ViewVC Help
View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing
root/src/trunk/UPDATING
(Generate patch)

Comparing trunk/UPDATING (file contents):
Revision 3403 by laffer1, Wed May 5 20:40:34 2010 UTC vs.
Revision 7448 by laffer1, Mon Feb 22 13:06:04 2016 UTC

# Line 1 | Line 1
1 < Updating Information for MidnightBSD users
1 > Updating Information for MidnightBSD users.
2  
3 + 20160222:
4 +        Introduce pipe2 to linux emulation layer.
5 +
6 + 20160114:
7 +        OpenSSL
8 +
9 +        The signature verification routines will crash with a NULL pointer dereference
10 +        if presented with an ASN.1 signature using the RSA PSS algorithm and absent
11 +        mask generation function parameter. [CVE-2015-3194]
12 +
13 +        When presented with a malformed X509_ATTRIBUTE structure, OpenSSL will leak
14 +        memory. [CVE-2015-3195]
15 +
16 +        If PSK identity hints are received by a multi-threaded client then the values
17 +        are incorrectly updated in the parent SSL_CTX structure.  [CVE-2015-3196]
18 +
19 +        Fix security on bsnmpd configuration file during installation.
20 +
21 +        TCP MD5 signature denial of service
22 +
23 +        A programming error in processing a TCP connection with both TCP_MD5SIG
24 +        and TCP_NOOPT socket options may lead to kernel crash.
25 +
26 +        SCTP
27 +
28 +        A lack of proper input checks in the ICMPv6 processing in the SCTP stack
29 +        can lead to either a failed kernel assertion or to a NULL pointer
30 +        dereference.  In either case, a kernel panic will follow.
31 +
32 + 20160102:
33 +        Happy New Year
34 +
35 + 20151101:
36 +        Increase kern.ipc.somaxconn default to 256.
37 +
38 + 20151017:
39 +        Add initial statistics api to libmport and a driver to print
40 +        it in mport(1).
41 +
42 + 20151002:
43 +        Revised rpcbind(8) patch to fix issues with NIS
44 +
45 + 20150930:
46 +        In rpcbind(8), netbuf structures are copied directly, which would result in
47 +        two netbuf structures that reference to one shared address buffer.  When one
48 +        of the two netbuf structures is freed, access to the other netbuf structure
49 +        would result in an undefined result that may crash the rpcbind(8) daemon.
50 +
51 + 20150926:
52 +        libmport now supports @preexec, @postexec, @preunexec and @postunexec
53 +        to replace @exec and @unexec.  
54 +
55 +        pre exec runs afer pre-install scripts but before actual installation
56 +
57 +        post exec runs after install but before post install scripts and
58 +        pkg message.
59 +
60 +        pre unexec runs before pre uninstall scripts
61 +
62 +        post unexec runs before de-install scripts and after file removal.
63 +
64 + 20150917:
65 +        Fix kqueue write events for files > 2GB
66 +
67 + 20150825:
68 +        kernel:
69 +        fix a security issue on amd64 where the GS segment CPU register can be changed via
70 +        userland value in kernel mode by using an IRET with #SS or #NP exceptions.
71 +
72 +        openssh:
73 +        A programming error in the privileged monitor process of the sshd(8)
74 +        service may allow the username of an already-authenticated user to be
75 +        overwritten by the unprivileged child process.
76 +
77 +        A use-after-free error in the privileged monitor process of he sshd(8)
78 +        service may be deterministically triggered by the actions of a
79 +        compromised unprivileged child process.
80 +
81 +        A use-after-free error in the session multiplexing code in the sshd(8)
82 +        service may result in unintended termination of the connection.
83 +
84 + 20150818:
85 +        expat security fix
86 +
87 + 20150815:
88 +        libc changes:
89 +        setmode(3) now returns errno consistently on error.
90 +        libc will compile without error using clang
91 +
92 + 20150814:
93 +        wait6 system call added.
94 +
95 +        date(1) now handles non numeric numbers passed to -r
96 +        like GNU coreutils for improved compatibility.
97 +
98 + 20150811:
99 +        ata(4) AMD Hudson2 SATA controller support.
100 +        Intel lynxpoint SATA.
101 +
102 +        Fix some const warnings when building several device drivers
103 +        with llvm/clang.
104 +
105 +        Sync cas(4) with FreeBSD 9-stable.
106 +
107 +        Fix some minor issues with ath(4).
108 +
109 + 20150809:
110 +        xz 5.0.8
111 +
112 + 20150808:
113 +        libmport now logs installation and removal of packages to syslog.
114 +
115 + 20150805:
116 +        routed - fix a potential security issue where traffic from outside
117 +        the network can disrupt routing.
118 +
119 +        bsd patch - fix a bug with ed(1) scripts allowing unsanitized input
120 +        to run.
121 +
122 + 20150802:
123 +        jansson 2.7 library added. (libjansson is a JSON library in C)
124 +
125 + 20150728:
126 +        Heimdal 1.5.2 (kerberos implementation)
127 +
128 +        OpenSSL 1.0.1o
129 +
130 +        cpucontrol(8) now supports VIA CPUs. Synced with FreeBSD 9.2.
131 +
132 +        TCP Resassemly resource exhaustion bug:
133 +        There is a mistake with the introduction of VNET, which converted the
134 +        global limit on the number of segments that could belong to reassembly
135 +        queues into a per-VNET limit.  Because mbufs are allocated from a
136 +        global pool, in the presence of a sufficient number of VNETs, the
137 +        total number of mbufs attached to reassembly queues can grow to the
138 +        total number of mbufs in the system, at which point all network
139 +        traffic would cease.
140 +        Obtained from: FreeBSD 8
141 +
142 +        OpenSSH
143 +
144 +        Fix two security vulnerabilities:
145 +        OpenSSH clients does not correctly verify DNS SSHFP records when a server
146 +        offers a certificate. [CVE-2014-2653]
147 +
148 +        OpenSSH servers which are configured to allow password authentication
149 +        using PAM (default) would allow many password attempts. A bug allows
150 +        MaxAuthTries to be bypassed. [CVE-2015-5600]
151 +
152 +
153 +        Switch to bsdpatch (from FreeBSD & OpenBSD)
154 +
155 + 20150726:
156 +        BSD Sort updated
157 +
158 +        sqlite 3.8.10.2
159 +
160 + 20150725:
161 +        Import reallocarray from OpenBSD's libc.  
162 +
163 +        The reallocarray() function is similar to realloc() except it operates on
164 +        nmemb members of size size and checks for integer overflow in the
165 +        calculation nmemb * size.
166 +
167 + 20150722:
168 +        Fix a bug where TCP connections transitioning to LAST_ACK
169 +        state can get stuck. This can result in a denial of service.
170 +
171 + 20150715:
172 +        libmport now supports @shell and @sample in plists. This means that
173 +        a shell port can automatically add an entry to /etc/shells and remove
174 +        it upon uninstallation. For sample files, a copy is made without the
175 +        .sample extension if one does not exist and it is removed automatically
176 +        only if the md5 hash of the two files is the same.
177 +
178 + 20150709:
179 +        flex 2.5.39
180 +
181 + 20150702:
182 +        ZFS in MidnightBSD now supports lz4 compression. You can enable it
183 +        with zfs set compression=lz4 pool/path.
184 +
185 +        Verify it's working with
186 +        zfs get compressratio pool/path
187 +        du -h -s *
188 +
189 +        Note you must write new data when turning on compression to see
190 +        changes. Existing files are not compressed.
191 +
192 +        Note: While we used the same basic implementation of lz4 that
193 +        FreeBSD and OpenZFS uses, we did not yet implement features support
194 +        and the zfs version still reports 28. This may come in a future update
195 +        to ZFS.
196 +
197 + 20150621:
198 +        libmport now automatically stops services when deleting packages.
199 +
200 +        The package must have installed an rc.d script in /usr/local/etc
201 +        for this to work. This is equivalent to running service <name> onestop
202 +
203 + 20150618:
204 +        Sendmail
205 +
206 +        With the recent changes to OpenSSL to block 512 bit certificates,
207 +        sendmail can't connect with TLS to some servers.
208 +
209 +        Increase the default size to 1024 bit for client connections to
210 +        match the server configuration.
211 +
212 +        ZFS
213 +
214 +        Added ZFS TRIM support which is enabled by default. To disable
215 +        ZFS TRIM support set vfs.zfs.trim.enabled=0 in loader.conf.
216 +
217 +        Creating new ZFS pools and adding new devices to existing pools
218 +        first performs a full device level TRIM which can take a significant
219 +        amount of time. The sysctl vfs.zfs.vdev.trim_on_init can be set to 0
220 +        to disable this behaviour.
221 +
222 +        ZFS TRIM requires the underlying device support BIO_DELETE which
223 +        is currently provided by methods such as ATA TRIM and SCSI UNMAP
224 +        via CAM, which are typically supported by SSD's.
225 +
226 +        Stats for ZFS TRIM can be monitored by looking at the sysctl's
227 +        under kstat.zfs.misc.zio_trim.
228 +
229 +        rc.d
230 +
231 +        Reworked handling of cleanvar and FILESYSTEMS so that FILESYSTEMS
232 +        implies everything is mounted and ready to go.
233 +
234 +        Changed how ip6addressctl maps IPv6 on startup.
235 +
236 + 20150613:
237 +        tzdata 2015d
238 +
239 + 20150612:
240 +        OpenSSL 0.9.8zg
241 +
242 + 20150419:
243 +        MidnightBSD 0.6 stable branch created. Continue 0.7
244 +        development.
245 +
246 + 20150418:
247 +        sqlite 3.8.9
248 +
249 + 20150407:
250 +        Fix two security vulnerabilities:
251 +
252 +        The previous fix for IGMP had an overflow issue. This has been corrected.
253 +
254 +        ipv6: The Neighbor Discover Protocol allows a local router to advertise a
255 +        suggested Current Hop Limit value of a link, which will replace
256 +        Current Hop Limit on an interface connected to the link on the MidnightBSD
257 +        system.
258 +
259 + 20150319:
260 +        OpenSSL 0.9.8.zf
261 +
262 +        mksh R50e
263 +
264 +        Apple mDNSResponder 561.1.1
265 +
266 + 20150306:
267 +        Upgrade OpenSSL to 0.9.8ze
268 +
269 + 20150225:
270 +        Fix two security vulnerabilities.
271 +
272 +        1. BIND servers which are configured to perform DNSSEC validation and which
273 +        are using managed keys (which occurs implicitly when using
274 +        "dnssec-validation auto;" or "dnssec-lookaside auto;") may exhibit
275 +        unpredictable behavior due to the use of an improperly initialized
276 +        variable.
277 +
278 +        CVE-2015-1349
279 +
280 +        2. An integer overflow in computing the size of IGMPv3 data buffer can result
281 +        in a buffer which is too small for the requested operation.
282 +
283 +        This can result in a DOS attack.
284 +
285 + 20141211:
286 +        Fix a security issue with file and libmagic that can allow
287 +        an attacker to create a denial of service attack on any
288 +        program that uses libmagic.
289 +
290 + 20141109:
291 +        Fix building perl during buildworld when the GDBM port is installed.
292 +
293 + 20141106:
294 +        tzdata 2014i
295 +
296 + 20141102:
297 +        serf 1.3.8
298 +
299 + 20141031:
300 +        tnftp 20141031 fixes a security vulnerability with tnftp,
301 +        CVE-2014-8517.
302 +
303 + 20141028:
304 +        OpenSSL 0.9.8zc
305 +
306 + 20141021:
307 +        Fix several security vulnerabilities in routed, rtsold,
308 +        and namei with respect to Capsicum sandboxes looking up
309 +        nonexistent path names and leaking memory.
310 +
311 +        The input path in routed(8) will accept queries from any source and
312 +        attempt to answer them.  However, the output path assumes that the
313 +        destination address for the response is on a directly connected
314 +        network.
315 +
316 +        Due to a missing length check in the code that handles DNS parameters,
317 +        a malformed router advertisement message can result in a stack buffer
318 +        overflow in rtsold(8).
319 +
320 + 20141011:
321 +        mksh R50d - fix field splitting regression and null
322 +        pointer dereference
323 +
324 +        xz 5.0.7
325 +
326 +        OpenSSH 6.6p1
327 +
328 + 20141004:
329 +        mksh R50c - security update for environment var bug with
330 +        foo vs foo+    
331 +
332 + 20141002:
333 +        sqlite 3.8.6
334 +
335 +        sudo 1.7.8 - some issues with the current version, but we're slowly
336 +        getting up to date.
337 +
338 + 20141001:
339 +        mksh R50b
340 +
341 +        libmport now supports plist commands @dir, @owner, @group, @mode.
342 +
343 +        sudo 1.7.6p2
344 +
345 + 20140916:
346 +        Fix a security issue with TCP SYN.
347 +
348 +        When a segment with the SYN flag for an already existing connection arrives,
349 +        the TCP stack tears down the connection, bypassing a check that the
350 +        sequence number in the segment is in the expected window.
351 +
352 + 20140909:
353 +        Fixed a bug with our clearenv(3) implementation that caused segfaults
354 +        with some programs including Dovecot.
355 +
356 +        OpenSSL security patch:
357 +
358 +        The receipt of a specifically crafted DTLS handshake message may cause OpenSSL
359 +        to consume large amounts of memory. [CVE-2014-3506]
360 +
361 +        The receipt of a specifically crafted DTLS packet could cause OpenSSL to leak
362 +        memory. [CVE-2014-3507]
363 +
364 +        A flaw in OBJ_obj2txt may cause pretty printing functions such as
365 +        X509_name_oneline, X509_name_print_ex et al. to leak some information from
366 +        the stack. [CVE-2014-3508]
367 +
368 +        OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to
369 +        a denial of service attack. [CVE-2014-3510]
370 +
371 + 20140902:
372 +        We're now 0.6-CURRENT
373 +
374 +        Update USB quirks to support K70 Corsair keyboard, and several
375 +        other devices.
376 +
377 + 20140827:
378 +        Perl 5.18.2
379 +
380 + 20140728:
381 +        Jails now run shutdown scripts.
382 +
383 + 20140710:
384 +        Fix a vulnerability in the control message API. A buffer is not properly cleared
385 +        before sharing with userland.
386 +
387 + 20140701:
388 +        MKSH R50
389 +
390 + 20140630:
391 +        File 5.19
392 +
393 + 20140605:
394 +        Fix four security issues with OpenSSL
395 +
396 + 20140604:
397 +        Sendmail failed to properly set close-on-exec for open file descriptors.
398 +
399 +        ktrace page fault kernel trace entries were set to an incorrect size which resulted
400 +        in a leak of information.
401 +
402 + 20140430:
403 +        Fix a TCP reassembly bug that could result in a DOS attack
404 +        of the system. It may be possible to obtain portions
405 +        of kernel memory as well.
406 +
407 + 20140411:
408 +        Update zlib to 1.2.7
409 +
410 + 20140122:
411 +        Support for username with length 32. Previous limit was 16
412 +
413 + 20140114:
414 +        Fix two security vulnerabilities.
415 +
416 +        bsnmpd contains a stack overflow when sent certain queries.
417 +
418 +        bind 9.8 when using NSEC3-signed zones zones, will crash with special
419 +        crafted packets.
420 +
421 + 20131228:
422 +        Imported FreeBSD 9.2 usb stack (plus z87 patches from stable)
423 +
424 +        Updated em(4), igb(4) and ixgbe(4)
425 +
426 +        MidnightBSD now works with Z87 Intel chipsets.
427 +
428 + 20131207:
429 +        Remove sparc64 architecture. It hasn't been working for awhile
430 +        and it's not useful for desktops anymore.
431 +
432 + 20131205:
433 +        OpenSSH 6.4p1
434 +
435 + 20131203:
436 +        Perl 5.18.1 imported.
437 +
438 +        Update less to v458
439 +
440 + 20131130:
441 +        Remove named from base. We still include the client utilities for
442 +        now until replacements can be found.
443 +
444 + 20131004:
445 +        rarpd supports vlan(4) and has a pid flag. (from FreeBSD)
446 +
447 + 20130917:
448 +        Support for 65,536 routing tables was added.  A new fib specific
449 +        field has been added to mbuf.  This is an increase from 16.
450 +
451 + 20130910:
452 +        Security updates: (kern.osreldate 5001)
453 +
454 +        nullfs(5)
455 +
456 +        The nullfs(5) implementation of the VOP_LINK(9) VFS operation does not
457 +        check whether the source and target of the link are both in the same
458 +        nullfs instance.  It is therefore possible to create a hardlink from a
459 +        location in one nullfs instance to a file in another, as long as the
460 +        underlying (source) filesystem is the same.
461 +
462 +        ifioctl
463 +
464 +        As is commonly the case, the IPv6 and ATM network layer ioctl request
465 +        handlers are written in such a way that an unrecognized request is
466 +        passed on unmodified to the link layer, which will either handle it or
467 +        return an error code.
468 +
469 +        Network interface drivers, however, assume that the SIOCSIFADDR,
470 +        SIOCSIFBRDADDR, SIOCSIFDSTADDR and SIOCSIFNETMASK requests have been
471 +        handled at the network layer, and therefore do not perform input
472 +        validation or verify the caller's credentials.  Typical link-layer
473 +        actions for these requests may include marking the interface as "up"
474 +        and resetting the underlying hardware.
475 +
476 + 20130824:
477 +        Fix a bug in sendmail 8.14.7 that interferes with how it
478 +        handles AAAA records interoperating with Microsoft DNS servers.
479 +        FreeBSD has already reported this to Sendmail and a fix
480 +        will be included in the next release.
481 +
482 +        Subversion 1.8.1 is now in the base system as a static
483 +        binary.  It has limited functionality, but can be used to
484 +        checkout/commit code.  It is named svnlite.
485 +
486 + 20130822:
487 +        Fix two security vulnerabilities.
488 +
489 +        Fix an integer overflow in IP_MSFILTER (IP MULTICAST).
490 +        This could be exploited to read memory by a user process.
491 +
492 +        When initializing the SCTP state cookie being sent in INIT-ACK chunks,
493 +        a buffer allocated from the kernel stack is not completely initialized.
494 +
495 +        Import xz 5.0.4
496 +
497 +        Import sqlite 3.7.17
498 +
499 +        Import BIND 9.8.5-P2
500 +
501 + 20130814:
502 +        mksh R48 imported.
503 +
504 +        Sendmail 8.14.7 imported.
505 +
506 + 20130717:
507 +        libmport bug was fixed causing hash verification to fail.
508 +
509 +        virtio(4) imported from FreeBSD 9-stable. SCSI support not
510 +        included.
511 +
512 + 20130612:
513 +        RELENG_0_4 created for 0.4. Development continues on 0.5.
514 +
515 + 20130402:
516 +        Update BIND and OpenSSL to resolve security advisories.
517 +
518 + 20130305:
519 +        MKSH R44 imported.
520 +
521 + 20130213:
522 +        MKSH R42b imported
523 +
524 + 20130211:
525 +        MKSH R42 imported
526 +
527 + 20130125:
528 +        MKSH R41 imported
529 +
530 + 20130122:
531 +        OpenSSH 5.8p2 imported
532 +
533 +        SQLite 3.7.15.2 imported
534 +
535 +        Fixed a longstanding bug in libmport extrating new index files.
536 +
537 + 20120710:
538 +        BSD licensed sort imported from FreeBSD-CURRENT
539 +
540 +        For now, GNU sort is installed as gnusort, but it will
541 +        go away in time.
542 +
543 + 20120708:
544 +        tcsh 6.18.01 imported.
545 +
546 +        NetBSD's iconv imported.
547 +
548 +        libc gains strnlen(3), memrchr(3), stpncpy(3).
549 +
550 + 20120612:
551 +        BIND security update related to CVE-2012-1667.
552 +
553 +        Zero length resource records can cause BIND to crash resulting
554 +        in a DOS attack or information disclosure.
555 +
556 + 20120407:
557 +        mksh R40f (fixes regression)
558 +
559 + 20120328:
560 +        mksh R40e
561 +
562 +        Perl 5.14.2
563 +
564 + 20120229:
565 +        cpucontrol(8) and cpuctl(4) added from FreeBSD 7-stable.
566 +
567 + 20120209:
568 +        mDNSResponder 333.10 imported
569 +
570 + 20111227:
571 +        import raid5 module for GEOM, graid5(8)
572 +
573 +        This is experimental and known to use a lot of kernel
574 +        memory.
575 +
576 + 20111223:
577 +        telnetd: fix a root exploit from a fixed buffer that was not checked
578 +
579 +        pam: don't allow escape from policy path.  Exploitable in KDE, etc.
580 +
581 +        Fix pam_ssh module:
582 +
583 +        If the pam_ssh module is enabled, attackers may be able to gain access
584 +        to user accounts which have unencrypted SSH private keys.
585 +
586 +        This has to due with the way that openssl works.  It ignores unencrpted data.
587 +
588 +        Fix security issue with chroot and ftpd.
589 +
590 +        nsdispatch(3) doesn't know it's working in a chroot and some
591 +        operations can cause files to get reloaded causing a security
592 +        hole in things like ftpd.
593 +
594 + 20111217:
595 +        libdialog/dialog upgraded to an lgpl version. As it's not
596 +        backwardly compatable, include the old libdialog as libodialog
597 +
598 + 20111212:
599 +        mksh r40d imported
600 +
601 + 20111210:
602 +        re(4) and rl(4) updated to support new chips.
603 +
604 +        GEOM synced with FreeBSD 7-stable.
605 +
606 +        MidnightBSD GPT partition types created in sys/gpt.h and
607 +        setup in boot loader and GEOM.
608 +
609 +        amdsbwd(4) (amd watchdog for south bridge) updated to support
610 +        8xx series chipset.
611 +
612 + 20111207:
613 +        import bsd grep from FreeBSD/OpenBSD.
614 +
615 +        MK_BSD_GREP controls which grep is installed
616 +        as grep with the other as bsdgrep or gnugrep.
617 +
618 + 20111122:
619 +        mksh vR40c imported.
620 +
621 + 20111117:
622 +        BIND 9.6 ESV R5 P1
623 +
624 + 20111107:
625 +        tzdata 2011n
626 +
627 + 20111026:
628 +        mDNSResponder v320
629 +
630 +        BIND 9.6 ESV R5
631 +
632 + 20111022:
633 +        cflow 0.0.6 imported
634 +
635 + 20111020:
636 +        less v436 imported
637 +
638 +        amdsbwd(4) AMD southbridge watchdog
639 +
640 + 20111019:
641 +        awk 20110810 imported
642 +
643 +        et(4) Agere Gigabit Ethernet/Fast Ethernet driver added, but
644 +        not included in GENERIC kernel.  The kernel module needs
645 +        testing before we can include it in GENERIC.
646 +
647 +        intr_bind code ported to allow an IRQ to be bound to one
648 +        specific CPU core.
649 +
650 + 20111017:
651 +        Time Zone Data v. 2011l (Released 10 October 2011)
652 +
653 +        Updated list of countries (iso3166) to work with new timezone data.
654 +
655 + 20111015:
656 +        Introduce CPU Affinity in MidnightBSD. cpuset(1) can be used
657 +        to control which core or group of cores can be used for a given
658 +        process. Several new system calls were added to support this
659 +        functionality in the running kernel and for 32bit binary
660 +        compatibility on amd64.
661 +
662 +        The scheduler default has been changed to ULE in i386 and
663 +        amd64.  Changes were made to both schedulers (4BSD AND ULE)
664 +        for this feature.
665 +
666 +        This work is based on Jeff Roberson's FreeBSD 7.1 patches.
667 +
668 + 20111004:
669 +        Fix a problem with unix socket handling caused by the recent
670 +        patch to unix socket path handling. This allows network
671 +        apps to work under the linuxolator again.
672 +
673 + 20111001:
674 +        Import libfetch & fetch(1) from FreeBSD 9. Passive FTP is
675 +        now default and an environment variable must be set to use
676 +        active.
677 +
678 + 20110930:
679 +        Introduce quirks handling for several umass devices including
680 +        USB cameras.  Add workaround for Cyberpower UPS devices.
681 +
682 +        Bring in further bug fixes from FreeBSD and NetBSD for alc(4).
683 +        Stale ip/tcp header pointers are no longer used, lockups fixed
684 +        when network cable is unplugged on bootup, enable TX checksum
685 +        offloading.
686 +
687 +        Add a new man page for gcache(8), a useful geom class when
688 +        working with large raid3 sets.
689 +
690 +        Restore previous workaround for Cypress pata storage controller.
691 +
692 + 20110929:
693 +        Sync ath(4) with FreeBSD 7.3.
694 +
695 +        The following modules are no longer available, and should be
696 +        removed from loader.conf:
697 +        ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
698 +
699 +        alc(4) would hibernate when a cable was unplugged and often
700 +        required bring the interface down and up to "wake up" so that
701 +        a connection could be established.  Disable hibernation.
702 +
703 + 20110928:
704 +        Fix security issues with gzip and compress related to .Z
705 +        files that are corrupted.
706 +
707 +        Fix path validation with unix domain sockets.
708 +
709 + 20110917:
710 +        Remove dependance on mports perl for generating releases as
711 +        it's in the base system.
712 +
713 + 20110914:
714 +        Import xz 5.0.3 with liblzma 5.0.3
715 +
716 + 20110813:
717 +        synced the sparc64 GENERIC kernel configuration with amd64.
718 +
719 + 20110806:
720 +        sqlite 3.7.7.1 imported
721 +
722 +        msearch(1), libmsearch and msearch.import added.  msearch(1) provides
723 +        a full text search command line tool.  libmsearch can also be used
724 +        to build a graphical based search in the future. You can enable
725 +        index building for msearch in periodic.conf or manually run the
726 +        /usr/libexec/msearch.index tool.  Full text indexes take considerable
727 +        space in /var.  I'm using approximately 500MB currently.
728 +
729 +        Fix a long standing bug with the periodic script to check package
730 +        versions.  This will be obsolete with mport though.
731 +
732 + 20110710:
733 +        kdb_enter_why added to MidnightBSD to allow the kernel debugger to
734 +        know why it's in use and thus script can be run.
735 +
736 +        Yet another problem with the perl manifest was fixed
737 +
738 + 20110709:
739 +        cpufreq(1) is a new utility to monitor CPU frequency which may change
740 +        with use of powerd(8) and cpufreq(4).
741 +
742 + 20110612:
743 +        Update mksh to R40
744 +
745 +        Catch up ObsoleteFiles.inc to remove Perl 5.10.x.  Good to run when
746 +        updating current (cd /usr/src && make check-old)
747 +
748 + 20110528:
749 +        Fix CVE-2011-1910 in BIND 9.6.x.  This affects caching resolvers.
750 +
751 + 20110526:
752 +        newfs:
753 +        Raised the default blocksize for UFS/FFS filesystems from
754 +        16K to 32K and the default fragment size from 2K to 4K.
755 +
756 +        This should slightly imporve performance on "advanced format"
757 +        hard drives such as the WD EARS drives. Drives of this type
758 +        have emulation modes that slow down with lower sizes.  Of course
759 +        the drive must still be aligned properly when using fdisk.
760 +
761 + 20110521:
762 +        mport tool now has a deleteall command.  This can be used to remove
763 +        all packages from a system.
764 +
765 +        A few bugs with the perl 5.14 import have been fixed.
766 +
767 + 20110518:
768 +        Perl 5.14.0
769 +
770 + 20110517:
771 +        Sendmail 8.14.5
772 +
773 + 20110314:
774 +        DRM/DRI code updated to support newer video cards. (FreeBSD 7.1)
775 +
776 +        cdevpriv wrappers added
777 +
778 +        nss_mdns hack introduced to work around linking problem.
779 +
780 +        dnsextd fixed after update to mDNSResponder code.
781 +
782 + 20110308:
783 +        Introduce liblzma & xz 5.0.1 to the base system
784 +
785 +        Patch for OpenSSL security issue CVE-2011-0014.
786 +
787 +        "OSREVISION 4004"
788 +
789 +        nsswitch module for multicast dns (nss_mdns) added.
790 +
791 +        tzdata2011c
792 +
793 + 20110220:
794 +        cam(4) syncronized with FreeBSD 7.3.
795 +
796 + 20110219:
797 +        amdtemp(4) updated to support sensors framework.
798 +
799 + 20110217:
800 +        Perl 5.10.1 imported
801 +
802 + 20110216:
803 +        Introduce igb(4) and split Intel Gigabit Ethernet adapters between
804 +        igb(4) and em(4).  Newer devices use igb(4).  The code has moved
805 +        to sys/dev/e1000 for both devices in the kernel. igb(4) has
806 +        been placed in GENERIC on i386 and amd64.
807 +
808 +        Update bfe(4) to support newer devices and WOL.
809 +
810 + 20110215:
811 +        age(4) added.
812 +
813 + 20110208:
814 +        BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
815 +
816 + 20110206:
817 +        eeemon(4) added to monitor Asus Eee PC.
818 +
819 + 20110205:
820 +        OpenSSH 5.7p1
821 +
822 +        GNU sort 6.9 (coreutils)
823 +
824 + 20110203:
825 +        one true awk 20100523 imported
826 +
827 +        sqlite 3.7.5
828 +
829 +        OpenSSL 0.9.8q
830 +
831 + 20110202:
832 +        tcsh 6.17.00
833 +
834 +        file 5.05
835 +
836 + 20110122:
837 +        Import it(4) and lm(4), with support for Super I/O hardware monitors. This
838 +        uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
839 +
840 + 20110120:
841 +        BIND 9.6.2-P3
842 +
843 +        sudo 1.7.4-p6
844 +
845 + 20110115:
846 +        Add experimental jme(4) for Jmicron ethernet devices.
847 +
848 + 20101130:
849 +        A double free exists in the SSL client ECDH handling code, when
850 +        processing specially crafted public keys with invalid prime
851 +        numbers. [CVE-2010-2939]
852 +
853 + 20101120:
854 +        Several portions of the kernel and userland code related to UFS file
855 +        systems (and UFS2) cannot properly handle inode counts above 2^31 due
856 +        to use of int types.  Based on a patch from FreeBSD, I've modified
857 +        our UFS2 implementation to handle unsigned values for inode counts
858 +        which should allow for file systems greater than 16TB.
859 +
860 +        newfs and growfs was also modified.
861 +
862 + 20101110:
863 +        Fix a security issue with pseudofs which could result in running code in kernel
864 +        context or a kernel panic depending on system configuration.  This affects file
865 +        systems such as procfs for instance.
866 +
867 + 20101021:
868 +        sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
869 +        This is similar to functions present in many linux distros. The utility was
870 +        written by Devin Teske for FreeBSD.
871 +
872 + 20100920:
873 +        bzip2 security patch for integer overflow.
874 +
875 + 20100905:
876 +        MidnightBSD RELENG_0_3 branch created.  Aggressive development continues here
877 +        for 0.4.
878 +
879 + 20100902:
880 +        Fix a security issue with libutil that allows users to bypass cpu limits in
881 +        login.conf in some cases.  This combined with OpenSSH for example can allow
882 +        the user to get more resources than they're allowed.
883 +
884 + 20100822:
885 +        Import Apple's mDNSResponder (mdnsd).
886 +
887 + 20100814:
888 +        libdispatch added to MidnightBSD.  This provides functionality found in
889 +        Mac OS X's GCD.  We do not have blocks support yet.  As this code is
890 +        licensed under Apache 2, we create a new MK_APACHE option so that
891 +        it's not required for all users to run code under a license they
892 +        may not like.
893 +
894 + 20100713:
895 +        mbuf readonly fix related to sendfile(2) data corruption.
896 +
897 + 20100704:
898 +        brainfuck(1) imported from MirBSD.
899 +
900   20100505:
901          zlib 1.2.5
902  
# Line 853 | Line 1750 | Contact Warner Losh if you have any questions about yo
1750   this document.
1751  
1752   $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
1753 < $MidnightBSD: src/UPDATING,v 1.88 2010/05/01 00:14:17 laffer1 Exp $
1753 > $MidnightBSD$

Comparing trunk/UPDATING (property cvs2svn:cvs-rev):
Revision 3403 by laffer1, Wed May 5 20:40:34 2010 UTC vs.
Revision 7448 by laffer1, Mon Feb 22 13:06:04 2016 UTC

# Line 1 | Line 0
1 1.89

Comparing trunk/UPDATING (property svn:keywords):
Revision 3403 by laffer1, Wed May 5 20:40:34 2010 UTC vs.
Revision 7448 by laffer1, Mon Feb 22 13:06:04 2016 UTC

# Line 0 | Line 1
1 + MidnightBSD=%H

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines