[ViewVC] Diff of: src/trunk/UPDATING

Comparing trunk/UPDATING (file contents):
Revision 3618 by laffer1, Thu Jan 20 22:08:10 2011 UTC vs.
Revision 6971 by laffer1, Sat Mar 7 02:55:43 2015 UTC

-<
+Updating Information for MidnightBSD users
->
+Updating Information for MidnightBSD users.
-+
+20150306:
-+
+        Upgrade OpenSSL to 0.9.8ze
-+
-+
+20150225:
-+
+        Fix two security vulnerabilities.
-+
-+
+. BIND servers which are configured to perform DNSSEC validation and which
-+
+        are using managed keys (which occurs implicitly when using
-+
+        "dnssec-validation auto;" or "dnssec-lookaside auto;") may exhibit
-+
+        unpredictable behavior due to the use of an improperly initialized
-+
+        variable.
-+
-+
+        CVE-2015-1349
-+
-+
+. An integer overflow in computing the size of IGMPv3 data buffer can result
-+
+        in a buffer which is too small for the requested operation.
-+
-+
+        This can result in a DOS attack.
-+
-+
+20141211:
-+
+        Fix a security issue with file and libmagic that can allow
-+
+        an attacker to create a denial of service attack on any
-+
+        program that uses libmagic.
-+
-+
+20141109:
-+
+        Fix building perl during buildworld when the GDBM port is installed.
-+
-+
+20141106:
-+
+        tzdata 2014i
-+
-+
+20141102:
-+
+        serf 1.3.8
-+
-+
+20141031:
-+
+        tnftp 20141031 fixes a security vulnerability with tnftp,
-+
+        CVE-2014-8517.
-+
-+
+20141028:
-+
+        OpenSSL 0.9.8zc
-+
-+
+20141021:
-+
+        Fix several security vulnerabilities in routed, rtsold,
-+
+        and namei with respect to Capsicum sandboxes looking up
-+
+        nonexistent path names and leaking memory.
-+
-+
+        The input path in routed(8) will accept queries from any source and
-+
+        attempt to answer them.  However, the output path assumes that the
-+
+        destination address for the response is on a directly connected
-+
+        network.
-+
-+
+        Due to a missing length check in the code that handles DNS parameters,
-+
+        a malformed router advertisement message can result in a stack buffer
-+
+        overflow in rtsold(8).
-+
-+
+20141011:
-+
+        mksh R50d - fix field splitting regression and null
-+
+        pointer dereference
-+
-+
+        xz 5.0.7
-+
-+
+        OpenSSH 6.6p1
-+
-+
+20141004:
-+
+        mksh R50c - security update for environment var bug with
-+
+        foo vs foo+
-+
-+
+20141002:
-+
+        sqlite 3.8.6
-+
-+
+        sudo 1.7.8 - some issues with the current version, but we're slowly
-+
+        getting up to date.
-+
-+
+20141001:
-+
+        mksh R50b
-+
-+
+        libmport now supports plist commands @dir, @owner, @group, @mode.
-+
-+
+        sudo 1.7.6p2
-+
-+
+20140916:
-+
+        Fix a security issue with TCP SYN.
-+
-+
+        When a segment with the SYN flag for an already existing connection arrives,
-+
+        the TCP stack tears down the connection, bypassing a check that the
-+
+        sequence number in the segment is in the expected window.
-+
-+
+20140909:
-+
+        Fixed a bug with our clearenv(3) implementation that caused segfaults
-+
+        with some programs including Dovecot.
-+
-+
+        OpenSSL security patch:
-+
-+
+        The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
-+
+        to consume large amounts of memory. [CVE-2014-3506]
-+
-+
+        The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
-+
+        memory. [CVE-2014-3507]
-+
-+
+        A flaw in OBJ_obj2txt may cause pretty printing functions such as
-+
+        X509_name_oneline, X509_name_print_ex et al. to leak some information from
-+
+        the stack. [CVE-2014-3508]
-+
-+
+        OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
-+
+        a denial of service attack. [CVE-2014-3510]
-+
-+
+20140902:
-+
+        We're now 0.6-CURRENT
-+
-+
+        Update USB quirks to support K70 Corsair keyboard, and several
-+
+        other devices.
-+
-+
+20140827:
-+
+        Perl 5.18.2
-+
-+
+20140728:
-+
+        Jails now run shutdown scripts.
-+
-+
+20140710:
-+
+        Fix a vulnerability in the control message API. A buffer is not properly cleared
-+
+        before sharing with userland.
-+
-+
+20140701:
-+
+        MKSH R50
-+
-+
+20140630:
-+
+        File 5.19
-+
-+
+20140605:
-+
+        Fix four security issues with OpenSSL
-+
-+
+20140604:
-+
+        Sendmail failed to properly set close-on-exec for open file descriptors.
-+
-+
+        ktrace page fault kernel trace entries were set to an incorrect size which resulted
-+
+        in a leak of information.
-+
-+
+20140430:
-+
+        Fix a TCP reassembly bug that could result in a DOS attack
-+
+        of the system. It may be possible to obtain portions
-+
+        of kernel memory as well.
-+
-+
+20140411:
-+
+        Update zlib to 1.2.7
-+
-+
+20140122:
-+
+        Support for username with length 32. Previous limit was 16
-+
-+
+20140114:
-+
+        Fix two security vulnerabilities.
-+
-+
+        bsnmpd contains a stack overflow when sent certain queries.
-+
-+
+        bind 9.8 when using NSEC3-signed zones zones, will crash with special
-+
+        crafted packets.
-+
-+
+20131228:
-+
+        Imported FreeBSD 9.2 usb stack (plus z87 patches from stable)
-+
-+
+        Updated em(4), igb(4) and ixgbe(4)
-+
-+
+        MidnightBSD now works with Z87 Intel chipsets.
-+
-+
+20131207:
-+
+        Remove sparc64 architecture. It hasn't been working for awhile
-+
+        and it's not useful for desktops anymore.
-+
-+
+20131205:
-+
+        OpenSSH 6.4p1
-+
-+
+20131203:
-+
+        Perl 5.18.1 imported.
-+
-+
+        Update less to v458
-+
-+
+20131130:
-+
+        Remove named from base. We still include the client utilities for
-+
+        now until replacements can be found.
-+
-+
+20131004:
-+
+        rarpd supports vlan(4) and has a pid flag. (from FreeBSD)
-+
-+
+20130917:
-+
+        Support for 65,536 routing tables was added.  A new fib specific
-+
+        field has been added to mbuf.  This is an increase from 16.
-+
-+
+20130910:
-+
+        Security updates: (kern.osreldate 5001)
-+
-+
+        nullfs(5)
-+
-+
+        The nullfs(5) implementation of the VOP_LINK(9) VFS operation does not
-+
+        check whether the source and target of the link are both in the same
-+
+        nullfs instance.  It is therefore possible to create a hardlink from a
-+
+        location in one nullfs instance to a file in another, as long as the
-+
+        underlying (source) filesystem is the same.
-+
-+
+        ifioctl
-+
-+
+        As is commonly the case, the IPv6 and ATM network layer ioctl request
-+
+        handlers are written in such a way that an unrecognized request is
-+
+        passed on unmodified to the link layer, which will either handle it or
-+
+        return an error code.
-+
-+
+        Network interface drivers, however, assume that the SIOCSIFADDR,
-+
+        SIOCSIFBRDADDR, SIOCSIFDSTADDR and SIOCSIFNETMASK requests have been
-+
+        handled at the network layer, and therefore do not perform input
-+
+        validation or verify the caller's credentials.  Typical link-layer
-+
+        actions for these requests may include marking the interface as "up"
-+
+        and resetting the underlying hardware.
-+
-+
+20130824:
-+
+        Fix a bug in sendmail 8.14.7 that interferes with how it
-+
+        handles AAAA records interoperating with Microsoft DNS servers.
-+
+        FreeBSD has already reported this to Sendmail and a fix
-+
+        will be included in the next release.
-+
-+
+        Subversion 1.8.1 is now in the base system as a static
-+
+        binary.  It has limited functionality, but can be used to
-+
+        checkout/commit code.  It is named svnlite.
-+
-+
+20130822:
-+
+        Fix two security vulnerabilities.
-+
-+
+        Fix an integer overflow in IP_MSFILTER (IP MULTICAST).
-+
+        This could be exploited to read memory by a user process.
-+
-+
+        When initializing the SCTP state cookie being sent in INIT-ACK chunks,
-+
+        a buffer allocated from the kernel stack is not completely initialized.
-+
-+
+        Import xz 5.0.4
-+
-+
+        Import sqlite 3.7.17
-+
-+
+        Import BIND 9.8.5-P2
-+
-+
+20130814:
-+
+        mksh R48 imported.
-+
-+
+        Sendmail 8.14.7 imported.
-+
-+
+20130717:
-+
+        libmport bug was fixed causing hash verification to fail.
-+
-+
+        virtio(4) imported from FreeBSD 9-stable. SCSI support not
-+
+        included.
-+
-+
+20130612:
-+
+        RELENG_0_4 created for 0.4. Development continues on 0.5.
-+
-+
+20130402:
-+
+        Update BIND and OpenSSL to resolve security advisories.
-+
-+
+20130305:
-+
+        MKSH R44 imported.
-+
-+
+20130213:
-+
+        MKSH R42b imported
-+
-+
+20130211:
-+
+        MKSH R42 imported
-+
-+
+20130125:
-+
+        MKSH R41 imported
-+
-+
+20130122:
-+
+        OpenSSH 5.8p2 imported
-+
-+
+        SQLite 3.7.15.2 imported
-+
-+
+        Fixed a longstanding bug in libmport extrating new index files.
-+
-+
+20120710:
-+
+        BSD licensed sort imported from FreeBSD-CURRENT
-+
-+
+        For now, GNU sort is installed as gnusort, but it will
-+
+        go away in time.
-+
-+
+20120708:
-+
+        tcsh 6.18.01 imported.
-+
-+
+        NetBSD's iconv imported.
-+
-+
+        libc gains strnlen(3), memrchr(3), stpncpy(3).
-+
-+
+20120612:
-+
+        BIND security update related to CVE-2012-1667.
-+
-+
+        Zero length resource records can cause BIND to crash resulting
-+
+        in a DOS attack or information disclosure.
-+
-+
+20120407:
-+
+        mksh R40f (fixes regression)
-+
-+
+20120328:
-+
+        mksh R40e
-+
-+
+        Perl 5.14.2
-+
-+
+20120229:
-+
+        cpucontrol(8) and cpuctl(4) added from FreeBSD 7-stable.
-+
-+
+20120209:
-+
+        mDNSResponder 333.10 imported
-+
-+
+20111227:
-+
+        import raid5 module for GEOM, graid5(8)
-+
-+
+        This is experimental and known to use a lot of kernel
-+
+        memory.
-+
-+
+20111223:
-+
+        telnetd: fix a root exploit from a fixed buffer that was not checked
-+
-+
+        pam: don't allow escape from policy path.  Exploitable in KDE, etc.
-+
-+
+        Fix pam_ssh module:
-+
-+
+        If the pam_ssh module is enabled, attackers may be able to gain access
-+
+        to user accounts which have unencrypted SSH private keys.
-+
-+
+        This has to due with the way that openssl works.  It ignores unencrpted data.
-+
-+
+        Fix security issue with chroot and ftpd.
-+
-+
+        nsdispatch(3) doesn't know it's working in a chroot and some
-+
+        operations can cause files to get reloaded causing a security
-+
+        hole in things like ftpd.
-+
-+
+20111217:
-+
+        libdialog/dialog upgraded to an lgpl version. As it's not
-+
+        backwardly compatable, include the old libdialog as libodialog
-+
-+
+20111212:
-+
+        mksh r40d imported
-+
-+
+20111210:
-+
+        re(4) and rl(4) updated to support new chips.
-+
-+
+        GEOM synced with FreeBSD 7-stable.
-+
-+
+        MidnightBSD GPT partition types created in sys/gpt.h and
-+
+        setup in boot loader and GEOM.
-+
-+
+        amdsbwd(4) (amd watchdog for south bridge) updated to support
-+
+xx series chipset.
-+
-+
+20111207:
-+
+        import bsd grep from FreeBSD/OpenBSD.
-+
-+
+        MK_BSD_GREP controls which grep is installed
-+
+        as grep with the other as bsdgrep or gnugrep.
-+
-+
+20111122:
-+
+        mksh vR40c imported.
-+
-+
+20111117:
-+
+        BIND 9.6 ESV R5 P1
-+
-+
+20111107:
-+
+        tzdata 2011n
-+
-+
+20111026:
-+
+        mDNSResponder v320
-+
-+
+        BIND 9.6 ESV R5
-+
-+
+20111022:
-+
+        cflow 0.0.6 imported
-+
-+
+20111020:
-+
+        less v436 imported
-+
-+
+        amdsbwd(4) AMD southbridge watchdog
-+
-+
+20111019:
-+
+        awk 20110810 imported
-+
-+
+        et(4) Agere Gigabit Ethernet/Fast Ethernet driver added, but
-+
+        not included in GENERIC kernel.  The kernel module needs
-+
+        testing before we can include it in GENERIC.
-+
-+
+        intr_bind code ported to allow an IRQ to be bound to one
-+
+        specific CPU core.
-+
-+
+20111017:
-+
+        Time Zone Data v. 2011l (Released 10 October 2011)
-+
-+
+        Updated list of countries (iso3166) to work with new timezone data.
-+
-+
+20111015:
-+
+        Introduce CPU Affinity in MidnightBSD. cpuset(1) can be used
-+
+        to control which core or group of cores can be used for a given
-+
+        process. Several new system calls were added to support this
-+
+        functionality in the running kernel and for 32bit binary
-+
+        compatibility on amd64.
-+
-+
+        The scheduler default has been changed to ULE in i386 and
-+
+        amd64.  Changes were made to both schedulers (4BSD AND ULE)
-+
+        for this feature.
-+
-+
+        This work is based on Jeff Roberson's FreeBSD 7.1 patches.
-+
-+
+20111004:
-+
+        Fix a problem with unix socket handling caused by the recent
-+
+        patch to unix socket path handling. This allows network
-+
+        apps to work under the linuxolator again.
-+
-+
+20111001:
-+
+        Import libfetch & fetch(1) from FreeBSD 9. Passive FTP is
-+
+        now default and an environment variable must be set to use
-+
+        active.
-+
-+
+20110930:
-+
+        Introduce quirks handling for several umass devices including
-+
+        USB cameras.  Add workaround for Cyberpower UPS devices.
-+
-+
+        Bring in further bug fixes from FreeBSD and NetBSD for alc(4).
-+
+        Stale ip/tcp header pointers are no longer used, lockups fixed
-+
+        when network cable is unplugged on bootup, enable TX checksum
-+
+        offloading.
-+
-+
+        Add a new man page for gcache(8), a useful geom class when
-+
+        working with large raid3 sets.
-+
-+
+        Restore previous workaround for Cypress pata storage controller.
-+
-+
+20110929:
-+
+        Sync ath(4) with FreeBSD 7.3.
-+
-+
+        The following modules are no longer available, and should be
-+
+        removed from loader.conf:
-+
+        ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
-+
-+
+        alc(4) would hibernate when a cable was unplugged and often
-+
+        required bring the interface down and up to "wake up" so that
-+
+        a connection could be established.  Disable hibernation.
-+
-+
+20110928:
-+
+        Fix security issues with gzip and compress related to .Z
-+
+        files that are corrupted.
-+
-+
+        Fix path validation with unix domain sockets.
-+
-+
+20110917:
-+
+        Remove dependance on mports perl for generating releases as
-+
+        it's in the base system.
-+
-+
+20110914:
-+
+        Import xz 5.0.3 with liblzma 5.0.3
-+
-+
+20110813:
-+
+        synced the sparc64 GENERIC kernel configuration with amd64.
-+
-+
+20110806:
-+
+        sqlite 3.7.7.1 imported
-+
-+
+        msearch(1), libmsearch and msearch.import added.  msearch(1) provides
-+
+        a full text search command line tool.  libmsearch can also be used
-+
+        to build a graphical based search in the future. You can enable
-+
+        index building for msearch in periodic.conf or manually run the
-+
+        /usr/libexec/msearch.index tool.  Full text indexes take considerable
-+
+        space in /var.  I'm using approximately 500MB currently.
-+
-+
+        Fix a long standing bug with the periodic script to check package
-+
+        versions.  This will be obsolete with mport though.
-+
-+
+20110710:
-+
+        kdb_enter_why added to MidnightBSD to allow the kernel debugger to
-+
+        know why it's in use and thus script can be run.
-+
-+
+        Yet another problem with the perl manifest was fixed
-+
-+
+20110709:
-+
+        cpufreq(1) is a new utility to monitor CPU frequency which may change
-+
+        with use of powerd(8) and cpufreq(4).
-+
-+
+20110612:
-+
+        Update mksh to R40
-+
-+
+        Catch up ObsoleteFiles.inc to remove Perl 5.10.x.  Good to run when
-+
+        updating current (cd /usr/src && make check-old)
-+
-+
+20110528:
-+
+        Fix CVE-2011-1910 in BIND 9.6.x.  This affects caching resolvers.
-+
-+
+20110526:
-+
+        newfs:
-+
+        Raised the default blocksize for UFS/FFS filesystems from
-+
+K to 32K and the default fragment size from 2K to 4K.
-+
-+
+        This should slightly imporve performance on "advanced format"
-+
+        hard drives such as the WD EARS drives. Drives of this type
-+
+        have emulation modes that slow down with lower sizes.  Of course
-+
+        the drive must still be aligned properly when using fdisk.
-+
-+
+20110521:
-+
+        mport tool now has a deleteall command.  This can be used to remove
-+
+        all packages from a system.
-+
-+
+        A few bugs with the perl 5.14 import have been fixed.
-+
-+
+20110518:
-+
+        Perl 5.14.0
-+
-+
+20110517:
-+
+        Sendmail 8.14.5
-+
-+
+20110314:
-+
+        DRM/DRI code updated to support newer video cards. (FreeBSD 7.1)
-+
-+
+        cdevpriv wrappers added
-+
-+
+        nss_mdns hack introduced to work around linking problem.
-+
-+
+        dnsextd fixed after update to mDNSResponder code.
-+
-+
+20110308:
-+
+        Introduce liblzma & xz 5.0.1 to the base system
-+
-+
+        Patch for OpenSSL security issue CVE-2011-0014.
-+
-+
+        "OSREVISION 4004"
-+
-+
+        nsswitch module for multicast dns (nss_mdns) added.
-+
-+
+        tzdata2011c
-+
-+
+20110220:
-+
+        cam(4) syncronized with FreeBSD 7.3.
-+
-+
+20110219:
-+
+        amdtemp(4) updated to support sensors framework.
-+
-+
+20110217:
-+
+        Perl 5.10.1 imported
-+
-+
+20110216:
-+
+        Introduce igb(4) and split Intel Gigabit Ethernet adapters between
-+
+        igb(4) and em(4).  Newer devices use igb(4).  The code has moved
-+
+        to sys/dev/e1000 for both devices in the kernel. igb(4) has
-+
+        been placed in GENERIC on i386 and amd64.
-+
-+
+        Update bfe(4) to support newer devices and WOL.
-+
-+
+20110215:
-+
+        age(4) added.
-+
-+
+20110208:
-+
+        BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
-+
-+
+20110206:
-+
+        eeemon(4) added to monitor Asus Eee PC.
-+
-+
+20110205:
-+
+        OpenSSH 5.7p1
-+
-+
+        GNU sort 6.9 (coreutils)
-+
-+
+20110203:
-+
+        one true awk 20100523 imported
-+
-+
+        sqlite 3.7.5
-+
-+
+        OpenSSL 0.9.8q
-+
-+
+20110202:
-+
+        tcsh 6.17.00
-+
-+
+        file 5.05
-+
-+
+20110122:
-+
+        Import it(4) and lm(4), with support for Super I/O hardware monitors. This
-+
+        uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
-+
+20110120:
+        BIND 9.6.2-P3
-+
+        sudo 1.7.4-p6
-+
+20110115:
+        Add experimental jme(4) for Jmicron ethernet devices.
+this document.
+$FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
-<
+$MidnightBSD: src/UPDATING,v 1.101 2011/01/15 05:56:21 laffer1 Exp $
->
+$MidnightBSD$

Comparing trunk/UPDATING (property cvs2svn:cvs-rev):
Revision 3618 by laffer1, Thu Jan 20 22:08:10 2011 UTC vs.
Revision 6971 by laffer1, Sat Mar 7 02:55:43 2015 UTC

#	Line 1 \| Line 0
1	–	1.102

Comparing trunk/UPDATING (property svn:keywords):
Revision 3618 by laffer1, Thu Jan 20 22:08:10 2011 UTC vs.
Revision 6971 by laffer1, Sat Mar 7 02:55:43 2015 UTC

#	Line 0 \| Line 1
1	+	MidnightBSD=%H

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing trunk/UPDATING (file contents): Revision 3618 by laffer1, Thu Jan 20 22:08:10 2011 UTC vs. Revision 6971 by laffer1, Sat Mar 7 02:55:43 2015 UTC

Comparing trunk/UPDATING (property cvs2svn:cvs-rev): Revision 3618 by laffer1, Thu Jan 20 22:08:10 2011 UTC vs. Revision 6971 by laffer1, Sat Mar 7 02:55:43 2015 UTC

Comparing trunk/UPDATING (property svn:keywords): Revision 3618 by laffer1, Thu Jan 20 22:08:10 2011 UTC vs. Revision 6971 by laffer1, Sat Mar 7 02:55:43 2015 UTC

Diff Legend

Comparing trunk/UPDATING (file contents):
Revision 3618 by laffer1, Thu Jan 20 22:08:10 2011 UTC vs.
Revision 6971 by laffer1, Sat Mar 7 02:55:43 2015 UTC

Comparing trunk/UPDATING (property cvs2svn:cvs-rev):
Revision 3618 by laffer1, Thu Jan 20 22:08:10 2011 UTC vs.
Revision 6971 by laffer1, Sat Mar 7 02:55:43 2015 UTC

Comparing trunk/UPDATING (property svn:keywords):
Revision 3618 by laffer1, Thu Jan 20 22:08:10 2011 UTC vs.
Revision 6971 by laffer1, Sat Mar 7 02:55:43 2015 UTC