

Revision 9839 - Directory Listing - [select for diffs]
Modified Sun May 13 22:02:01 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9838
remove rsa1 from sshd

Revision 9838 - Directory Listing - [select for diffs]
Modified Sat May 12 13:46:16 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9837
add support for -q and -o flags which allow compact versions of which for scripts

Revision 9837 - Directory Listing - [select for diffs]
Modified Sat May 12 13:46:07 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9835
add support for -q and -o flags which allow compact versions of which for scripts

Revision 9835 - Directory Listing - [select for diffs]
Modified Fri May 11 22:22:45 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9834
Update mport package manager.

Add enhanced .sample file handling

Introduce basic which command that can tell you what package a file belongs to.
e.g. mport which /usr/local/bin/python

Revision 9834 - Directory Listing - [select for diffs]
Modified Fri May 11 22:20:52 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9833
Update mport package manager.

Add enhanced .sample file handling

Introduce basic which command that can tell you what package a file belongs to.
e.g. mport which /usr/local/bin/python

Revision 9833 - Directory Listing - [select for diffs]
Modified Fri May 11 22:18:50 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9824
add ldflags strip

Revision 9824 - Directory Listing - [select for diffs]
Modified Mon Apr 30 03:37:14 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9823
src compatibility

Revision 9823 - Directory Listing - [select for diffs]
Modified Mon Apr 30 03:36:52 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9821
src compatibility

Revision 9821 - Directory Listing - [select for diffs]
Modified Mon Apr 30 03:32:41 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9820
install stdatomic.h

Revision 9820 - Directory Listing - [select for diffs]
Modified Mon Apr 30 03:32:05 2018 UTC (3 years, 8 months ago) by laffer1
Diff to previous 9815
install stdatomic.h

Revision 9815 - Directory Listing - [select for diffs]
Modified Wed Apr 4 13:03:11 2018 UTC (3 years, 9 months ago) by laffer1
Diff to previous 9814
document ipsec fix

Revision 9814 - Directory Listing - [select for diffs]
Modified Wed Apr 4 13:02:08 2018 UTC (3 years, 9 months ago) by laffer1
Diff to previous 9813
The length field of the option header does not count the size of the option
header itself.  This causes a problem when the length is zero, the count is
then incremented by zero, which causes an infinite loop.

In addition there are pointer/offset mistakes in the handling of IPv4
options.

Obtained from: FreeBSD

Revision 9813 - Directory Listing - [select for diffs]
Modified Wed Apr 4 13:01:20 2018 UTC (3 years, 9 months ago) by laffer1
Diff to previous 9803
The length field of the option header does not count the size of the option
header itself.  This causes a problem when the length is zero, the count is
then incremented by zero, which causes an infinite loop.

In addition there are pointer/offset mistakes in the handling of IPv4
options.

Obtained from: FreeBSD

Revision 9803 - Directory Listing - [select for diffs]
Modified Sat Mar 3 22:50:41 2018 UTC (3 years, 10 months ago) by laffer1
Diff to previous 9802
update copyright on this branch

Revision 9802 - Directory Listing - [select for diffs]
Modified Sat Mar 3 22:50:11 2018 UTC (3 years, 10 months ago) by laffer1
Diff to previous 9801
document recent changes

Revision 9801 - Directory Listing - [select for diffs]
Modified Fri Mar 2 22:56:27 2018 UTC (3 years, 10 months ago) by laffer1
Diff to previous 9800
bump the version

Revision 9800 - Directory Listing - [select for diffs]
Modified Fri Mar 2 22:02:29 2018 UTC (3 years, 10 months ago) by laffer1
Diff to previous 9799
Fix the client isde krpc from doing TCP reconnects for ERESTART for sosend()

Needed for Amazon EFS

Revision 9799 - Directory Listing - [select for diffs]
Modified Fri Mar 2 22:01:57 2018 UTC (3 years, 10 months ago) by laffer1
Diff to previous 9796
Fix the client isde krpc from doing TCP reconnects for ERESTART for sosend()

Needed for Amazon EFS

Revision 9796 - Directory Listing - [select for diffs]
Modified Fri Mar 2 21:50:46 2018 UTC (3 years, 10 months ago) by laffer1
Diff to previous 9795
fix c99 mode that breaks xen build with clang

Revision 9795 - Directory Listing - [select for diffs]
Modified Wed Feb 28 02:46:33 2018 UTC (3 years, 10 months ago) by laffer1
Diff to previous 9672
c99

Revision 9672 - Directory Listing - [select for diffs]
Modified Thu Nov 23 17:23:14 2017 UTC (4 years, 2 months ago) by laffer1
Diff to previous 9671
document mport improvemnt

Revision 9671 - Directory Listing - [select for diffs]
Modified Thu Nov 23 17:21:33 2017 UTC (4 years, 2 months ago) by laffer1
Diff to previous 9669
MFC: support installing multiple packages from install

Revision 9669 - Directory Listing - [select for diffs]
Modified Thu Nov 23 17:19:06 2017 UTC (4 years, 2 months ago) by laffer1
Diff to previous 9633
MFC: add support for multiple packages on install

Revision 9633 - Directory Listing - [select for diffs]
Modified Wed Oct 11 23:43:49 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9632
move posix_spawn family into fbsd symbol. This fixes backward compatibility with freebsd 9 binaries. The symbol is still present for MNBSD_1.0

Revision 9632 - Directory Listing - [select for diffs]
Modified Wed Oct 11 23:42:31 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9630
move posix_spawn family into fbsd symbol. This fixes backward compatibility with freebsd 9 binaries. The symbol is still present for MNBSD_1.0

Revision 9630 - Directory Listing - [select for diffs]
Modified Fri Oct 6 21:12:26 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9627
MFC: rev 9629 add support for multi argument @sample src dest

Revision 9627 - Directory Listing - [select for diffs]
Modified Fri Oct 6 18:10:11 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9626
try to avoid gdbm

Revision 9626 - Directory Listing - [select for diffs]
Modified Fri Oct 6 18:09:26 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9625
tag

Revision 9625 - Directory Listing - [select for diffs]
Modified Fri Oct 6 18:08:53 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9618
disable bmake on this branch for now.

Revision 9618 - Directory Listing - [select for diffs]
Modified Wed Oct 4 14:38:56 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9617
document sqlite and perl updates.

Revision 9617 - Directory Listing - [select for diffs]
Modified Wed Oct 4 14:38:33 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9616
sqlite 3.20.1

Revision 9616 - Directory Listing - [select for diffs]
Modified Wed Oct 4 14:22:05 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9615
drop gdbm

Revision 9615 - Directory Listing - [select for diffs]
Modified Wed Oct 4 14:20:28 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9614
turn off gdbm and fix symlink

Revision 9614 - Directory Listing - [select for diffs]
Modified Wed Oct 4 14:13:25 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9606
merge perl 5.26.0

Revision 9606 - Directory Listing - [select for diffs]
Modified Sun Oct 1 22:40:26 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9602
MFC: amdtemp coversion (rev 9604)

Revision 9602 - Directory Listing - [select for diffs]
Modified Sun Oct 1 22:12:45 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9590
MFC: subversion 1.8.17

Revision 9590 - Directory Listing - [select for diffs]
Modified Sun Oct 1 18:25:51 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9587
describe recent additions

Revision 9587 - Directory Listing - [select for diffs]
Modified Sun Oct 1 18:04:03 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9586
set to 0.9 for this branch.

Revision 9586 - Directory Listing - [select for diffs]
Modified Sun Oct 1 18:03:31 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9581
set to 0.9 for this branch.

Revision 9581 - Directory Listing - [select for diffs]
Modified Sun Oct 1 16:03:07 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9580
Re-create 0.9 stable branch from current.

Revision 9580 - Directory Listing - [select for diffs]
Modified Sun Oct 1 16:02:00 2017 UTC (4 years, 3 months ago) by laffer1
Diff to previous 9540
Deleteing the branch so we can re-roll it from current after fixing a number of issues. It's quicker than merging at this point.

Revision 9540 - Directory Listing - [select for diffs]
Modified Sat Sep 16 03:08:11 2017 UTC (4 years, 4 months ago) by laffer1
Diff to previous 9539
fix a bad revert.

Revision 9539 - Directory Listing - [select for diffs]
Modified Sat Sep 16 03:06:05 2017 UTC (4 years, 4 months ago) by laffer1
Diff to previous 9538
update pci vendor list to today

Revision 9538 - Directory Listing - [select for diffs]
Modified Sat Sep 16 03:05:44 2017 UTC (4 years, 4 months ago) by laffer1
Diff to previous 9533
update pci vendor list to today

Revision 9533 - Directory Listing - [select for diffs]
Modified Sun Aug 20 00:03:22 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9532
Ryzen workaround #1

Revision 9532 - Directory Listing - [select for diffs]
Modified Sun Aug 20 00:01:58 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9530
ryzen workaround #1

Revision 9530 - Directory Listing - [select for diffs]
Modified Sat Aug 19 15:35:50 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9529
mention heimdal patch

Revision 9529 - Directory Listing - [select for diffs]
Modified Sat Aug 19 15:35:26 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9526
mention heimdal patch

Revision 9526 - Directory Listing - [select for diffs]
Modified Sat Aug 19 15:33:50 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9525
fix an impersonation attack against heimdal.

Revision 9525 - Directory Listing - [select for diffs]
Modified Sat Aug 19 15:33:08 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9524
fix an impersonation attack against heimdal.

Revision 9524 - Directory Listing - [select for diffs]
Modified Sat Aug 19 03:12:49 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9523
Bumped midnightbsd version so document here.

Revision 9523 - Directory Listing - [select for diffs]
Modified Sat Aug 19 03:11:17 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9522
bump version after usb stack and em(4) update

Revision 9522 - Directory Listing - [select for diffs]
Modified Sat Aug 19 03:10:43 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9519
bump after usb stack update

Revision 9519 - Directory Listing - [select for diffs]
Modified Sat Aug 19 03:07:48 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9518
sync up usb stack with freebsd 9 stable

Revision 9518 - Directory Listing - [select for diffs]
Modified Sat Aug 19 02:11:51 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9517
Upgrade USB stack to FreeBSD 9-stable version. (from yesterday)

Revision 9517 - Directory Listing - [select for diffs]
Modified Wed Aug 16 13:52:17 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9516
update makefiles for new driver version

Revision 9516 - Directory Listing - [select for diffs]
Modified Wed Aug 16 13:51:40 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9513
update man pages

Revision 9513 - Directory Listing - [select for diffs]
Modified Wed Aug 16 02:02:05 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9512
update the intel nic man pages

Revision 9512 - Directory Listing - [select for diffs]
Modified Wed Aug 16 01:52:43 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9511
update makefiles for new em(4)

Revision 9511 - Directory Listing - [select for diffs]
Modified Wed Aug 16 01:51:57 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9510
upgrade to freebsd 10 stable em(4) driver.

Revision 9510 - Directory Listing - [select for diffs]
Modified Wed Aug 16 01:50:47 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9508
upgrade to freebsd 10 stable intel em(4) driver

Revision 9508 - Directory Listing - [select for diffs]
Modified Tue Aug 15 10:42:37 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9507
sync Intel nic driver (em/igb) with FreeBSD 9 stable august 14, 2017

Revision 9507 - Directory Listing - [select for diffs]
Modified Tue Aug 15 10:42:25 2017 UTC (4 years, 5 months ago) by laffer1
Diff to previous 9505
sync Intel nic driver (em/igb) with FreeBSD 9 stable august 14, 2017

Revision 9505 - Directory Listing - [select for diffs]
Modified Sun Mar 26 15:51:30 2017 UTC (4 years, 10 months ago) by laffer1
Diff to previous 9504
remove apple headers

Revision 9504 - Directory Listing - [select for diffs]
Modified Sun Mar 26 15:46:43 2017 UTC (4 years, 10 months ago) by laffer1
Diff to previous 9503
remove mach references

Revision 9503 - Directory Listing - [select for diffs]
Modified Sun Mar 26 15:45:02 2017 UTC (4 years, 10 months ago) by laffer1
Diff to previous 9501
remove liblaunch from makefile

Revision 9501 - Directory Listing - [select for diffs]
Modified Sun Mar 26 15:41:12 2017 UTC (4 years, 10 months ago) by laffer1
Diff to previous 9500
sudo removed from base. Use doas(1) or install sudo from mports

Revision 9500 - Directory Listing - [select for diffs]
Modified Sun Mar 26 15:39:48 2017 UTC (4 years, 10 months ago) by laffer1
Diff to previous 9498
remove sudo

Revision 9498 - Directory Listing - [select for diffs]
Modified Sun Mar 26 15:31:47 2017 UTC (4 years, 10 months ago) by laffer1
Diff to previous 9497
remove mach code we have been experimenting with from the stable branch. it will not go into this release

Revision 9497 - Directory Listing - [select for diffs]
Modified Sun Mar 26 15:24:06 2017 UTC (4 years, 10 months ago) by laffer1
Diff to previous 9496
bump midnightbsd version

Revision 9496 - Directory Listing - [select for diffs]
Modified Sun Mar 26 15:23:18 2017 UTC (4 years, 10 months ago) by laffer1
Diff to previous 9494
document stable branch creation

Revision 9494 - Directory Listing - [select for diffs]
Modified Sun Mar 26 15:15:03 2017 UTC (4 years, 10 months ago) by laffer1
Diff to previous 9271
Create stable 0.9 branch

Revision 9271 - Directory Listing - [select for diffs]
Modified Mon Feb 20 02:54:32 2017 UTC (4 years, 11 months ago) by laffer1
Diff to previous 9270
subversion 1.8.10

Revision 9270 - Directory Listing - [select for diffs]
Modified Mon Feb 20 02:54:06 2017 UTC (4 years, 11 months ago) by laffer1
Diff to previous 9269
subversion 1.8.10

Revision 9269 - Directory Listing - [select for diffs]
Modified Mon Feb 20 02:52:52 2017 UTC (4 years, 11 months ago) by laffer1
Diff to previous 9268
update serf 1.3.9

Revision 9268 - Directory Listing - [select for diffs]
Modified Mon Feb 20 02:52:22 2017 UTC (4 years, 11 months ago) by laffer1
Diff to previous 9249
merge in serf 1.3.9

Revision 9249 - Directory Listing - [select for diffs]
Modified Thu Jan 12 23:40:47 2017 UTC (5 years ago) by laffer1
Diff to previous 9246
add missing lib that is breaking build

Revision 9246 - Directory Listing - [select for diffs]
Modified Wed Dec 14 02:31:10 2016 UTC (5 years, 1 month ago) by laffer1
Diff to previous 9245
bump version

Revision 9245 - Directory Listing - [select for diffs]
Modified Wed Dec 14 02:30:52 2016 UTC (5 years, 1 month ago) by laffer1
Diff to previous 9244
bump version

Revision 9244 - Directory Listing - [select for diffs]
Modified Wed Dec 14 02:16:56 2016 UTC (5 years, 1 month ago) by laffer1
Diff to previous 9243
document changes

Revision 9243 - Directory Listing - [select for diffs]
Modified Wed Dec 14 02:02:23 2016 UTC (5 years, 1 month ago) by laffer1
Diff to previous 9242
prevent static buffer overflow in link_ntoa(3)

Revision 9242 - Directory Listing - [select for diffs]
Modified Wed Dec 14 02:01:52 2016 UTC (5 years, 1 month ago) by laffer1
Diff to previous 9238
security patch telnetd login(1) issue

Revision 9238 - Directory Listing - [select for diffs]
Modified Fri Nov 11 23:14:21 2016 UTC (5 years, 2 months ago) by laffer1
Diff to previous 9233
tune libs

Revision 9233 - Directory Listing - [select for diffs]
Modified Fri Nov 11 02:27:44 2016 UTC (5 years, 2 months ago) by laffer1
Diff to previous 9232
bump os to 0.8.4

Revision 9232 - Directory Listing - [select for diffs]
Modified Fri Nov 11 02:27:19 2016 UTC (5 years, 2 months ago) by laffer1
Diff to previous 9231
bump OS version.

Revision 9231 - Directory Listing - [select for diffs]
Modified Fri Nov 11 02:25:49 2016 UTC (5 years, 2 months ago) by laffer1
Diff to previous 9230
tweak some defaults

Revision 9230 - Directory Listing - [select for diffs]
Modified Fri Nov 11 02:19:37 2016 UTC (5 years, 2 months ago) by laffer1
Diff to previous 9229
fix build of openssh

Revision 9229 - Directory Listing - [select for diffs]
Modified Thu Nov 10 23:53:41 2016 UTC (5 years, 2 months ago) by laffer1
Diff to previous 9220
work in progress on merging openssh 7.3

Revision 9220 - Directory Listing - [select for diffs]
Modified Sat Nov 5 20:24:10 2016 UTC (5 years, 2 months ago) by laffer1
Diff to previous 9218
merge in doc fixes

Revision 9218 - Directory Listing - [select for diffs]
Modified Sat Nov 5 17:20:01 2016 UTC (5 years, 2 months ago) by laffer1
Diff to previous 9197
BIND 9.9.9-p4

Revision 9197 - Directory Listing - [select for diffs]
Modified Thu Nov 3 11:38:20 2016 UTC (5 years, 2 months ago) by laffer1
Diff to previous 9195
document openssl patch

Revision 9195 - Directory Listing - [select for diffs]
Modified Thu Nov 3 11:37:09 2016 UTC (5 years, 2 months ago) by laffer1
Diff to previous 9192
Due to improper handling of alert packets, OpenSSL would consume an excessive
amount of CPU time processing undefined alert messages.

Revision 9192 - Directory Listing - [select for diffs]
Modified Tue Oct 25 22:35:44 2016 UTC (5 years, 3 months ago) by laffer1
Diff to previous 9141
updated security patch to correct an additonal problem. see UPDATING

Revision 9141 - Directory Listing - [select for diffs]
Modified Mon Oct 3 02:12:01 2016 UTC (5 years, 3 months ago) by laffer1
Diff to previous 9102
add inet6_ntop.c

Revision 9102 - Directory Listing - [select for diffs]
Modified Sat Oct 1 17:46:48 2016 UTC (5 years, 3 months ago) by laffer1
Diff to previous 9101
MidnightBSD 0.8.2

Revision 9101 - Directory Listing - [select for diffs]
Modified Sat Oct 1 12:23:10 2016 UTC (5 years, 3 months ago) by laffer1
Diff to previous 8597
fix a regression in openssl patch

Revision 8597 - Directory Listing - [select for diffs]
Modified Fri Sep 23 17:59:17 2016 UTC (5 years, 4 months ago) by laffer1
Diff to previous 7769
Update openssl and bump os version

Revision 7769 - Directory Listing - [select for diffs]
Modified Sat Aug 27 20:50:18 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7764
MFC: refactor select count * for indeses, check for NULL before freeing memory in index structures, handle strdup cases properly with data == null

Revision 7764 - Directory Listing - [select for diffs]
Modified Sat Aug 27 01:21:27 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7763
disable freeing index here too

Revision 7763 - Directory Listing - [select for diffs]
Modified Sat Aug 27 01:18:22 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7761
disable freeing memory from index here until we can track down the crash. better to leak and work for now

Revision 7761 - Directory Listing - [select for diffs]
Modified Sun Aug 21 15:14:01 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7760
document bugfixes with sensors, coretemp, CPU frequency and libmport

Revision 7760 - Directory Listing - [select for diffs]
Modified Sun Aug 21 15:08:55 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7751
switch over to freebsd implementation until sensors framework issue is sorted.

Revision 7751 - Directory Listing - [select for diffs]
Modified Sat Aug 20 23:08:10 2016 UTC (5 years, 5 months ago) by root
Diff to previous 7748
MFC: fix cpu core frequency detection on turbo boost cpus

Revision 7748 - Directory Listing - [select for diffs]
Modified Sat Aug 20 22:45:53 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7747
get rid of silly error. this is not the case. some commands do not have data

Revision 7747 - Directory Listing - [select for diffs]
Modified Sat Aug 20 22:42:09 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7746
fix build

Revision 7746 - Directory Listing - [select for diffs]
Modified Sat Aug 20 22:37:21 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7743
MFC: fix several database locking issues

Revision 7743 - Directory Listing - [select for diffs]
Modified Mon Aug 15 11:40:03 2016 UTC (5 years, 5 months ago) by root
Diff to previous 7727
fix a bug where mode is not initialized by allowing NULL for data again.

Revision 7727 - Directory Listing - [select for diffs]
Modified Fri Aug 12 17:14:04 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7694
back port changes to how we handle index loads and owner/group/mode and data fixes.  this should stop crashes on plists using @owner with no parameters for example

Revision 7694 - Directory Listing - [select for diffs]
Modified Tue Aug 9 02:16:59 2016 UTC (5 years, 5 months ago) by root
Diff to previous 7686
remove redundant index call. This is causing issues with execing mport.list

Revision 7686 - Directory Listing - [select for diffs]
Modified Sun Aug 7 20:29:26 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7652
sync stable libmport with recent changes to current to fix some stability problems on i386.

Revision 7652 - Directory Listing - [select for diffs]
Modified Sun Jul 31 16:51:17 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7651
free memory in error case too

Revision 7651 - Directory Listing - [select for diffs]
Modified Sun Jul 31 16:40:18 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7650
implement mkdir -p like functionality for plists.

Revision 7650 - Directory Listing - [select for diffs]
Modified Sun Jul 31 01:27:03 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7649
in several cases we are not properly setting an error condition so the library is not returning a failure of the installation. fix that.

Revision 7649 - Directory Listing - [select for diffs]
Modified Sun Jul 31 01:25:45 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7648
when an error occurs, exit as a failure when installing a package.

Revision 7648 - Directory Listing - [select for diffs]
Modified Sat Jul 30 14:17:08 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7647
remove db version print

Revision 7647 - Directory Listing - [select for diffs]
Modified Sat Jul 30 14:15:24 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7646
set database version on creation

Revision 7646 - Directory Listing - [select for diffs]
Modified Fri Jul 29 02:53:50 2016 UTC (5 years, 5 months ago) by laffer1
Diff to previous 7644
increase memory size to support w/last usage

Revision 7644 - Directory Listing - [select for diffs]
Modified Mon Jul 25 23:52:05 2016 UTC (5 years, 6 months ago) by laffer1
Diff to previous 7643
fix security issue

Revision 7643 - Directory Listing - [select for diffs]
Modified Mon Jul 25 23:36:17 2016 UTC (5 years, 6 months ago) by laffer1
Diff to previous 7634
security patch to prevent attackers from modifying a file

Revision 7634 - Directory Listing - [select for diffs]
Modified Sun Jun 5 01:04:14 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7633
remove makekey

Revision 7633 - Directory Listing - [select for diffs]
Modified Sun Jun 5 01:01:38 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7632
remove old bind related files and perl 5.14 binary

Revision 7632 - Directory Listing - [select for diffs]
Modified Sun Jun 5 00:56:07 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7631
libcrypto.so.6 is old

Revision 7631 - Directory Listing - [select for diffs]
Modified Sun Jun 5 00:53:12 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7630
add more old libraries

Revision 7630 - Directory Listing - [select for diffs]
Modified Sun Jun 5 00:21:27 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7629
bump after recent security patches and bug fixes

Revision 7629 - Directory Listing - [select for diffs]
Modified Sat Jun 4 23:46:35 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7628
add sanity checks to logging code and switch over to %s as %Q is causing crashes with newer sqlite versions

Revision 7628 - Directory Listing - [select for diffs]
Modified Sat Jun 4 23:12:43 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7627
sanity check sql data

Revision 7627 - Directory Listing - [select for diffs]
Modified Fri Jun 3 01:56:09 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7623
on amd64 this is a long but on i386 it is a int. turn down warns and revert the last change

Revision 7623 - Directory Listing - [select for diffs]
Modified Tue May 31 22:38:46 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7622
document patches

Revision 7622 - Directory Listing - [select for diffs]
Modified Tue May 31 22:35:12 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7620
Security updates for libarchive, linux emulation and stat(2) in compat bsd43.

Revision 7620 - Directory Listing - [select for diffs]
Modified Tue May 31 22:12:48 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7619
MidnightBSD 0.7.9 RELEASE

Revision 7619 - Directory Listing - [select for diffs]
Modified Tue May 31 22:10:02 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7618
Fix two security issues with libarchive. The first affects cpio and prevents directory traversal. The second is an integer signedness error

Revision 7618 - Directory Listing - [select for diffs]
Modified Tue May 31 22:08:25 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7617
Legacy stat(2) system call for compat bsd43 does not clear the output struct before copying it out to userland.

Revision 7617 - Directory Listing - [select for diffs]
Modified Tue May 31 22:06:51 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7612
fix a security vulnerability with linux emulation layer. the TIOCGSERIAL ioctl(2) does not clear the output struct before copying it out to userland.

Revision 7612 - Directory Listing - [select for diffs]
Modified Mon May 30 20:40:17 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7611
tweak upgrades

Revision 7611 - Directory Listing - [select for diffs]
Modified Mon May 30 20:39:16 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7609
do not create tables every time we run

Revision 7609 - Directory Listing - [select for diffs]
Modified Sun May 29 02:10:32 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7608
fix build

Revision 7608 - Directory Listing - [select for diffs]
Modified Sun May 29 01:47:36 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7605
lower warns for clang switch

Revision 7605 - Directory Listing - [select for diffs]
Modified Sun May 29 01:45:55 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7603
drop to warns 3 for clang

Revision 7603 - Directory Listing - [select for diffs]
Modified Sun May 29 01:43:12 2016 UTC (5 years, 7 months ago) by laffer1
Diff to previous 7601
init retval

Revision 7601 - Directory Listing - [select for diffs]
Modified Sat May 28 21:35:41 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7600
init

Revision 7600 - Directory Listing - [select for diffs]
Modified Sat May 28 21:35:10 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7597
init to zero

Revision 7597 - Directory Listing - [select for diffs]
Modified Sat May 28 21:33:26 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7595
warns 3

Revision 7595 - Directory Listing - [select for diffs]
Modified Sat May 28 19:32:58 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7593
set warns

Revision 7593 - Directory Listing - [select for diffs]
Modified Sat May 28 19:03:13 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7591
MFC: fix zeroflag code to work with clang

Revision 7591 - Directory Listing - [select for diffs]
Modified Sat May 28 18:45:58 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7590
fix some warnings in clang with mined(1)

Revision 7590 - Directory Listing - [select for diffs]
Modified Sat May 28 18:45:14 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7587
fix clang warning

Revision 7587 - Directory Listing - [select for diffs]
Modified Sat May 28 18:36:40 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7586
drop warns

Revision 7586 - Directory Listing - [select for diffs]
Modified Fri May 27 23:22:25 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7585
get rid of warning

Revision 7585 - Directory Listing - [select for diffs]
Modified Fri May 27 20:18:09 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7584
fix warnings

Revision 7584 - Directory Listing - [select for diffs]
Modified Fri May 27 20:17:36 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7582
lower warns level

Revision 7582 - Directory Listing - [select for diffs]
Modified Fri May 27 14:13:57 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7579
set warns 3 until we can deal with the hash table algorithm

Revision 7579 - Directory Listing - [select for diffs]
Modified Fri May 27 03:36:07 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7573
set warns to 3 so it can build with clang

Revision 7573 - Directory Listing - [select for diffs]
Modified Mon May 23 03:00:30 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7572
switch _dispatch_queue_serial_numbers to volatile so that it will build with clang.

Revision 7572 - Directory Listing - [select for diffs]
Modified Sun May 22 23:37:34 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7571
MFC: remove sparc code

Revision 7571 - Directory Listing - [select for diffs]
Modified Sun May 22 23:36:52 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7567
fix warnings

Revision 7567 - Directory Listing - [select for diffs]
Modified Sun May 22 22:01:19 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7566
init user

Revision 7566 - Directory Listing - [select for diffs]
Modified Sun May 22 20:15:12 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7562
mfc openpam update

Revision 7562 - Directory Listing - [select for diffs]
Modified Sat May 21 15:32:19 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7558
add definitions for vop_get_writecount and vop_add_writecount

Revision 7558 - Directory Listing - [select for diffs]
Modified Thu May 19 12:42:07 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7557
document security update

Revision 7557 - Directory Listing - [select for diffs]
Modified Thu May 19 12:41:24 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7556
Security patches

Revision 7556 - Directory Listing - [select for diffs]
Modified Thu May 19 12:39:40 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7551
MidnightBSD 0.7.8

Revision 7551 - Directory Listing - [select for diffs]
Modified Thu May 5 08:09:14 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7550
MidnightBSD 0.7.7-RELEASE

Revision 7550 - Directory Listing - [select for diffs]
Modified Thu May 5 08:05:44 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7549
fix openssl security issue

Revision 7549 - Directory Listing - [select for diffs]
Modified Thu May 5 07:58:50 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7546
fix version check

Revision 7546 - Directory Listing - [select for diffs]
Modified Thu May 5 07:49:43 2016 UTC (5 years, 8 months ago) by laffer1
Diff to previous 7520
OpenSSL security patch

The padding check in AES-NI CBC MAC was rewritten to be in constant time
by making sure that always the same bytes are read and compared against
either the MAC or padding bytes. But it no longer checked that there was
enough data to have both the MAC and padding bytes. [CVE-2016-2107]

An overflow can occur in the EVP_EncodeUpdate() function which is used for
Base64 encoding of binary data. [CVE-2016-2105]

An overflow can occur in the EVP_EncryptUpdate() function, however it is
believed that there can be no overflows in internal code due to this problem.
[CVE-2016-2106]

When ASN.1 data is read from a BIO using functions such as d2i_CMS_bio()
a short invalid encoding can casuse allocation of large amounts of memory
potentially consuming excessive resources or exhausting memory.
[CVE-2016-2109]

Revision 7520 - Directory Listing - [select for diffs]
Modified Wed Apr 13 00:29:37 2016 UTC (5 years, 9 months ago) by laffer1
Diff to previous 7498
Create 0.8 stable branch.

Revision 7498 - Directory Listing - [select for diffs]
Modified Thu Mar 24 03:53:54 2016 UTC (5 years, 10 months ago) by laffer1
Diff to previous 7470
fix some warnings

Revision 7470 - Directory Listing - [select for diffs]
Modified Thu Mar 17 12:47:38 2016 UTC (5 years, 10 months ago) by laffer1
Diff to previous 7468
        Incorrect argument validation in sysarch(2)

        A special combination of sysarch(2) arguments, specify a request to
        uninstall a set of descriptors from the LDT.  The start descriptor
        is cleared and the number of descriptors are provided.  Due to invalid
        use of a signed intermediate value in the bounds checking during argument
        validity verification, unbound zero'ing of the process LDT and adjacent
        memory can be initiated from usermode.

        Patch obtained from FreeBSD.

Revision 7468 - Directory Listing - [select for diffs]
Modified Thu Mar 17 12:36:44 2016 UTC (5 years, 10 months ago) by laffer1
Diff to previous 7465
        MidnightBSD 0.7.6 RELEASE

        OpenSSH doesn't have the luck of the Irish.

        Fix a security issue with OpenSSH X11 forwarding that can allow an attacker
        run shell commands on the call to xauth.

Revision 7465 - Directory Listing - [select for diffs]
Modified Thu Mar 10 14:14:32 2016 UTC (5 years, 10 months ago) by laffer1
Diff to previous 7464
MidnightBSD 0.7.5 RELEASE

Revision 7464 - Directory Listing - [select for diffs]
Modified Thu Mar 10 14:11:16 2016 UTC (5 years, 10 months ago) by laffer1
Diff to previous 7463
mention openssl patch

Revision 7463 - Directory Listing - [select for diffs]
Modified Thu Mar 10 14:09:36 2016 UTC (5 years, 10 months ago) by laffer1
Diff to previous 7449
OpenSSL security patch for DROWN

A cross-protocol attack was discovered that could lead to decryption of TLS
sessions by using a server supporting SSLv2 and EXPORT cipher suites as a
Bleichenbacher RSA padding oracle.  Note that traffic between clients and
non-vulnerable servers can be decrypted provided another server supporting
SSLv2 and EXPORT ciphers (even with a different protocol such as SMTP, IMAP
or POP3) shares the RSA keys of the non-vulnerable server.  This vulnerability
is known as DROWN.  [CVE-2016-0800]

A double free bug was discovered when OpenSSL parses malformed DSA private
keys and could lead to a DoS attack or memory corruption for applications that
receive DSA private keys from untrusted sources.  This scenario is considered
rare.  [CVE-2016-0705]

The SRP user database lookup method SRP_VBASE_get_by_user had confusing memory
management semantics; the returned pointer was sometimes newly allocated, and
sometimes owned by the callee.  The calling code has no way of distinguishing
these two cases.  [CVE-2016-0798]

In the BN_hex2bn function, the number of hex digits is calculated using an int
value |i|.  Later |bn_expand| is called with a value of |i * 4|.  For large
values of |i| this can result in |bn_expand| not allocating any memory because
|i * 4| is negative.  This can leave the internal BIGNUM data field as NULL
leading to a subsequent NULL pointer dereference.  For very large values of
|i|, the calculation |i * 4| could be a positive value smaller than |i|.  In
this case memory is allocated to the internal BIGNUM data field, but it is
insufficiently sized leading to heap corruption.  A similar issue exists in
BN_dec2bn.  This could have security consequences if BN_hex2bn/BN_dec2bn is
ever called by user applications with very large untrusted hex/dec data.  This
is anticipated to be a rare occurrence.  [CVE-2016-0797]

The internal |fmtstr| function used in processing a "%s" formatted string in
the BIO_*printf functions could overflow while calculating the length of
a string and cause an out-of-bounds read when printing very long strings.
[CVE-2016-0799]

A side-channel attack was found which makes use of cache-bank conflicts on the
Intel Sandy-Bridge microarchitecture which could lead to the recovery of RSA
keys. [CVE-2016-0702]

s2_srvr.c did not enforce that clear-key-length is 0 for non-export ciphers.
If clear-key bytes are present for these ciphers, they displace encrypted-key
bytes.  [CVE-2016-0703]

s2_srvr.c overwrites the wrong bytes in the master key when applying
Bleichenbacher protection for export cipher suites.  [CVE-2016-0704]

Obtained from: OpenSSL & FreeBSD

Revision 7449 - Directory Listing - [select for diffs]
Modified Fri Feb 26 23:50:34 2016 UTC (5 years, 11 months ago) by laffer1
Diff to previous 7443
MFC: add mport_list_index function needed by the new mport-manager

Revision 7443 - Directory Listing - [select for diffs]
Modified Wed Feb 3 05:39:21 2016 UTC (5 years, 11 months ago) by laffer1
Diff to previous 7442
linuxolator security update

Revision 7442 - Directory Listing - [select for diffs]
Modified Wed Feb 3 05:38:49 2016 UTC (5 years, 11 months ago) by laffer1
Diff to previous 7439
A programming error in the Linux compatibility layer could cause the
issetugid(2) system call to return incorrect information.

Obtained from: FreeBSD

Revision 7439 - Directory Listing - [select for diffs]
Modified Sat Jan 30 18:07:14 2016 UTC (5 years, 11 months ago) by laffer1
Diff to previous 7434
MidnightBSD 0.7.4 RELEASE

OpenSSL CVE-2015-3197

        A malicious client can negotiate SSLv2 ciphers that have been disabled on
        the server and complete SSLv2 handshakes even if all SSLv2 ciphers have
        been disabled, provided that the SSLv2 protocol was not also disabled via
        SSL_OP_NO_SSLv2.

Revision 7434 - Directory Listing - [select for diffs]
Modified Fri Jan 15 02:29:45 2016 UTC (6 years ago) by laffer1
Diff to previous 7432
Disable roaming to prevent OpenSSH security issue in the client

Revision 7432 - Directory Listing - [select for diffs]
Modified Fri Jan 15 02:21:49 2016 UTC (6 years ago) by laffer1
Diff to previous 7428
turn off roaming.

Revision 7428 - Directory Listing - [select for diffs]
Modified Fri Jan 15 00:17:09 2016 UTC (6 years ago) by laffer1
Diff to previous 7427
Fix 3 issues in OpenSSL

Revision 7427 - Directory Listing - [select for diffs]
Modified Fri Jan 15 00:06:28 2016 UTC (6 years ago) by laffer1
Diff to previous 7424
MidnightBSD 0.7.3. Fix two issues with linuxolator

Revision 7424 - Directory Listing - [select for diffs]
Modified Thu Jan 14 13:45:37 2016 UTC (6 years ago) by laffer1
Diff to previous 7422
document SCTP update

Revision 7422 - Directory Listing - [select for diffs]
Modified Thu Jan 14 13:43:09 2016 UTC (6 years ago) by laffer1
Diff to previous 7420
A lack of proper input checks in the ICMPv6 processing in the SCTP stack
can lead to either a failed kernel assertion or to a NULL pointer
dereference.  In either case, a kernel panic will follow.

Obtained from: FreeBSD

Revision 7420 - Directory Listing - [select for diffs]
Modified Thu Jan 14 13:25:45 2016 UTC (6 years ago) by laffer1
Diff to previous 7417
TCP MD5 signature denial of service fix

Revision 7417 - Directory Listing - [select for diffs]
Modified Thu Jan 14 13:04:37 2016 UTC (6 years ago) by laffer1
Diff to previous 7343
MidnightBSD 0.7.2-RELEASE. Fix a security issue with bsnmpd configuration file installation.

Revision 7343 - Directory Listing - [select for diffs]
Modified Sat Oct 3 02:21:32 2015 UTC (6 years, 3 months ago) by laffer1
Diff to previous 7340
Revised rpcbind(8) patch to fix issues with NIS

Revision 7340 - Directory Listing - [select for diffs]
Modified Wed Sep 30 23:55:42 2015 UTC (6 years, 3 months ago) by laffer1
Diff to previous 7339
bump os version

Revision 7339 - Directory Listing - [select for diffs]
Modified Wed Sep 30 23:55:09 2015 UTC (6 years, 3 months ago) by laffer1
Diff to previous 7336
patch rpcbind in 0.7

Revision 7336 - Directory Listing - [select for diffs]
Modified Wed Sep 30 13:07:57 2015 UTC (6 years, 3 months ago) by laffer1
Diff to previous 7304
In rpcbind(8), netbuf structures are copied directly, which would result in
two netbuf structures that reference to one shared address buffer.  When one
of the two netbuf structures is freed, access to the other netbuf structure
would result in an undefined result that may crash the rpcbind(8) daemon.

Revision 7304 - Directory Listing - [select for diffs]
Modified Sat Sep 5 21:55:19 2015 UTC (6 years, 4 months ago) by laffer1
Diff to previous 7295
document annoyance

Revision 7295 - Directory Listing - [select for diffs]
Modified Fri Sep 4 21:38:25 2015 UTC (6 years, 4 months ago) by laffer1
Diff to previous 7293
 rename to flags

Revision 7293 - Directory Listing - [select for diffs]
Modified Fri Sep 4 21:34:23 2015 UTC (6 years, 4 months ago) by laffer1
Diff to previous 7287
sync usb with current

Revision 7287 - Directory Listing - [select for diffs]
Modified Sun Aug 30 16:40:28 2015 UTC (6 years, 4 months ago) by laffer1
Diff to previous 7286
document build order change.

Revision 7286 - Directory Listing - [select for diffs]
Modified Sun Aug 30 16:39:15 2015 UTC (6 years, 4 months ago) by laffer1
Diff to previous 7285
fix bootstrap to include kerberos tools and m4

Revision 7285 - Directory Listing - [select for diffs]
Modified Sun Aug 30 16:32:15 2015 UTC (6 years, 4 months ago) by laffer1
Diff to previous 7280
fix build with newer libarchive

Revision 7280 - Directory Listing - [select for diffs]
Modified Tue Aug 25 22:36:49 2015 UTC (6 years, 5 months ago) by laffer1
Diff to previous 7279
document stable branch creation

Revision 7279 - Directory Listing - [select for diffs]
Modified Tue Aug 25 22:36:14 2015 UTC (6 years, 5 months ago) by laffer1
Diff to previous 7278
mention security fixes

Revision 7278 - Directory Listing - [select for diffs]
Modified Tue Aug 25 22:34:21 2015 UTC (6 years, 5 months ago) by laffer1
Diff to previous 7277
fix the dates. copy and paste can go wrong

Revision 7277 - Directory Listing - [select for diffs]
Modified Tue Aug 25 22:32:09 2015 UTC (6 years, 5 months ago) by laffer1
Diff to previous 7275
add the security patches for openssh w/ pam login and amd64 GS register handling

Revision 7275 - Directory Listing - [select for diffs]
Modified Tue Aug 25 22:11:43 2015 UTC (6 years, 5 months ago) by laffer1
Diff to previous 7274
fix dates

Revision 7274 - Directory Listing - [select for diffs]
Modified Tue Aug 25 22:11:08 2015 UTC (6 years, 5 months ago) by laffer1
Diff to previous 7272
MidnightBSD 0.6.7 RELEASE

Fix security issues with amd64 register handling and OpenSSH /w pam enabled (default).

See UPDATING for details.

Revision 7272 - Directory Listing - [select for diffs]
Modified Tue Aug 25 22:06:30 2015 UTC (6 years, 5 months ago) by laffer1
Diff to previous 7270
fix a security issue on amd64 where the GS segment CPU register can be changed via  userland value in kernel mode by using an IRET with #SS or #NP exceptions.

Revision 7270 - Directory Listing - [select for diffs]
Modified Sun Aug 23 18:57:51 2015 UTC (6 years, 5 months ago) by laffer1
Diff to previous 7263
Create 0.7 stable branch.

Revision 7263 - Directory Listing - [select for diffs]
Modified Tue Aug 18 21:01:17 2015 UTC (6 years, 5 months ago) by laffer1
Diff to previous 7211
MidnightBSD 0.6.6 RELEASE. - Fix a security issue with expat

Revision 7211 - Directory Listing - [select for diffs]
Modified Thu Aug 6 00:15:28 2015 UTC (6 years, 5 months ago) by laffer1
Diff to previous 7196
MidnightBSD 0.6.5 release. Fix a security issue with routed.  If you do not use routed, you can skip this one.

Revision 7196 - Directory Listing - [select for diffs]
Modified Wed Jul 29 00:38:43 2015 UTC (6 years, 6 months ago) by laffer1
Diff to previous 7193
MidnightBSD 0.6.4

        OpenSSH

        Fix two security vulnerabilities:
        OpenSSH clients does not correctly verify DNS SSHFP records when a server
        offers a certificate. [CVE-2014-2653]

        OpenSSH servers which are configured to allow password authentication
        using PAM (default) would allow many password attempts. A bug allows
        MaxAuthTries to be bypassed. [CVE-2015-5600]

Revision 7193 - Directory Listing - [select for diffs]
Modified Wed Jul 29 00:31:36 2015 UTC (6 years, 6 months ago) by laffer1
Diff to previous 7126
TCP Resassemly resource exhaustion bug:

There is a mistake with the introduction of VNET, which converted the
global limit on the number of segments that could belong to reassembly
queues into a per-VNET limit.  Because mbufs are allocated from a
global pool, in the presence of a sufficient number of VNETs, the
total number of mbufs attached to reassembly queues can grow to the
total number of mbufs in the system, at which point all network
traffic would cease.

Obtained from: FreeBSD 8

Revision 7126 - Directory Listing - [select for diffs]
Modified Wed Jul 22 15:00:50 2015 UTC (6 years, 6 months ago) by laffer1
Diff to previous 7064
MidnightBSD 0.6.3 RELEASE

TCP connections transitioning to the LAST_ACK state can become permanently
stuck due to mishandling of protocol state in certain situations, which in
turn can lead to accumulated consumption and eventual exhaustion of system
resources, such as mbufs and sockets.

Revision 7064 - Directory Listing - [select for diffs]
Modified Sun Jun 21 18:56:23 2015 UTC (6 years, 7 months ago) by laffer1
Diff to previous 7021
MFC: Trim support for ZFS

Revision 7021 - Directory Listing - [select for diffs]
Modified Sat Jun 13 13:12:15 2015 UTC (6 years, 7 months ago) by laffer1
Diff to previous 7019
openssl 0.9.8zg

Revision 7019 - Directory Listing - [select for diffs]
Modified Fri Jun 12 18:31:15 2015 UTC (6 years, 7 months ago) by laffer1
Diff to previous 7018
bump version for OpenSSL patch

Revision 7018 - Directory Listing - [select for diffs]
Modified Fri Jun 12 18:30:43 2015 UTC (6 years, 7 months ago) by laffer1
Diff to previous 7013
MidnightBSD 0.6.1 RELEASE. Fix several OpenSSL security issues by importing OpenSSL 0.9.8zg

Revision 7013 - Directory Listing - [select for diffs]
Modified Wed Jun 10 12:30:30 2015 UTC (6 years, 7 months ago) by laffer1
Diff to previous 7005
fix version number. we updated in 2014 to 5.19 but did not rebuild file

Revision 7005 - Directory Listing - [select for diffs]
Modified Sun Apr 26 15:21:10 2015 UTC (6 years, 9 months ago) by laffer1
Diff to previous 7004
mark the 0.6 release

Revision 7004 - Directory Listing - [select for diffs]
Modified Sun Apr 26 15:19:47 2015 UTC (6 years, 9 months ago) by laffer1
Diff to previous 7000
link mtree

Revision 7000 - Directory Listing - [select for diffs]
Modified Sun Apr 19 15:51:35 2015 UTC (6 years, 9 months ago) by laffer1
Diff to previous 6994
Create stable branch for MidnightBSD 0.6

Revision 6994 - Directory Listing - [select for diffs]
Modified Wed Apr 8 01:35:45 2015 UTC (6 years, 9 months ago) by laffer1
Diff to previous 6990
0.5.11 RELEASE

Fix two security vulnerabilities:

The previous fix for IGMP had an overflow issue. This has been corrected.

ipv6: The Neighbor Discover Protocol allows a local router to advertise a
suggested Current Hop Limit value of a link, which will replace
Current Hop Limit on an interface connected to the link on the MidnightBSD
system.

Obtained from: FreeBSD

Revision 6990 - Directory Listing - [select for diffs]
Modified Fri Mar 20 12:28:09 2015 UTC (6 years, 10 months ago) by laffer1
Diff to previous 6989
update mksh to R50e as there are a number of regression bugs in the previous release that could cause users issues

Revision 6989 - Directory Listing - [select for diffs]
Modified Fri Mar 20 12:23:17 2015 UTC (6 years, 10 months ago) by laffer1
Diff to previous 6988
Update to OpenSSL security patch to include CVE-2015-0209 and CVE-2015-0288

Revision 6988 - Directory Listing - [select for diffs]
Modified Fri Mar 20 12:22:47 2015 UTC (6 years, 10 months ago) by laffer1
Diff to previous 6974
Update to OpenSSL security patch to include CVE-2015-0209 and CVE-2015-0288

Revision 6974 - Directory Listing - [select for diffs]
Modified Thu Mar 19 21:54:29 2015 UTC (6 years, 10 months ago) by laffer1
Diff to previous 6965
MidnightBSD 0.5.10 RELEASE

Fixes several security issues with OpenSSL

See UPDATING for details.

Revision 6965 - Directory Listing - [select for diffs]
Modified Wed Feb 25 14:34:35 2015 UTC (6 years, 11 months ago) by laffer1
Diff to previous 6964
0.5.9 RELEASE

Revision 6964 - Directory Listing - [select for diffs]
Modified Wed Feb 25 14:32:10 2015 UTC (6 years, 11 months ago) by laffer1
Diff to previous 6963
An integer overflow in computing the size of IGMPv3 data buffer can result
in a buffer which is too small for the requested operation.

This can result in a DOS attack.

Revision 6963 - Directory Listing - [select for diffs]
Modified Wed Feb 25 14:30:33 2015 UTC (6 years, 11 months ago) by laffer1
Diff to previous 6961
BIND servers which are configured to perform DNSSEC validation and which
are using managed keys (which occurs implicitly when using
"dnssec-validation auto;" or "dnssec-lookaside auto;") may exhibit
unpredictable behavior due to the use of an improperly initialized
variable.

CVE-2015-1349

Revision 6961 - Directory Listing - [select for diffs]
Modified Wed Jan 14 22:53:09 2015 UTC (7 years ago) by laffer1
Diff to previous 6956
        0.5.8 RELEASE

        Fix several security issues with OpenSSL.

        A carefully crafted DTLS message can cause a segmentation fault in OpenSSL
        due to a NULL pointer dereference. [CVE-2014-3571]

        A memory leak can occur in the dtls1_buffer_record function under certain
        conditions. [CVE-2015-0206]

        When OpenSSL is built with the no-ssl3 option and a SSL v3 ClientHello is
        received the ssl method would be set to NULL which could later result in
        a NULL pointer dereference.  [CVE-2014-3569]

        An OpenSSL client will accept a handshake using an ephemeral ECDH
        ciphersuite using an ECDSA certificate if the server key exchange message
        is omitted. [CVE-2014-3572]

        An OpenSSL client will accept the use of an RSA temporary key in a non-export
        RSA key exchange ciphersuite. [CVE-2015-0204]

        An OpenSSL server will accept a DH certificate for client authentication
        without the certificate verify message. [CVE-2015-0205]

        OpenSSL accepts several non-DER-variations of certificate signature
        algorithm and signature encodings.  OpenSSL also does not enforce a
        match between the signature algorithm between the signed and unsigned
        portions of the certificate. [CVE-2014-8275]

        Bignum squaring (BN_sqr) may produce incorrect results on some
        platforms, including x86_64. [CVE-2014-3570]

Revision 6956 - Directory Listing - [select for diffs]
Modified Thu Dec 11 13:12:26 2014 UTC (7 years, 1 month ago) by laffer1
Diff to previous 6939
        0.5.7 RELEASE

        Fix a security issue with file and libmagic that can allow
        an attacker to create a denial of service attack on any
        program that uses libmagic.

Revision 6939 - Directory Listing - [select for diffs]
Modified Mon Nov 10 12:48:35 2014 UTC (7 years, 2 months ago) by laffer1
Diff to previous 6936
fix symlink on amd64

Revision 6936 - Directory Listing - [select for diffs]
Modified Sun Nov 9 19:38:45 2014 UTC (7 years, 2 months ago) by laffer1
Diff to previous 6935
document perl fix

Revision 6935 - Directory Listing - [select for diffs]
Modified Sun Nov 9 19:36:40 2014 UTC (7 years, 2 months ago) by laffer1
Diff to previous 6934
turn off gdbm file extension in perl so there arent issues building current with the gdbm port installed

Revision 6934 - Directory Listing - [select for diffs]
Modified Thu Nov 6 12:07:44 2014 UTC (7 years, 2 months ago) by laffer1
Diff to previous 6928
0.5.6 includes sshd and getlogin security fixes plus updated timezone data (2014i)

Revision 6928 - Directory Listing - [select for diffs]
Modified Wed Nov 5 03:43:42 2014 UTC (7 years, 2 months ago) by laffer1
Diff to previous 6927
Document recent security updates, although they will be rolled up

Revision 6927 - Directory Listing - [select for diffs]
Modified Wed Nov 5 03:42:01 2014 UTC (7 years, 2 months ago) by laffer1
Diff to previous 6915
Fix two security issues:

1. sshd may link libpthread in the wrong order, shadowing libc functions and causing a possible DOS attack for connecting clients.
2. getlogin may leak kernel memory via a buffer that is copied without clearing.

Revision 6915 - Directory Listing - [select for diffs]
Modified Sat Nov 1 15:52:44 2014 UTC (7 years, 2 months ago) by laffer1
Diff to previous 6914
fix date of 0.5.4

Revision 6914 - Directory Listing - [select for diffs]
Modified Sat Nov 1 07:00:31 2014 UTC (7 years, 2 months ago) by laffer1
Diff to previous 6909
false

Revision 6909 - Directory Listing - [select for diffs]
Modified Fri Oct 31 23:21:12 2014 UTC (7 years, 2 months ago) by laffer1
Diff to previous 6900
0.5.5 RELEASE fixes an issue with tnftp by updating to the latest release 20141031. See CVE-2014-8517 for details

Revision 6900 - Directory Listing - [select for diffs]
Modified Thu Oct 30 00:32:09 2014 UTC (7 years, 2 months ago) by laffer1
Diff to previous 6890
ignore gdbm

Revision 6890 - Directory Listing - [select for diffs]
Modified Mon Oct 27 23:33:40 2014 UTC (7 years, 3 months ago) by laffer1
Diff to previous 6889
bump os version for mport fix

Revision 6889 - Directory Listing - [select for diffs]
Modified Mon Oct 27 23:32:24 2014 UTC (7 years, 3 months ago) by laffer1
Diff to previous 6881
only do major version for mport tool

Revision 6881 - Directory Listing - [select for diffs]
Modified Tue Oct 21 22:19:39 2014 UTC (7 years, 3 months ago) by laffer1
Diff to previous 6880
   0.5.3 RELEASE

        Fix several security vulnerabilities in OpenSSL, routed, rtsold,
        and namei with respect to Capsicum sandboxes looking up
        nonexistent path names and leaking memory.

        OpenSSL update adds some workarounds for the recent
        poodle vulnerability reported by Google.

        The input path in routed(8) will accept queries from any source and
        attempt to answer them.  However, the output path assumes that the
        destination address for the response is on a directly connected
        network.

        Due to a missing length check in the code that handles DNS parameters,
        a malformed router advertisement message can result in a stack buffer
        overflow in rtsold(8).

Revision 6880 - Directory Listing - [select for diffs]
Modified Tue Oct 21 22:14:30 2014 UTC (7 years, 3 months ago) by laffer1
Diff to previous 6879
The namei facility will leak a small amount of kernel memory every
time a sandboxed process looks up a nonexistent path name.

Obtained from: FreeBSD

Revision 6879 - Directory Listing - [select for diffs]
Modified Tue Oct 21 22:13:27 2014 UTC (7 years, 3 months ago) by laffer1
Diff to previous 6878
The input path in routed(8) will accept queries from any source and
attempt to answer them.  However, the output path assumes that the
destination address for the response is on a directly connected
network.

Obtained from: FreeBSD

Revision 6878 - Directory Listing - [select for diffs]
Modified Tue Oct 21 22:12:05 2014 UTC (7 years, 3 months ago) by laffer1
Diff to previous 6877
Due to a missing length check in the code that handles DNS parameters,
a malformed router advertisement message can result in a stack buffer
overflow in rtsold(8).

Obtained from: FreeBSD

Revision 6877 - Directory Listing - [select for diffs]
Modified Tue Oct 21 22:09:49 2014 UTC (7 years, 3 months ago) by laffer1
Diff to previous 6854
A flaw in the DTLS SRTP extension parsing code allows an attacker, who
sends a carefully crafted handshake message, to cause OpenSSL to fail
to free up to 64k of memory causing a memory leak.  [CVE-2014-3513].

When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
integrity of that ticket is first verified. In the event of a session
ticket integrity check failing, OpenSSL will fail to free memory
causing a memory leak.  [CVE-2014-3567].

The SSL protocol 3.0, as supported in OpenSSL and other products, supports
CBC mode encryption where it could not adequately check the integrity of
padding, because of the use of non-deterministic CBC padding.  This
protocol weakness makes it possible for an attacker to obtain clear text
data through a padding-oracle attack.

Some client applications (such as browsers) will reconnect using a
downgraded protocol to work around interoperability bugs in older
servers. This could be exploited by an active man-in-the-middle to
downgrade connections to SSL 3.0 even if both sides of the connection
support higher protocols. SSL 3.0 contains a number of weaknesses
including POODLE [CVE-2014-3566].

OpenSSL has added support for TLS_FALLBACK_SCSV to allow applications
to block the ability for a MITM attacker to force a protocol downgrade.

When OpenSSL is configured with "no-ssl3" as a build option, servers
could accept and complete a SSL 3.0 handshake, and clients could be
configured to send them. [CVE-2014-3568].

Obtained from: OpenSSL, FreeBSD

Revision 6854 - Directory Listing - [select for diffs]
Modified Sat Oct 11 13:37:44 2014 UTC (7 years, 3 months ago) by laffer1
Diff to previous 6852
MFC: fix units for terabyte suffix with find

Revision 6852 - Directory Listing - [select for diffs]
Modified Sat Oct 11 12:44:51 2014 UTC (7 years, 3 months ago) by laffer1
Diff to previous 6842
0.5.2 - fix a regression with the mksh hotfix

Revision 6842 - Directory Listing - [select for diffs]
Modified Sat Oct 4 18:39:09 2014 UTC (7 years, 3 months ago) by laffer1
Diff to previous 6774
0.5.1-RELEASE is a security update for mksh

Revision 6774 - Directory Listing - [select for diffs]
Modified Fri Sep 19 21:44:34 2014 UTC (7 years, 4 months ago) by laffer1
Diff to previous 6769
MidnightBSD 0.5-RELEASE

Revision 6769 - Directory Listing - [select for diffs]
Modified Tue Sep 16 23:49:28 2014 UTC (7 years, 4 months ago) by laffer1
Diff to previous 6767
0.4-RELEASE-p15

20140916:
        Fix a security issue with TCP SYN.

        When a segment with the SYN flag for an already existing connection arrives,
        the TCP stack tears down the connection, bypassing a check that the
        sequence number in the segment is in the expected window.

Revision 6767 - Directory Listing - [select for diffs]
Modified Tue Sep 16 23:41:17 2014 UTC (7 years, 4 months ago) by laffer1
Diff to previous 6756
20140916:
        Fix a security issue with TCP SYN.

        When a segment with the SYN flag for an already existing connection arrives,
        the TCP stack tears down the connection, bypassing a check that the
        sequence number in the segment is in the expected window.

Obtained from: FreeBSD

Revision 6756 - Directory Listing - [select for diffs]
Modified Tue Sep 9 23:26:28 2014 UTC (7 years, 4 months ago) by laffer1
Diff to previous 6755
0.4-RELEASE-p14

OpenSSL security patch:

        The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
        to consume large amounts of memory. [CVE-2014-3506]

        The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
        memory. [CVE-2014-3507]

        A flaw in OBJ_obj2txt may cause pretty printing functions such as
        X509_name_oneline, X509_name_print_ex et al. to leak some information from
        the stack. [CVE-2014-3508]

        OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
        a denial of service attack. [CVE-2014-3510]

Revision 6755 - Directory Listing - [select for diffs]
Modified Tue Sep 9 23:15:28 2014 UTC (7 years, 4 months ago) by laffer1
Diff to previous 6753
OpenSSL security patch:

        The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
        to consume large amounts of memory. [CVE-2014-3506]

        The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
        memory. [CVE-2014-3507]

        A flaw in OBJ_obj2txt may cause pretty printing functions such as
        X509_name_oneline, X509_name_print_ex et al. to leak some information from
        the stack. [CVE-2014-3508]

        OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
        a denial of service attack. [CVE-2014-3510]

Revision 6753 - Directory Listing - [select for diffs]
Modified Tue Sep 9 21:44:45 2014 UTC (7 years, 4 months ago) by laffer1
Diff to previous 6752
note clearenv(3)

Revision 6752 - Directory Listing - [select for diffs]
Modified Tue Sep 9 21:42:32 2014 UTC (7 years, 4 months ago) by laffer1
Diff to previous 6751
mark as prerelease

Revision 6751 - Directory Listing - [select for diffs]
Modified Tue Sep 9 21:38:22 2014 UTC (7 years, 4 months ago) by laffer1
Diff to previous 6743
MFC: fix clearenv(3)

Revision 6743 - Directory Listing - [select for diffs]
Modified Wed Sep 3 12:19:23 2014 UTC (7 years, 4 months ago) by laffer1
Diff to previous 6741
note we're on prerelease.

Revision 6741 - Directory Listing - [select for diffs]
Modified Wed Sep 3 12:07:46 2014 UTC (7 years, 4 months ago) by laffer1
Diff to previous 6736
drop cvs2svn prop

Revision 6736 - Directory Listing - [select for diffs]
Modified Tue Sep 2 22:17:40 2014 UTC (7 years, 4 months ago) by laffer1
Diff to previous 6714
Create 0.5 stable branch for upcoming 0.5-RELEASE

Revision 6714 - Directory Listing - [select for diffs]
Modified Thu Jul 10 12:22:47 2014 UTC (7 years, 6 months ago) by laffer1
Diff to previous 6658
MidnightBSD 0.4-RELEASE-p13  Fix a vulnerability in the control message API. A buffer is not properly cleared.

Revision 6658 - Directory Listing - [select for diffs]
Modified Fri Jun 6 00:11:23 2014 UTC (7 years, 7 months ago) by laffer1
Diff to previous 6655
MidnightBSD 0.4-RELEASE-p12

Revision 6655 - Directory Listing - [select for diffs]
Modified Wed Jun 4 12:20:28 2014 UTC (7 years, 7 months ago) by laffer1
Diff to previous 6653
MidnightBSD 0.4-RELEASE-p11

Security updates for sendmail and ktrace.  See UPDATING.

Revision 6653 - Directory Listing - [select for diffs]
Modified Wed Apr 30 12:23:07 2014 UTC (7 years, 8 months ago) by laffer1
Diff to previous 6633
MidnightBSD 0.4-RELEASE-p10

        Fix a TCP reassembly bug that could result in a DOS attack
        of the system. It may be possible to obtain portions
        of kernel memory as well.

Revision 6633 - Directory Listing - [select for diffs]
Modified Wed Apr 9 11:48:24 2014 UTC (7 years, 9 months ago) by laffer1
Diff to previous 6631
0.4-RELEASE-p9

Fix a security issue affecting NFS server where a trusted client can deadlock the server.

Revision 6631 - Directory Listing - [select for diffs]
Modified Wed Apr 9 11:43:39 2014 UTC (7 years, 9 months ago) by laffer1
Diff to previous 6630
0.4-p8 openssl fix.

Revision 6630 - Directory Listing - [select for diffs]
Modified Wed Apr 9 11:40:59 2014 UTC (7 years, 9 months ago) by laffer1
Diff to previous 6615
Fix CVE-2014-0076 in OpenSSL

Revision 6615 - Directory Listing - [select for diffs]
Modified Sat Mar 8 21:36:04 2014 UTC (7 years, 10 months ago) by laffer1
Diff to previous 6608
remove cvs2svn:cvs-rev prop

Revision 6608 - Directory Listing - [select for diffs]
Modified Sat Feb 1 22:08:58 2014 UTC (7 years, 11 months ago) by laffer1
Diff to previous 6607
document dot.profile fix.

Revision 6607 - Directory Listing - [select for diffs]
Modified Sat Feb 1 22:06:48 2014 UTC (7 years, 11 months ago) by laffer1
Diff to previous 6600
-s flag missing from ssh-agent on startup. this causes a lot of duplicate ssh-agent

Revision 6600 - Directory Listing - [select for diffs]
Modified Wed Jan 15 00:56:49 2014 UTC (8 years ago) by laffer1
Diff to previous 6071
security update

Revision 6071 - Directory Listing - [select for diffs]
Modified Sat Nov 30 03:06:34 2013 UTC (8 years, 1 month ago) by laffer1
Diff to previous 6070
Move RELENG_0_1 to stable/0.1

Revision 6070 - Directory Listing - [select for diffs]
Modified Sat Nov 30 03:05:58 2013 UTC (8 years, 1 month ago) by laffer1
Diff to previous 6069
Move RELENG_0_2 to stable/0.2

Revision 6069 - Directory Listing - [select for diffs]
Modified Sat Nov 30 03:05:29 2013 UTC (8 years, 1 month ago) by laffer1
Diff to previous 6068
Move RELENG_0_3 to stable/0.3

Revision 6068 - Directory Listing - [select for diffs]
Modified Sat Nov 30 03:04:40 2013 UTC (8 years, 1 month ago) by laffer1
Diff to previous 6067
Move RELENG_0_4 to stable/0.4

Revision 6067 - Directory Listing - [select for diffs]
Added Sat Nov 30 03:03:37 2013 UTC (8 years, 1 month ago) by laffer1
Create stable directory for storing RELENG_0_N branches, etc. 

Convenience Links