ViewVC Help
View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing
root/src/trunk/UPDATING
(Generate patch)

Comparing trunk/UPDATING (file contents):
Revision 7448 by laffer1, Mon Feb 22 13:06:04 2016 UTC vs.
Revision 7725 by laffer1, Fri Aug 12 17:04:07 2016 UTC

# Line 1 | Line 1
1   Updating Information for MidnightBSD users.
2  
3 + 20160811:
4 +        libdispatch 210
5 +
6 +        Added quirks for several models of SSDs to enable advanced format/4k mode. List includes
7 +        Samsung 830, 840, 850 and 750 series, Intel x25 and a few Toshiba models. Also
8 +        added WD Red drives.
9 +
10 +        Updated list of pci device vendors.
11 +
12 +        Updated list of usb devices.
13 +
14 + 20160807:
15 +        Implement several changes to libmport to fix some memory corruption issues.
16 +
17 + 20160806:
18 +        sqlite3 3.13.0
19 +
20 + 20160805:
21 +        Merged fixes for libmport that improve error handling when installing packages. Also
22 +        support mkdir -p like behavior for plist entries.
23 +
24 + 20160531:
25 +        Fix four security issues with MidnightBSD.
26 +
27 +        The implementation of TIOCGSERIAL ioctl(2) does not clear the output
28 +        struct before sending to userland in the linux emulation layer.
29 +
30 +        The compat 43 stat(2) system call exposes kernel stack to userland.
31 +
32 +        libarchive - CVE-2015-2304 and CVE-2013-0211 fix issues with
33 +        cpio directory traversal and an integer signedness error in the archive
34 +        write zip data routine.
35 +
36 +
37 + 20160528:
38 +        Fixed minor issues with mined(1) and msearch(1).
39 +
40 + 20160526:
41 +        Add support for Ivybridge and Haswell Intel CPUs to hwpmc(4).
42 +
43 +        Fix libpmc(3) build with clang compiler.
44 +
45 + 20160519:
46 +        Kernel Security updates
47 +
48 +        atkbd(4) - Incorrect signedness comparison in the ioctl(2) handler allows a malicious
49 +        local user to overwrite a portion of the kernel memory.
50 +
51 +        Incorrect argument handling in sendmsg(2)
52 +
53 +        Incorrect argument handling in the socket code allows malicious local
54 +        user to overwrite large portion of the kernel memory.
55 +
56 + 20160505:
57 +        OpenSSL security patch
58 +
59 +        The padding check in AES-NI CBC MAC was rewritten to be in constant time
60 +        by making sure that always the same bytes are read and compared against
61 +        either the MAC or padding bytes. But it no longer checked that there was
62 +        enough data to have both the MAC and padding bytes. [CVE-2016-2107]
63 +
64 +        An overflow can occur in the EVP_EncodeUpdate() function which is used for
65 +        Base64 encoding of binary data. [CVE-2016-2105]
66 +
67 +        An overflow can occur in the EVP_EncryptUpdate() function, however it is
68 +        believed that there can be no overflows in internal code due to this problem.
69 +        [CVE-2016-2106]
70 +
71 +        When ASN.1 data is read from a BIO using functions such as d2i_CMS_bio()
72 +        a short invalid encoding can casuse allocation of large amounts of memory
73 +        potentially consuming excessive resources or exhausting memory.
74 +        [CVE-2016-2109]
75 +
76 + 20160412:
77 +        0.8 stable branch created. Continue development as 0.9.
78 +
79 +        Fix several issues with wait6 system call addition.
80 +
81 + 20160409:
82 +        libmport now supports two new plist formats:
83 +        @(root,wheel,4775) myfile
84 +        @dir(root,wheel,775) mydir
85 +
86 +        On delete, absoluate paths are now handled properly.
87 +
88 + 20160317:
89 +        OpenSSH doesn't have the luck of the Irish.
90 +
91 +        Fix a security issue with OpenSSH X11 forwarding that can allow an attacker
92 +        run shell commands on the call to xauth.
93 +
94 +        Incorrect argument validation in sysarch(2)
95 +
96 +        A special combination of sysarch(2) arguments, specify a request to
97 +        uninstall a set of descriptors from the LDT.  The start descriptor
98 +        is cleared and the number of descriptors are provided.  Due to invalid
99 +        use of a signed intermediate value in the bounds checking during argument
100 +        validity verification, unbound zero'ing of the process LDT and adjacent
101 +        memory can be initiated from usermode.
102 +
103 +        Patch obtained from FreeBSD.
104 +
105 + 20160229:
106 +        top now displays information on ZFS arc cache.
107 +
108 + 20160228:
109 +        llvm + clang 3.3 is now the default compiler in MidnightBSD.
110 +
111   20160222:
112          Introduce pipe2 to linux emulation layer.
113  

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines