[ViewVC] Diff of: src/trunk/UPDATING

Comparing trunk/UPDATING (file contents):
Revision 7037 by laffer1, Thu Jun 18 17:00:55 2015 UTC vs.
Revision 7448 by laffer1, Mon Feb 22 13:06:04 2016 UTC

+Updating Information for MidnightBSD users.
-+
+20160222:
-+
+        Introduce pipe2 to linux emulation layer.
-+
+20160114:
-+
+        OpenSSL
-+
-+
+        The signature verification routines will crash with a NULL pointer dereference
-+
+        if presented with an ASN.1 signature using the RSA PSS algorithm and absent
-+
+        mask generation function parameter. [CVE-2015-3194]
-+
-+
+        When presented with a malformed X509_ATTRIBUTE structure, OpenSSL will leak
-+
+        memory. [CVE-2015-3195]
-+
-+
+        If PSK identity hints are received by a multi-threaded client then the values
-+
+        are incorrectly updated in the parent SSL_CTX structure.  [CVE-2015-3196]
-+
-+
+        Fix security on bsnmpd configuration file during installation.
-+
-+
+        TCP MD5 signature denial of service
-+
-+
+        A programming error in processing a TCP connection with both TCP_MD5SIG
-+
+        and TCP_NOOPT socket options may lead to kernel crash.
-+
-+
+        SCTP
-+
-+
+        A lack of proper input checks in the ICMPv6 processing in the SCTP stack
-+
+        can lead to either a failed kernel assertion or to a NULL pointer
-+
+        dereference.  In either case, a kernel panic will follow.
-+
-+
+20160102:
-+
+        Happy New Year
-+
-+
+20151101:
-+
+        Increase kern.ipc.somaxconn default to 256.
-+
-+
+20151017:
-+
+        Add initial statistics api to libmport and a driver to print
-+
+        it in mport(1).
-+
-+
+20151002:
-+
+        Revised rpcbind(8) patch to fix issues with NIS
-+
-+
+20150930:
-+
+        In rpcbind(8), netbuf structures are copied directly, which would result in
-+
+        two netbuf structures that reference to one shared address buffer.  When one
-+
+        of the two netbuf structures is freed, access to the other netbuf structure
-+
+        would result in an undefined result that may crash the rpcbind(8) daemon.
-+
-+
+20150926:
-+
+        libmport now supports @preexec, @postexec, @preunexec and @postunexec
-+
+        to replace @exec and @unexec.
-+
-+
+        pre exec runs afer pre-install scripts but before actual installation
-+
-+
+        post exec runs after install but before post install scripts and
-+
+        pkg message.
-+
-+
+        pre unexec runs before pre uninstall scripts
-+
-+
+        post unexec runs before de-install scripts and after file removal.
-+
-+
+20150917:
-+
+        Fix kqueue write events for files > 2GB
-+
-+
+20150825:
-+
+        kernel:
-+
+        fix a security issue on amd64 where the GS segment CPU register can be changed via
-+
+        userland value in kernel mode by using an IRET with #SS or #NP exceptions.
-+
-+
+        openssh:
-+
+        A programming error in the privileged monitor process of the sshd(8)
-+
+        service may allow the username of an already-authenticated user to be
-+
+        overwritten by the unprivileged child process.
-+
-+
+        A use-after-free error in the privileged monitor process of he sshd(8)
-+
+        service may be deterministically triggered by the actions of a
-+
+        compromised unprivileged child process.
-+
-+
+        A use-after-free error in the session multiplexing code in the sshd(8)
-+
+        service may result in unintended termination of the connection.
-+
-+
+20150818:
-+
+        expat security fix
-+
-+
+20150815:
-+
+        libc changes:
-+
+        setmode(3) now returns errno consistently on error.
-+
+        libc will compile without error using clang
-+
-+
+20150814:
-+
+        wait6 system call added.
-+
-+
+        date(1) now handles non numeric numbers passed to -r
-+
+        like GNU coreutils for improved compatibility.
-+
-+
+20150811:
-+
+        ata(4) AMD Hudson2 SATA controller support.
-+
+        Intel lynxpoint SATA.
-+
-+
+        Fix some const warnings when building several device drivers
-+
+        with llvm/clang.
-+
-+
+        Sync cas(4) with FreeBSD 9-stable.
-+
-+
+        Fix some minor issues with ath(4).
-+
-+
+20150809:
-+
+        xz 5.0.8
-+
-+
+20150808:
-+
+        libmport now logs installation and removal of packages to syslog.
-+
-+
+20150805:
-+
+        routed - fix a potential security issue where traffic from outside
-+
+        the network can disrupt routing.
-+
-+
+        bsd patch - fix a bug with ed(1) scripts allowing unsanitized input
-+
+        to run.
-+
-+
+20150802:
-+
+        jansson 2.7 library added. (libjansson is a JSON library in C)
-+
-+
+20150728:
-+
+        Heimdal 1.5.2 (kerberos implementation)
-+
-+
+        OpenSSL 1.0.1o
-+
-+
+        cpucontrol(8) now supports VIA CPUs. Synced with FreeBSD 9.2.
-+
-+
+        TCP Resassemly resource exhaustion bug:
-+
+        There is a mistake with the introduction of VNET, which converted the
-+
+        global limit on the number of segments that could belong to reassembly
-+
+        queues into a per-VNET limit.  Because mbufs are allocated from a
-+
+        global pool, in the presence of a sufficient number of VNETs, the
-+
+        total number of mbufs attached to reassembly queues can grow to the
-+
+        total number of mbufs in the system, at which point all network
-+
+        traffic would cease.
-+
+        Obtained from: FreeBSD 8
-+
-+
+        OpenSSH
-+
-+
+        Fix two security vulnerabilities:
-+
+        OpenSSH clients does not correctly verify DNS SSHFP records when a server
-+
+        offers a certificate. [CVE-2014-2653]
-+
-+
+        OpenSSH servers which are configured to allow password authentication
-+
+        using PAM (default) would allow many password attempts. A bug allows
-+
+        MaxAuthTries to be bypassed. [CVE-2015-5600]
-+
-+
-+
+        Switch to bsdpatch (from FreeBSD & OpenBSD)
-+
-+
+20150726:
-+
+        BSD Sort updated
-+
-+
+        sqlite 3.8.10.2
-+
-+
+20150725:
-+
+        Import reallocarray from OpenBSD's libc.
-+
-+
+        The reallocarray() function is similar to realloc() except it operates on
-+
+        nmemb members of size size and checks for integer overflow in the
-+
+        calculation nmemb * size.
-+
-+
+20150722:
-+
+        Fix a bug where TCP connections transitioning to LAST_ACK
-+
+        state can get stuck. This can result in a denial of service.
-+
-+
+20150715:
-+
+        libmport now supports @shell and @sample in plists. This means that
-+
+        a shell port can automatically add an entry to /etc/shells and remove
-+
+        it upon uninstallation. For sample files, a copy is made without the
-+
+        .sample extension if one does not exist and it is removed automatically
-+
+        only if the md5 hash of the two files is the same.
-+
-+
+20150709:
-+
+        flex 2.5.39
-+
-+
+20150702:
-+
+        ZFS in MidnightBSD now supports lz4 compression. You can enable it
-+
+        with zfs set compression=lz4 pool/path.
-+
-+
+        Verify it's working with
-+
+        zfs get compressratio pool/path
-+
+        du -h -s *
-+
-+
+        Note you must write new data when turning on compression to see
-+
+        changes. Existing files are not compressed.
-+
-+
+        Note: While we used the same basic implementation of lz4 that
-+
+        FreeBSD and OpenZFS uses, we did not yet implement features support
-+
+        and the zfs version still reports 28. This may come in a future update
-+
+        to ZFS.
-+
-+
+20150621:
-+
+        libmport now automatically stops services when deleting packages.
-+
-+
+        The package must have installed an rc.d script in /usr/local/etc
-+
+        for this to work. This is equivalent to running service <name> onestop
-+
+20150618:
-+
+        Sendmail
-+
+        With the recent changes to OpenSSL to block 512 bit certificates,
+        sendmail can't connect with TLS to some servers.
+        Increase the default size to 1024 bit for client connections to
+        match the server configuration.
-+
-+
+        ZFS
-+
-+
+        Added ZFS TRIM support which is enabled by default. To disable
-+
+        ZFS TRIM support set vfs.zfs.trim.enabled=0 in loader.conf.
-+
-+
+        Creating new ZFS pools and adding new devices to existing pools
-+
+        first performs a full device level TRIM which can take a significant
-+
+        amount of time. The sysctl vfs.zfs.vdev.trim_on_init can be set to 0
-+
+        to disable this behaviour.
-+
-+
+        ZFS TRIM requires the underlying device support BIO_DELETE which
-+
+        is currently provided by methods such as ATA TRIM and SCSI UNMAP
-+
+        via CAM, which are typically supported by SSD's.
-+
-+
+        Stats for ZFS TRIM can be monitored by looking at the sysctl's
-+
+        under kstat.zfs.misc.zio_trim.
-+
-+
+        rc.d
-+
-+
+        Reworked handling of cleanvar and FILESYSTEMS so that FILESYSTEMS
-+
+        implies everything is mounted and ready to go.
-+
-+
+        Changed how ip6addressctl maps IPv6 on startup.
+20150613:
+        tzdata 2015d

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing trunk/UPDATING (file contents): Revision 7037 by laffer1, Thu Jun 18 17:00:55 2015 UTC vs. Revision 7448 by laffer1, Mon Feb 22 13:06:04 2016 UTC

Diff Legend

Comparing trunk/UPDATING (file contents):
Revision 7037 by laffer1, Thu Jun 18 17:00:55 2015 UTC vs.
Revision 7448 by laffer1, Mon Feb 22 13:06:04 2016 UTC